Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
File: GE0fQIM4P1aJXW4-c6igd63rUMs.mft (raw, json)
Hash identifier: 6ox+sxLz+XswimgHtG8vJuUUSVMq469fXUCjyYnLayw=
Subject key identifier: 00:DA:C6:7B:A0:32:C1:5C:6A:4B:FD:16:E7:2C:F9:C3:BE:D7:78:9E
Authority key identifier: 18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
Certificate issuer: /CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Certificate serial: 019D27045EA6C4752DB16A3A994589C42325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
Manifest number: 0EB3
Signing time: Wed 25 Mar 2026 22:01:30 +0000
Manifest this update: Wed 25 Mar 2026 22:01:30 +0000
Manifest next update: Thu 26 Mar 2026 22:01:30 +0000
Files and hashes: 1: GE0fQIM4P1aJXW4-c6igd63rUMs.crl (hash: e847tVS/OijT2ldR7Cl0sK2j6IKKoHDYWqkYLhjGQqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:5e:a6:c4:75:2d:b1:6a:3a:99:45:89:c4:23:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184d1f4083383f56895d6e3e73a8a077adeb50cb
Validity
Not Before: Mar 25 22:01:30 2026 GMT
Not After : Mar 26 22:01:30 2026 GMT
Subject: CN=00dac67ba032c15c6a4bfd16e72cf9c3bed7789e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:67:53:dc:76:7d:91:c1:65:69:85:f4:b6:
de:b1:8d:d1:99:b1:2b:4c:54:0d:0a:10:03:9c:4e:
34:95:02:d5:cc:81:7d:2c:0b:97:3c:f0:d6:48:c7:
55:c7:fe:f1:3c:5b:04:a3:79:5b:80:58:dd:63:5a:
0b:e0:65:f0:70:69:fe:06:19:bc:53:6b:6c:d2:e0:
a4:e4:df:75:4a:5f:92:c7:16:a5:d4:b7:a3:f3:bc:
e1:91:92:7e:d1:27:9d:f9:29:30:cb:3c:17:cc:81:
0a:dd:99:77:e0:6e:75:e4:25:9b:2a:9d:a6:fe:f7:
18:2e:23:bc:2e:60:5b:81:95:88:9d:37:6e:8d:fd:
dc:88:0f:79:f4:53:2f:45:87:71:38:c5:8f:97:75:
26:a3:be:26:5d:04:88:90:de:8c:07:41:0b:52:02:
cf:61:00:8e:9f:fe:74:0e:42:24:2f:6e:df:55:ff:
de:81:71:70:93:9e:90:aa:83:d7:71:7a:16:7b:c6:
0f:82:da:33:ea:fd:0f:c3:db:7b:26:b0:0e:e1:d0:
d6:23:e6:d2:35:69:75:b4:b7:1c:df:da:ef:21:06:
05:55:4e:db:16:ca:f7:b7:a9:e6:3f:90:1a:0e:84:
de:b5:e2:e1:2e:35:6f:97:7c:fd:7b:76:de:51:bf:
98:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:DA:C6:7B:A0:32:C1:5C:6A:4B:FD:16:E7:2C:F9:C3:BE:D7:78:9E
X509v3 Authority Key Identifier:
keyid:18:4D:1F:40:83:38:3F:56:89:5D:6E:3E:73:A8:A0:77:AD:EB:50:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE0fQIM4P1aJXW4-c6igd63rUMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2b7785-5da0-42dc-a221-66cc083b5669/1/GE0fQIM4P1aJXW4-c6igd63rUMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bc:60:32:c0:3f:be:e0:9b:37:6d:ec:d7:64:b0:33:70:f6:
f0:8f:8b:ed:61:40:5a:dc:5d:c6:6a:ef:e0:e2:f5:71:76:ee:
37:3a:87:29:d7:27:12:d5:ce:48:d7:14:76:b5:9a:1f:65:3d:
2c:b6:ad:ed:f2:20:26:d9:6e:ca:dc:d3:f8:3e:fb:18:25:63:
bd:0c:b1:93:7c:ee:9c:5c:03:f5:06:c3:61:ac:35:c1:50:b0:
98:4d:4e:1b:30:a7:87:42:0f:f2:e4:4a:61:92:19:fb:43:6b:
0c:75:b1:59:a4:a7:59:61:85:7e:d0:66:e2:07:6c:a8:c2:8f:
0f:54:88:0f:61:f0:2a:9d:61:d0:6b:56:e9:7d:72:52:2d:02:
45:ef:d8:ea:bc:e5:81:ae:97:3a:0b:65:ac:e7:42:ab:7f:40:
b2:52:e0:d2:40:91:51:ff:1d:36:57:4e:76:45:0e:9f:a4:e9:
61:4d:1d:84:aa:89:1b:71:94:28:08:b3:fa:7d:ec:bd:19:e3:
85:c7:0e:0d:33:fb:bb:ed:bf:b7:e7:6d:ce:a8:25:3d:92:cb:
8c:13:25:59:e4:a2:a6:e2:0d:0c:51:b5:95:6c:8f:0b:db:18:
79:0d:65:14:a3:bc:36:ee:81:b3:d1:d8:74:63:b3:9e:e9:ca:
26:68:61:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBF6mxHUtsWo6mUWJxCMlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4NGQxZjQwODMzODNmNTY4OTVkNmUzZTczYThhMDc3YWRl
YjUwY2IwHhcNMjYwMzI1MjIwMTMwWhcNMjYwMzI2MjIwMTMwWjAzMTEwLwYDVQQD
EygwMGRhYzY3YmEwMzJjMTVjNmE0YmZkMTZlNzJjZjljM2JlZDc3ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurpnU9x2fZHBZWmF9LbesY3RmbEr
TFQNChADnE40lQLVzIF9LAuXPPDWSMdVx/7xPFsEo3lbgFjdY1oL4GXwcGn+Bhm8
U2ts0uCk5N91Sl+Sxxal1Lej87zhkZJ+0Sed+SkwyzwXzIEK3Zl34G515CWbKp2m
/vcYLiO8LmBbgZWInTdujf3ciA959FMvRYdxOMWPl3Umo74mXQSIkN6MB0ELUgLP
YQCOn/50DkIkL27fVf/egXFwk56QqoPXcXoWe8YPgtoz6v0Pw9t7JrAO4dDWI+bS
NWl1tLcc39rvIQYFVU7bFsr3t6nmP5AaDoTeteLhLjVvl3z9e3beUb+YWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADaxnugMsFcakv9Fucs+cO+13ieMB8GA1UdIwQY
MBaAFBhNH0CDOD9WiV1uPnOooHet61DLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yYjc3ODUtNWRhMC00MmRjLWEyMjEt
NjZjYzA4M2I1NjY5LzEvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8yYjc3ODUtNWRhMC00MmRjLWEyMjEtNjZjYzA4M2I1NjY5
LzEvR0UwZlFJTTRQMWFKWFc0LWM2aWdkNjNyVU1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmLxgMsA/
vuCbN23s12SwM3D28I+L7WFAWtxdxmrv4OL1cXbuNzqHKdcnEtXOSNcUdrWaH2U9
LLat7fIgJtluytzT+D77GCVjvQyxk3zunFwD9QbDYaw1wVCwmE1OGzCnh0IP8uRK
YZIZ+0NrDHWxWaSnWWGFftBm4gdsqMKPD1SID2HwKp1h0GtW6X1yUi0CRe/Y6rzl
ga6XOgtlrOdCq39AslLg0kCRUf8dNldOdkUOn6TpYU0dhKqJG3GUKAiz+n3svRnj
hccODTP7u+2/t+dtzqglPZLLjBMlWeSipuINDFG1lWyPC9sYeQ1lFKO8Nu6Bs9HY
dGOznunKJmhhDw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:11 2026 by rpki-client