Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
File: GEF3t2iRATugJ7Nebt_B6fgpXOw.mft (raw, json)
Hash identifier: OrB4a++aEeYHtHxNHH2NxU0Isnig0rLI0QeqhZXkiYw=
Subject key identifier: 95:45:BA:3E:5A:1F:2F:64:B1:28:05:65:40:86:3C:D0:22:95:DF:94
Authority key identifier: 18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
Certificate issuer: /CN=184177b76891013ba027b35e6edfc1e9f8295cec
Certificate serial: 019CABA1FA85A606F5F8BAD58B7DCE68E61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
Manifest number: 0DBA
Signing time: Sun 01 Mar 2026 23:00:45 +0000
Manifest this update: Sun 01 Mar 2026 23:00:45 +0000
Manifest next update: Mon 02 Mar 2026 23:00:45 +0000
Files and hashes: 1: GEF3t2iRATugJ7Nebt_B6fgpXOw.crl (hash: WCuc4iP2X2MLNYn8NRDUSqUPO5KSYLhLyhog8N5jo4I=)
2: Zr1lz5illLKoaxKZ1sPrFrxE65k.roa (hash: clb6vWfmi3tkVbNg1UE8cBsih42ezBAsgHbPTGZFqL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:fa:85:a6:06:f5:f8:ba:d5:8b:7d:ce:68:e6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184177b76891013ba027b35e6edfc1e9f8295cec
Validity
Not Before: Mar 1 23:00:45 2026 GMT
Not After : Mar 2 23:00:45 2026 GMT
Subject: CN=9545ba3e5a1f2f64b128056540863cd02295df94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:fa:40:f0:73:e9:c7:b7:ae:dc:4a:71:3f:
75:ce:17:72:5e:e1:97:e9:b1:cc:ba:ca:99:63:c2:
a9:87:c3:14:74:e4:83:cb:ac:91:b2:01:45:dc:ec:
8d:06:37:93:90:f0:b0:49:0e:50:35:ec:24:9e:c5:
ce:a3:80:83:f2:26:8d:b2:b0:03:df:93:4e:33:0c:
50:a2:14:b9:31:42:68:5a:be:5e:2a:88:b9:cb:65:
82:d9:6f:e4:11:c5:ed:b2:ee:de:30:89:db:90:a3:
45:a0:e1:7e:e2:14:0f:73:b2:74:64:9e:32:2a:01:
66:21:80:51:c3:15:fd:4f:1b:65:ee:ab:cf:1a:71:
f6:83:55:d0:1e:e9:4f:1a:94:56:1b:bf:45:70:7a:
6f:2d:7e:fb:92:2a:33:29:c0:3f:b7:f4:2a:a0:df:
51:fb:97:f7:e5:e8:18:1c:38:ae:af:17:c3:6a:32:
55:2b:cb:e8:22:8c:b3:3c:ff:76:82:44:04:70:ec:
fc:cf:63:41:95:bb:93:d2:84:da:25:6c:e1:fb:67:
71:a8:4d:97:ce:43:d8:0b:07:8b:f4:cc:fb:0c:db:
3f:97:c0:bb:11:d8:dd:d1:8e:fa:58:be:c9:ec:d9:
83:8b:be:f8:a0:31:d3:bc:84:02:38:c3:aa:71:98:
6f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:45:BA:3E:5A:1F:2F:64:B1:28:05:65:40:86:3C:D0:22:95:DF:94
X509v3 Authority Key Identifier:
keyid:18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:85:97:80:20:e0:47:91:89:eb:06:d9:81:7f:21:0d:6c:32:
de:64:88:8d:fe:95:9b:a9:22:ca:06:37:59:bb:a6:8e:16:2c:
6b:18:83:58:8b:a5:5b:46:d2:1d:f1:35:ff:7a:74:37:a8:4f:
46:5b:8a:0f:c8:5e:72:d8:b3:bf:83:eb:d6:e2:a1:5c:81:19:
b8:b8:5d:a7:a4:e7:44:26:83:a3:1a:d1:04:45:76:05:29:1d:
8b:57:e7:f2:61:4f:f4:f9:90:01:b7:c0:14:bf:36:f5:b2:15:
0f:80:03:e9:ce:dd:94:4b:63:a3:1b:e7:39:19:5d:f2:27:a2:
2a:d3:14:38:de:29:78:50:bb:8b:e2:7e:ce:1b:be:d9:00:29:
de:e8:fa:13:7c:e5:1c:b0:d1:3e:f5:54:3d:de:74:e1:ad:2c:
b2:dd:79:41:de:5f:ec:73:a0:03:40:57:fd:32:61:13:3a:1d:
24:ca:0d:86:66:18:a9:1f:4b:7f:11:94:84:4d:7b:ef:a4:bb:
8e:6b:eb:66:a6:16:3d:a6:07:ee:74:07:0c:69:1f:a5:d2:f9:
64:4f:b5:98:8f:33:dd:92:a7:47:dd:80:b3:d7:ff:06:1f:3b:
5b:ce:c4:50:f4:06:7e:90:5f:f4:c5:35:ea:1e:6e:5a:cf:ad:
e6:ac:56:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:23:25 2026 by rpki-client