Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
File: GEF3t2iRATugJ7Nebt_B6fgpXOw.mft (raw, json)
Hash identifier: +mJ/KCQ/MePR69OqCpTRQs3nFbFYLOmO8H2dMoSrnTU=
Subject key identifier: 9C:64:F5:7D:FE:78:72:BB:17:8D:9C:CC:EB:23:B5:EE:9E:48:48:20
Authority key identifier: 18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
Certificate issuer: /CN=184177b76891013ba027b35e6edfc1e9f8295cec
Certificate serial: 019D389BAD30AA6CA8ED17A3D7952AD567D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
Manifest number: 0E03
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: GEF3t2iRATugJ7Nebt_B6fgpXOw.crl (hash: S0Yqeo/zGgI2ouChVUSMfRcS79lltyc6REDbrH6EUps=)
2: Zr1lz5illLKoaxKZ1sPrFrxE65k.roa (hash: clb6vWfmi3tkVbNg1UE8cBsih42ezBAsgHbPTGZFqL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ad:30:aa:6c:a8:ed:17:a3:d7:95:2a:d5:67:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184177b76891013ba027b35e6edfc1e9f8295cec
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=9c64f57dfe7872bb178d9ccceb23b5ee9e484820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:7c:5f:b8:1c:ed:33:43:8c:85:6f:bc:31:
25:2c:44:2c:31:ee:97:78:93:80:74:bb:e2:34:ec:
57:be:da:8e:b3:2f:72:de:c6:5b:24:20:78:ae:60:
12:4a:c6:f3:94:25:16:a0:34:a6:b1:7a:5c:5b:ac:
09:25:48:6b:bc:a6:25:42:78:b5:65:68:32:91:aa:
83:ae:58:e5:33:54:59:5a:aa:ba:3e:96:db:f0:0f:
37:c1:a8:8d:dc:7b:3a:45:c0:29:57:41:d8:15:45:
cf:0f:3d:b1:65:ab:18:e1:37:52:de:68:d7:89:08:
3f:d0:1c:3e:1d:1a:70:bb:e2:2a:b8:50:fc:6f:c3:
55:53:80:fa:e1:7f:f9:67:03:82:4b:5c:b6:78:bb:
7a:19:ed:52:e9:97:13:c3:a0:44:e6:25:35:45:37:
31:9d:c6:09:e7:cb:63:ea:68:ea:cc:28:0c:13:19:
ef:9b:8f:ab:c6:25:0b:6f:6d:15:d9:14:89:92:25:
07:22:1e:d5:a9:2b:d1:41:da:53:6a:7a:7a:7b:96:
34:13:c8:c6:30:a6:d7:5a:e6:58:dc:10:3d:5a:e3:
ee:50:d6:fb:71:6b:d9:4b:97:11:11:8e:5d:33:03:
50:e1:79:11:a9:87:cc:f9:cf:5c:67:4e:89:1f:e5:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:64:F5:7D:FE:78:72:BB:17:8D:9C:CC:EB:23:B5:EE:9E:48:48:20
X509v3 Authority Key Identifier:
keyid:18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:15:19:50:e7:27:af:32:34:90:26:0e:6c:0c:dd:47:57:e7:
b1:7c:5b:b3:c7:65:d2:c1:91:89:11:29:05:e6:09:1d:de:c7:
96:b0:14:c7:6d:96:53:3d:dd:b5:bd:ae:07:51:ef:31:06:6d:
72:31:92:b6:39:05:ca:66:91:96:29:c0:b4:71:ef:31:60:54:
23:87:4e:40:fd:6b:02:56:37:6d:aa:e1:3b:09:44:93:d4:ae:
11:89:93:06:fc:77:8c:28:53:47:de:94:2b:05:d3:76:48:1f:
7b:74:f2:e9:a7:aa:f1:3a:96:bd:4c:12:1a:4f:34:91:17:51:
45:90:51:5a:92:18:4d:c5:23:85:72:76:24:f9:69:5c:d7:fc:
a0:3e:60:72:b9:b2:f9:7e:31:f9:d4:61:04:fa:1f:a6:c8:5c:
59:3b:5d:31:83:28:c8:b4:2c:4a:41:54:23:c5:b1:d5:d9:63:
ab:ce:a2:48:e5:24:88:b9:62:54:fd:6d:f7:5f:01:b8:26:2b:
6f:5d:6c:bc:5c:fc:b0:2a:8a:88:70:d9:80:ae:45:e9:08:8f:
b8:a1:70:3c:9b:2d:fa:93:48:69:7a:1e:21:d1:5c:51:19:f0:
d9:b5:eb:03:3b:36:ca:c1:b9:28:ff:6c:18:43:52:00:27:c6:
0e:eb:7c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:20:23 2026 by rpki-client