Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
File: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft (raw, json)
Hash identifier: Q5oa25UOmEYPuszArDS6q5iVinAnDv5qiciNCWIAPaU=
Subject key identifier: 3E:E4:9E:DC:40:19:5D:E9:8D:3E:1E:C8:51:13:0D:FB:24:57:D7:6F
Authority key identifier: 18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
Certificate issuer: /CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Certificate serial: 019D265EC7141765E3473729CC719C408C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
Manifest number: 0B4D
Signing time: Wed 25 Mar 2026 19:00:38 +0000
Manifest this update: Wed 25 Mar 2026 19:00:38 +0000
Manifest next update: Thu 26 Mar 2026 19:00:38 +0000
Files and hashes: 1: GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl (hash: DsO2CD7TC//8YXZ+FKaHZItJe+mY6q8eVGn0yB5X3eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:c7:14:17:65:e3:47:37:29:cc:71:9c:40:8c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1841c77f0c799ac9c2719d7f8c6982c43143e497
Validity
Not Before: Mar 25 19:00:38 2026 GMT
Not After : Mar 26 19:00:38 2026 GMT
Subject: CN=3ee49edc40195de98d3e1ec851130dfb2457d76f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:37:e8:c6:64:27:51:b2:e2:f0:bc:7f:da:e1:
f5:81:2d:89:5a:0a:f4:c5:55:d4:8f:fc:e5:d2:f0:
8e:f0:e8:53:f8:c2:60:64:13:48:24:c4:ad:36:3f:
8d:52:9e:8f:70:09:f7:f7:f6:b1:42:94:00:67:46:
50:04:db:25:5e:29:3c:78:dc:36:83:ae:0e:8f:0e:
c8:b9:8f:2b:56:bc:8c:bd:98:85:b8:ac:a1:ec:39:
59:8e:79:c5:b7:44:15:e7:27:a3:52:a0:3d:09:41:
28:3a:d8:9a:7d:c1:75:0e:ac:b7:a0:99:eb:30:32:
d3:c9:8e:49:92:8a:03:30:ae:ec:c7:41:fd:07:be:
03:6f:92:62:02:22:34:28:9c:6a:32:dc:20:b7:c4:
a0:d9:1b:6f:54:7e:9c:d3:e8:9b:0c:de:22:de:59:
25:cd:7d:74:9b:57:5f:6f:88:f7:a1:8f:52:4f:84:
b8:ec:4a:0f:c2:d1:4b:4a:4d:ae:7e:e5:1a:2a:b2:
fd:08:24:68:cd:c5:4d:33:72:25:23:aa:b3:41:e9:
12:9b:1b:5a:69:a4:f7:76:29:20:77:37:a7:de:b0:
c7:b3:20:57:78:9e:91:d2:f8:f2:04:cd:fb:95:e1:
cc:29:a2:97:58:79:cd:ea:eb:32:a2:98:8a:82:00:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:E4:9E:DC:40:19:5D:E9:8D:3E:1E:C8:51:13:0D:FB:24:57:D7:6F
X509v3 Authority Key Identifier:
keyid:18:41:C7:7F:0C:79:9A:C9:C2:71:9D:7F:8C:69:82:C4:31:43:E4:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/9dcbd0-513b-4beb-b065-4e8f5960b19b/1/GEHHfwx5msnCcZ1_jGmCxDFD5Jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b0:ca:df:91:fa:ef:3e:1c:25:26:fd:2f:1b:31:28:38:89:
60:ba:f1:cf:d0:e4:41:97:6d:8c:62:11:36:8d:ca:d6:70:a7:
5d:e8:a3:d1:a7:ad:b1:a2:42:e5:09:a5:f9:54:a5:04:2d:86:
bd:d6:d4:82:7a:d5:f4:27:34:6b:c0:87:c9:60:77:fe:ab:d7:
1a:c9:3c:ea:f9:fa:63:35:b2:76:8e:d0:9b:74:6a:27:7e:b8:
a6:36:ea:87:8c:66:b0:ec:13:e8:a2:ef:76:92:03:b9:9b:1a:
e9:83:d6:98:dc:9f:e4:6d:ac:07:21:f2:dc:59:4d:f9:d8:54:
76:6a:a3:64:77:31:30:03:5f:da:2d:ba:99:a2:59:7c:26:b0:
a6:e3:51:13:73:c7:e6:fd:26:1f:79:f8:78:53:38:20:03:b4:
34:10:87:14:17:de:1a:c8:7e:05:b0:48:b8:7b:1e:d8:e1:4e:
d0:4a:9c:74:6a:76:b6:16:ba:34:5f:0f:5a:0f:73:b7:d3:79:
71:86:fd:51:6c:4f:32:be:17:2b:b4:16:3c:39:50:59:28:67:
a6:90:9f:5a:5d:db:b6:a8:09:72:e0:9a:f0:71:7f:f1:39:07:
6f:12:f4:f5:7e:1d:d8:c2:e5:f2:63:f2:01:8a:72:44:7c:d0:
7d:99:69:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:06 2026 by rpki-client