Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier: BvI0bCmJ8IZ7SphDgSOD7EE3zAOstXBUb8tfX2Zd07k=
Subject key identifier: AA:F7:55:A0:3E:0E:E0:5B:95:94:C7:CD:53:06:2A:BD:79:82:91:21
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 019D9C63A3451C7FCBC41DE87AC87BF72455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number: 0F31
Signing time: Fri 17 Apr 2026 17:01:08 +0000
Manifest this update: Fri 17 Apr 2026 17:01:08 +0000
Manifest next update: Sat 18 Apr 2026 17:01:08 +0000
Files and hashes: 1: GE__PPkA52quDSzS533-riTF0kw.crl (hash: XzqabSiSPUpv1dZZZK870RFYr7OVbj5RJVr6b+zQuqU=)
2: rUaeP0oUdPvhV-Z1zHmVDofPVMg.roa (hash: yKtILw4rHDCHQjsROea7n0Z4TscVtMBleCX2L+hkG+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:a3:45:1c:7f:cb:c4:1d:e8:7a:c8:7b:f7:24:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Apr 17 17:01:08 2026 GMT
Not After : Apr 18 17:01:08 2026 GMT
Subject: CN=aaf755a03e0ee05b9594c7cd53062abd79829121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:da:de:83:c9:f9:c7:fe:97:16:18:35:f5:b4:
51:a0:24:ee:5c:88:5e:1a:18:b0:49:cb:b6:37:b2:
32:33:b9:3d:8d:01:13:78:08:8e:91:ed:36:25:c1:
82:cd:99:e9:54:c1:ae:98:9b:7e:64:99:c6:3b:9a:
08:40:38:97:57:75:08:a9:cb:56:3b:88:96:d9:ca:
22:c2:16:f3:58:a6:76:c1:26:34:81:36:37:81:1f:
3a:9f:e0:8a:fe:af:2f:88:af:e4:25:b9:ba:e7:35:
89:7a:aa:2a:e0:16:c9:16:1f:b7:ac:ad:cd:63:ee:
04:d3:84:4a:95:37:ff:f4:7c:4a:ee:76:a0:bc:d1:
06:e6:c3:43:19:d1:01:01:d5:8c:ab:ab:35:e7:00:
93:e8:ab:ab:ae:58:0b:dd:88:1a:db:4a:00:14:06:
aa:1a:56:f8:15:a3:2d:67:c1:58:d7:f0:3f:f4:f0:
b2:b3:d1:9d:de:73:64:27:f1:af:30:ab:75:60:37:
9a:6c:35:f8:10:d3:ec:ef:6f:91:4d:20:4d:cb:7e:
0b:dc:e4:89:7c:7c:c5:a5:01:e1:77:42:39:d8:23:
98:f7:70:3d:f3:55:73:a8:0e:78:ef:5c:16:f9:92:
c8:32:67:09:a6:c4:35:7a:78:6d:b9:73:98:f8:e2:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F7:55:A0:3E:0E:E0:5B:95:94:C7:CD:53:06:2A:BD:79:82:91:21
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fe:8f:83:6a:46:5a:19:62:dc:38:b8:81:c6:0f:de:be:69:
83:26:e7:53:d0:34:dd:db:95:3c:f3:fb:17:bc:27:f1:76:12:
d6:a6:c7:8b:a1:e9:5e:6d:4c:8c:77:4f:72:4a:c7:44:a5:e7:
e0:3a:a5:61:4d:e7:22:c9:ba:9f:f3:fc:9f:e0:87:08:16:53:
2c:58:fc:09:6c:83:2f:ab:7b:cf:76:ac:98:4c:09:de:8c:8c:
41:0b:15:33:c0:c3:4e:e4:07:fe:1f:df:29:5e:d9:d5:c9:31:
d6:f5:69:82:be:d0:6a:9b:93:90:b7:fc:9b:12:6f:e3:11:41:
a2:ec:82:2a:dd:b0:52:fd:44:bf:49:02:f3:e6:80:87:fe:43:
a3:4a:f7:bb:2a:2e:d4:96:07:4e:c2:be:24:d3:ba:94:cc:d3:
98:45:00:f0:2d:7e:6c:e6:9a:cf:ea:c6:3e:f1:ab:1d:ff:b9:
34:69:95:2f:2c:4f:76:31:a8:d2:b3:13:c8:8a:0f:b0:bf:a5:
a0:90:bf:d7:da:e3:c1:73:92:52:42:b1:1c:c7:23:d1:0a:60:
91:91:bb:fe:37:d9:5e:9b:f6:33:bb:da:a4:3e:d4:57:d9:8b:
a8:30:ac:ba:fe:d8:32:18:79:4b:25:c0:2f:5e:05:89:6b:79:
be:16:50:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:22:11 2026 by rpki-client