
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier: Je8RdweNZkCrXF1NgHLIu5uDaLGXWFj3qy4ZcqFJPf8=
Subject key identifier: B8:D0:5D:DC:6F:B3:F9:86:B2:F0:41:4E:54:D4:FD:E7:81:F6:17:AD
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 019CACEBAB58D7CD87411F6C1B8EFD64A455
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number: 0EB5
Signing time: Mon 02 Mar 2026 05:00:51 +0000
Manifest this update: Mon 02 Mar 2026 05:00:51 +0000
Manifest next update: Tue 03 Mar 2026 05:00:51 +0000
Files and hashes: 1: GE__PPkA52quDSzS533-riTF0kw.crl (hash: zYnlZVO2eCZfaseld5+aPQj+93/0wChmsDfg+bXMpCg=)
2: rUaeP0oUdPvhV-Z1zHmVDofPVMg.roa (hash: yKtILw4rHDCHQjsROea7n0Z4TscVtMBleCX2L+hkG+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:ab:58:d7:cd:87:41:1f:6c:1b:8e:fd:64:a4:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Mar 2 05:00:51 2026 GMT
Not After : Mar 3 05:00:51 2026 GMT
Subject: CN=b8d05ddc6fb3f986b2f0414e54d4fde781f617ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:db:4f:99:02:ad:3b:51:88:b7:07:22:26:
71:6f:54:0e:c4:d8:ff:a3:65:be:ef:24:54:db:98:
31:36:74:34:50:a9:63:bb:b2:c5:d8:59:5f:3a:72:
07:84:7b:61:0e:6c:09:3d:40:9f:54:e7:21:49:42:
3b:45:1a:bc:62:07:eb:c6:ea:fd:55:05:73:8c:9a:
b7:3e:dc:66:af:5e:8d:a1:28:26:cf:37:a6:46:04:
b6:f7:f2:f4:8d:a3:c0:31:38:4e:20:98:b6:b2:02:
83:3b:4f:af:0d:d3:c9:7f:7c:80:20:c8:49:11:16:
20:ac:d4:8f:17:92:6a:5e:bb:9f:b6:79:cd:b8:71:
b5:98:a7:d2:8b:a9:19:bc:be:9f:c8:b0:85:85:8a:
9c:01:27:47:8e:36:86:d4:90:8c:64:12:65:9c:58:
5c:99:7f:27:49:d4:24:14:c7:87:2c:99:22:9d:e8:
b1:da:bc:17:49:31:b9:33:af:79:47:75:50:0f:2d:
42:01:55:44:01:d9:c2:d8:4a:d1:07:77:96:12:e5:
e3:66:bf:47:b0:7f:09:fa:4f:7c:2f:b7:12:d2:9d:
70:75:dd:45:4e:8f:19:4a:c4:27:5f:6f:82:8c:86:
03:f7:00:e7:f5:4d:87:8b:a8:37:3d:95:41:7d:05:
f4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D0:5D:DC:6F:B3:F9:86:B2:F0:41:4E:54:D4:FD:E7:81:F6:17:AD
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:ca:12:11:d9:bb:1c:ca:76:84:a8:84:80:ea:28:81:a5:14:
41:91:ce:23:fb:9e:ec:22:38:0f:c0:3a:76:31:bf:93:77:b3:
bb:25:ad:f9:1b:3a:20:82:48:94:4d:9b:a0:8a:ea:30:ed:ed:
fb:0f:4d:a9:97:78:48:00:b8:53:6f:ad:67:9c:99:14:d7:9e:
41:22:a5:9a:d7:4e:1c:8b:09:51:35:4f:63:95:04:9d:2e:e2:
fb:e4:81:7f:d2:74:ef:08:06:c0:03:0c:d9:70:dc:f9:f1:fa:
96:46:26:24:c4:58:49:1f:65:b0:43:a7:7c:f1:e7:06:a7:14:
07:6b:3b:dc:08:d4:db:f0:63:35:5c:4f:b6:75:4c:62:71:65:
8a:6b:e3:c5:ee:11:f2:3e:b1:36:78:fc:59:88:80:6e:ed:1c:
aa:d8:b8:92:18:a6:5d:e6:11:aa:38:f1:06:94:5f:3c:59:5c:
b0:1f:fb:a8:19:7a:63:1f:38:cd:2f:0e:8f:11:e7:6b:b0:32:
de:e9:aa:dd:5b:a5:59:d1:d9:40:c9:3b:6d:55:e7:e8:6e:59:
ac:9e:a4:4a:5e:70:11:60:1b:91:1a:fd:f8:a1:d3:9f:a3:6d:
1d:bc:41:47:2e:16:7e:df:6a:0e:e0:7f:13:fa:2f:d1:b7:81:
b6:d8:14:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys66tY182HQR9sG479ZKRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NGZmZjNjZjkwMGU3NmFhZTBkMmNkMmU3N2RmZWFlMjRj
NWQyNGMwHhcNMjYwMzAyMDUwMDUxWhcNMjYwMzAzMDUwMDUxWjAzMTEwLwYDVQQD
EyhiOGQwNWRkYzZmYjNmOTg2YjJmMDQxNGU1NGQ0ZmRlNzgxZjYxN2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LPbT5kCrTtRiLcHIiZxb1QOxNj/
o2W+7yRU25gxNnQ0UKlju7LF2FlfOnIHhHthDmwJPUCfVOchSUI7RRq8Ygfrxur9
VQVzjJq3Ptxmr16NoSgmzzemRgS29/L0jaPAMThOIJi2sgKDO0+vDdPJf3yAIMhJ
ERYgrNSPF5JqXruftnnNuHG1mKfSi6kZvL6fyLCFhYqcASdHjjaG1JCMZBJlnFhc
mX8nSdQkFMeHLJkineix2rwXSTG5M695R3VQDy1CAVVEAdnC2ErRB3eWEuXjZr9H
sH8J+k98L7cS0p1wdd1FTo8ZSsQnX2+CjIYD9wDn9U2Hi6g3PZVBfQX0ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjQXdxvs/mGsvBBTlTU/eeB9hetMB8GA1UdIwQY
MBaAFBhP/zz5AOdqrg0s0ud9/q4kxdJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hOTY2NmUtZmNmMC00ZmI2LWE0NTIt
MzhiMzkyYzZlMWJmLzEvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hOTY2NmUtZmNmMC00ZmI2LWE0NTItMzhiMzkyYzZlMWJm
LzEvR0VfX1BQa0E1MnF1RFN6UzUzMy1yaVRGMGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsoSEdm7
HMp2hKiEgOoogaUUQZHOI/ue7CI4D8A6djG/k3ezuyWt+Rs6IIJIlE2boIrqMO3t
+w9NqZd4SAC4U2+tZ5yZFNeeQSKlmtdOHIsJUTVPY5UEnS7i++SBf9J07wgGwAMM
2XDc+fH6lkYmJMRYSR9lsEOnfPHnBqcUB2s73AjU2/BjNVxPtnVMYnFlimvjxe4R
8j6xNnj8WYiAbu0cqti4khimXeYRqjjxBpRfPFlcsB/7qBl6Yx84zS8OjxHna7Ay
3umq3VulWdHZQMk7bVXn6G5ZrJ6kSl5wEWAbkRr9+KHTn6NtHbxBRy4Wft9qDuB/
E/ov0beBttgUwQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:49 2026 by rpki-client