Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier: zKRFl1r7gm5Wz+aDE79kI8NsZSlAk2kSu5tkpgH3qlI=
Subject key identifier: 43:A4:3D:8E:A0:FA:5F:E1:84:CA:F9:AD:BD:D4:70:84:B8:A0:5F:CF
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 019D37F78CB99FC02F4CB9A0BD97A39A151A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number: 0EFD
Signing time: Sun 29 Mar 2026 05:01:03 +0000
Manifest this update: Sun 29 Mar 2026 05:01:03 +0000
Manifest next update: Mon 30 Mar 2026 05:01:03 +0000
Files and hashes: 1: GE__PPkA52quDSzS533-riTF0kw.crl (hash: T99Ip2lNfuTXVPjiTjIcWDEsqAnmD0FFAnCkkMarzZ4=)
2: rUaeP0oUdPvhV-Z1zHmVDofPVMg.roa (hash: yKtILw4rHDCHQjsROea7n0Z4TscVtMBleCX2L+hkG+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:8c:b9:9f:c0:2f:4c:b9:a0:bd:97:a3:9a:15:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Mar 29 05:01:03 2026 GMT
Not After : Mar 30 05:01:03 2026 GMT
Subject: CN=43a43d8ea0fa5fe184caf9adbdd47084b8a05fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3a:68:64:ca:ab:d7:78:bf:1e:5f:ef:1a:fb:
94:51:74:21:47:96:6e:35:21:21:19:b2:7a:86:4e:
d8:d9:fd:09:6d:81:76:b1:a5:a4:d0:88:d6:45:1c:
03:34:e1:72:b0:95:15:50:ee:75:88:ae:54:83:d3:
8f:d2:8a:f3:60:7c:79:55:66:63:ac:7e:9a:0e:ee:
f2:9c:76:ad:81:60:6c:45:c4:6e:32:cc:84:86:8a:
9e:db:f9:c5:b0:cc:72:dc:0b:de:58:4f:a2:28:27:
06:82:36:3d:b6:fd:56:c0:06:7c:66:10:0d:47:d8:
11:4a:24:d5:e1:b5:c2:fb:02:a2:b8:c7:6d:36:c8:
0a:ab:98:1e:fc:10:d6:d3:6d:b7:7a:50:b6:55:58:
39:6b:4d:5a:22:59:e6:1e:43:51:cf:9c:9c:6e:33:
43:f9:6a:5e:1d:dd:81:6d:e5:9c:c1:ed:e5:27:9b:
a6:9d:67:a3:63:23:3e:85:54:94:2e:02:ee:a4:bf:
b0:06:fc:7b:ef:61:ab:4f:5b:98:c2:54:81:9c:fd:
c5:7a:6d:a5:b6:6c:a8:5e:05:01:7e:f7:21:3b:94:
cd:7b:14:3f:08:88:17:21:00:05:6b:41:d1:dd:99:
8a:d5:92:22:09:72:84:90:83:ce:5e:8e:62:7c:48:
e6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A4:3D:8E:A0:FA:5F:E1:84:CA:F9:AD:BD:D4:70:84:B8:A0:5F:CF
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:46:6c:60:27:38:72:22:6f:a1:07:22:41:b3:da:f5:b4:0b:
a3:42:b3:0d:3a:3f:93:1a:65:6a:58:62:a8:1b:97:d7:c6:42:
1f:33:28:70:81:ef:1e:cd:8f:c2:f4:ca:85:3a:92:ae:e2:91:
35:9a:5d:22:ac:d8:26:56:c3:ec:2d:a7:fe:56:49:e3:74:1e:
0d:cc:be:29:60:85:75:66:65:cf:f6:a8:a3:fb:70:bc:02:7f:
0b:c2:35:91:9f:fb:bb:2b:29:b6:ff:06:d4:9b:de:d1:b0:c0:
90:fe:b1:89:34:67:59:8d:88:af:24:08:a4:a0:d6:86:bb:41:
01:21:62:d8:07:1b:ed:79:ca:e9:c1:37:74:5b:37:42:a5:6e:
ce:43:b6:7e:a7:04:f9:a6:77:74:75:74:14:eb:0f:51:44:9b:
5e:e0:f1:a8:ad:6d:87:bb:43:77:dc:72:e3:f6:12:cd:c5:e9:
4b:3e:5d:c3:53:bb:90:be:3e:cb:ee:93:87:c2:cb:12:7d:c2:
a8:b1:f7:a0:1e:7e:4c:70:f2:a7:44:df:f1:05:b5:69:29:5c:
c7:b6:6d:08:1f:38:f4:c5:3f:66:eb:d1:48:0e:3b:9e:d4:3f:
19:e5:14:6b:f8:58:63:b9:f4:64:01:66:d0:43:44:16:08:8c:
61:c9:eb:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:59:15 2026 by rpki-client