Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
File: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft (raw, json)
Hash identifier: Y8jTy0CiJNQE1ds2gAkLyjSBg6jWmKkU0057lpSM+Fc=
Subject key identifier: 63:0D:90:0C:3C:8B:D1:9A:9C:53:76:A3:50:60:DC:F3:39:90:EF:F5
Authority key identifier: 18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
Certificate issuer: /CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Certificate serial: 019D39AE8861763BDB1B90AF3BE1D1A6878B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
Manifest number: 0B57
Signing time: Sun 29 Mar 2026 13:00:32 +0000
Manifest this update: Sun 29 Mar 2026 13:00:32 +0000
Manifest next update: Mon 30 Mar 2026 13:00:32 +0000
Files and hashes: 1: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl (hash: zrOC9g9N5RIUg0wHmGkdHl4jRZt5/8njQAuF1NDsRGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:88:61:76:3b:db:1b:90:af:3b:e1:d1:a6:87:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Validity
Not Before: Mar 29 13:00:32 2026 GMT
Not After : Mar 30 13:00:32 2026 GMT
Subject: CN=630d900c3c8bd19a9c5376a35060dcf33990eff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7e:d8:51:0a:0b:d1:c2:f4:43:21:cc:10:b8:
58:f4:3b:53:0a:21:a4:6f:c8:2c:5b:73:c5:93:18:
f3:ba:41:2e:41:68:83:41:2d:47:12:5b:95:4b:d3:
7c:4e:4b:94:6b:6d:f5:b3:23:37:e1:b0:6c:ff:9d:
a4:8d:f2:a3:c7:36:f8:29:54:7a:40:c6:5a:24:67:
e3:b8:31:e6:a1:49:f7:78:98:6a:6b:a8:38:4f:e8:
f1:70:43:c3:d8:79:d6:60:3d:cf:05:2d:e3:07:77:
45:13:92:0b:35:6f:a4:be:f7:92:56:0f:d0:f1:01:
0d:45:39:65:7e:72:1a:18:fb:6a:bf:60:ae:fd:94:
73:94:e6:ba:0b:f8:be:5d:2f:30:9c:fd:26:33:1e:
fe:e4:98:76:09:19:7d:6d:c5:8f:4a:01:4d:63:ea:
94:74:5b:20:1f:9e:56:92:b7:aa:a6:ce:95:bc:4d:
3f:f2:b3:a4:1b:60:4a:e1:2a:4e:f8:3b:aa:14:ff:
db:a0:60:40:7c:d9:a1:99:1f:bc:ba:fb:cf:91:70:
88:63:49:af:0c:86:28:01:a3:10:2b:1e:84:fb:77:
83:34:50:29:78:c4:2d:fb:5c:c5:9d:c6:f8:41:1d:
11:e4:1c:1a:fe:f9:d2:73:98:b5:45:ba:ef:38:92:
0d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:0D:90:0C:3C:8B:D1:9A:9C:53:76:A3:50:60:DC:F3:39:90:EF:F5
X509v3 Authority Key Identifier:
keyid:18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:64:20:39:1b:36:a5:0b:9c:c1:42:f6:fd:8d:61:87:3e:74:
90:b0:b8:d7:e7:b5:5d:88:31:91:68:9c:91:5e:af:a6:2b:d8:
49:19:3d:4f:23:0c:9c:06:f5:28:b5:11:0e:de:af:ab:32:c7:
fe:29:8b:5a:bc:b2:a5:3d:de:f5:6e:e3:72:e4:81:23:df:1a:
e0:1a:5a:a8:bf:b0:d1:5a:4f:f3:d3:17:6b:df:68:1c:ea:59:
d8:53:6f:4e:df:43:3a:18:c5:ca:80:1a:ca:ff:66:cf:e3:a3:
4e:bc:1e:0a:b3:2f:fa:f6:56:10:f6:10:70:61:04:d0:e7:f9:
62:18:14:8f:54:e8:78:59:5a:c6:0c:99:4b:f8:68:10:46:de:
7a:e9:d4:c1:e3:f8:9b:37:15:b0:92:14:d6:55:b2:c0:d2:c0:
8a:81:33:65:ec:5a:9e:66:a0:66:f9:e7:28:f9:0f:34:c3:35:
08:f4:d8:40:df:eb:c6:61:a3:2c:39:68:b3:bc:cf:ec:ad:26:
b3:76:bf:42:2e:e9:6f:bd:36:7b:70:4d:2c:86:fd:23:fe:fa:
36:fd:8e:4f:01:a6:c1:a7:8b:5b:5f:30:82:7e:aa:ff:8c:32:
23:1d:17:6e:5f:67:56:e4:60:0b:94:ee:f3:c2:e7:17:f2:75:
3b:4a:fa:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:50 2026 by rpki-client