Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
File: GE0fQIM4P1aJXW4-c6igd63rUMs.mft (raw, json)
Hash identifier: pYgtrmc+GIYYumZsaMmrY56T0TVUw8TG7FpYgHkEeHE=
Subject key identifier: F3:93:6A:F0:97:E4:1F:2B:D2:E6:6D:7F:18:09:F3:8D:10:2E:8C:D6
Authority key identifier: 18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
Certificate issuer: /CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Certificate serial: 019CAB6B04AC4FAB5752F01651AD6C590833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
Manifest number: 0E73
Signing time: Sun 01 Mar 2026 22:00:43 +0000
Manifest this update: Sun 01 Mar 2026 22:00:43 +0000
Manifest next update: Mon 02 Mar 2026 22:00:43 +0000
Files and hashes: 1: GE0fQIM4P1aJXW4-c6igd63rUMs.crl (hash: 1s5UzmzrPGmDkgp38FOvJNlo6BOAUCfn40ENe+cwshk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:04:ac:4f:ab:57:52:f0:16:51:ad:6c:59:08:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Validity
Not Before: Mar 1 22:00:43 2026 GMT
Not After : Mar 2 22:00:43 2026 GMT
Subject: CN=f3936af097e41f2bd2e66d7f1809f38d102e8cd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:8e:c4:85:fd:ce:cc:04:e7:32:8d:85:d6:
af:18:e6:36:f4:6c:cc:6d:48:2e:33:39:4d:6e:62:
25:6d:1b:47:d1:94:15:ee:c6:bc:d3:cb:7c:04:df:
93:87:25:b8:f7:23:68:f9:80:4d:2b:dc:2c:4e:5f:
98:1f:26:ff:5e:52:28:64:85:2a:a7:4b:c5:b7:7e:
73:9d:86:d8:00:f4:05:ee:38:a2:2a:36:db:f2:ed:
47:f0:7c:2c:6f:ae:41:99:44:06:47:e4:89:f3:14:
48:11:04:5c:9a:ca:30:fa:6d:73:74:c3:07:a1:6f:
a3:6c:50:5b:6e:e7:22:ab:b2:1b:14:23:c6:4a:fe:
53:96:97:60:6a:f9:3b:2f:1a:18:5e:03:8c:c2:6c:
f4:19:db:17:18:bd:13:af:87:55:c4:de:50:e0:23:
45:49:6c:f2:8c:90:12:51:bd:ac:e7:7d:f7:ad:7e:
d7:5c:48:cc:fd:93:61:c3:e9:8e:e6:12:f3:eb:74:
80:ba:f9:36:b3:52:31:e1:14:10:74:2f:4f:f9:0b:
b7:5b:6e:89:a5:b3:72:87:2a:0f:03:ac:61:6a:c6:
22:5b:0d:be:25:d2:a2:84:55:1d:b9:49:09:8a:80:
ed:c1:cc:8f:92:6c:61:fb:21:5b:56:e6:8a:bd:fb:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:93:6A:F0:97:E4:1F:2B:D2:E6:6D:7F:18:09:F3:8D:10:2E:8C:D6
X509v3 Authority Key Identifier:
keyid:18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ee:4d:26:15:6b:9a:0f:72:e0:dd:ca:db:4e:77:e3:c9:95:
bb:71:37:78:6a:36:64:8d:ac:a1:9b:58:14:3f:4e:ca:50:2f:
50:c2:a5:a7:95:bf:ef:0e:f6:f7:f0:0a:6b:dc:b8:2d:02:04:
a2:e1:9f:1b:f1:3b:3a:ee:a3:13:45:0b:a4:f5:21:90:2c:04:
c8:eb:96:fd:0e:f3:31:72:71:b3:ee:47:7b:6d:d2:fb:94:12:
37:06:d9:a4:b6:d5:28:98:86:20:b9:de:25:23:db:5f:a2:70:
bf:03:47:b4:6c:ef:e1:44:ea:49:2a:f8:7d:e5:7c:f8:1f:7b:
44:92:f3:88:2e:0e:52:b2:76:46:79:05:a6:22:4b:fc:79:65:
f8:26:f4:d3:c7:ba:e7:ed:8b:10:d6:71:2e:df:61:03:40:6d:
5a:35:57:7f:1e:11:f1:9b:35:58:f8:62:ab:7c:84:2f:62:50:
62:12:be:ac:81:89:71:50:72:d3:bd:b9:ac:33:fa:47:97:b9:
dd:dd:94:af:a8:2a:0d:23:ec:33:99:a6:4e:b1:e7:bc:ff:5a:
4d:cc:c7:3f:19:c1:e1:c3:3a:9f:77:11:a5:5f:95:1a:c5:28:
ee:19:f9:03:91:18:36:06:e7:51:2f:e6:93:91:a7:86:79:c0:
3e:ca:b8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:49:21 2026 by rpki-client