Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
File: GEF3t2iRATugJ7Nebt_B6fgpXOw.mft (raw, json)
Hash identifier: aStMQpl/GQjD5a6DTwfAyLlAAx48Z7cKiuakNO1STKk=
Subject key identifier: 42:BF:E6:83:E5:34:13:61:78:0A:1D:A2:4B:0E:0A:0B:E6:8C:1C:8A
Authority key identifier: 18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
Certificate issuer: /CN=184177b76891013ba027b35e6edfc1e9f8295cec
Certificate serial: 019D273B1350F95A8F138636A0609A2AD7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
Manifest number: 0DFA
Signing time: Wed 25 Mar 2026 23:01:15 +0000
Manifest this update: Wed 25 Mar 2026 23:01:15 +0000
Manifest next update: Thu 26 Mar 2026 23:01:15 +0000
Files and hashes: 1: GEF3t2iRATugJ7Nebt_B6fgpXOw.crl (hash: iUqyQ8sypUqdkLzNYL2mkRpy5OGqh3d4wXNgq+J++U0=)
2: Zr1lz5illLKoaxKZ1sPrFrxE65k.roa (hash: clb6vWfmi3tkVbNg1UE8cBsih42ezBAsgHbPTGZFqL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:13:50:f9:5a:8f:13:86:36:a0:60:9a:2a:d7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184177b76891013ba027b35e6edfc1e9f8295cec
Validity
Not Before: Mar 25 23:01:15 2026 GMT
Not After : Mar 26 23:01:15 2026 GMT
Subject: CN=42bfe683e5341361780a1da24b0e0a0be68c1c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:8b:08:f6:03:30:12:f2:36:65:7c:af:39:
d0:23:11:2a:cc:30:a5:e5:4e:30:80:d8:15:1e:bb:
44:29:ed:bf:f0:ea:8b:7e:55:3f:ef:ec:7b:3f:ea:
2e:b3:6e:55:4e:61:1c:4a:11:f1:08:09:1d:bb:dc:
73:78:a0:c3:e8:e1:e1:9f:aa:d5:32:7c:11:84:a0:
76:04:98:fd:d8:30:86:e4:29:7b:7a:f9:23:99:48:
cc:37:06:6e:16:55:42:66:3b:44:70:94:6d:a6:dd:
81:b1:40:7e:26:dc:fb:89:42:12:e1:f0:50:03:ee:
a6:fc:9a:00:fe:5a:89:b9:99:65:05:0f:dc:6c:5f:
6d:73:23:fc:94:5c:38:0e:04:fe:c7:70:40:ab:6b:
44:3f:72:e2:e5:6d:ee:3a:91:e9:c0:e1:f6:94:68:
92:2c:ab:4c:a4:be:c0:e2:af:f3:3b:ba:0a:6c:8b:
73:2e:87:28:ce:90:d9:01:c8:df:c5:b9:68:c2:bf:
a2:9b:9d:55:74:75:8e:2a:7e:31:e3:d6:f3:bd:ad:
4d:cf:d4:ff:a1:4f:0c:bf:49:a3:4f:b0:d8:b1:be:
68:b1:84:cb:d8:86:c9:31:11:96:36:e8:25:7a:87:
08:ff:44:ed:30:45:84:30:59:b8:9d:ec:3e:5d:49:
a7:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BF:E6:83:E5:34:13:61:78:0A:1D:A2:4B:0E:0A:0B:E6:8C:1C:8A
X509v3 Authority Key Identifier:
keyid:18:41:77:B7:68:91:01:3B:A0:27:B3:5E:6E:DF:C1:E9:F8:29:5C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GEF3t2iRATugJ7Nebt_B6fgpXOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/87f8dc-9fce-41ab-8e75-228e3ffa5ba9/1/GEF3t2iRATugJ7Nebt_B6fgpXOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:cf:42:fa:2c:e8:e3:d6:7a:4a:c1:49:35:fd:17:e6:77:c1:
dd:a9:2c:f4:ef:bc:4e:b1:70:9e:4d:46:45:1c:81:2e:54:f0:
0b:f7:f2:ca:10:96:1c:47:d7:bf:7e:a2:b6:92:02:7a:d6:2a:
6e:be:a4:ef:47:93:4a:b8:f8:bd:f6:b8:85:27:48:0b:9d:59:
ad:f7:2b:58:77:1f:a6:2c:dd:e1:c0:c3:ba:36:69:5e:e0:d1:
64:55:a5:42:76:9e:b9:63:33:6b:05:17:5c:5e:80:68:85:e0:
a4:30:ea:15:cd:37:45:e4:a0:ba:80:e9:e2:5c:e9:17:bc:2c:
17:51:ba:55:0e:4a:52:d8:20:fc:2c:53:09:99:0e:24:2d:d8:
b8:c9:36:ba:3f:88:95:62:8e:2a:3d:9a:b0:4b:3b:17:10:d6:
9d:36:99:5a:41:06:05:52:5d:9a:fd:50:d7:ec:01:86:6d:94:
53:39:5d:20:06:f9:3b:19:a8:70:82:cc:e2:62:b8:0d:9b:2d:
33:00:72:d3:69:19:3a:1a:70:0c:f3:d8:5b:0c:e4:04:d9:fc:
52:f3:5b:d5:d3:a6:dd:f9:5c:98:41:67:d8:22:b6:9a:7a:9f:
72:48:03:5e:66:24:68:8e:da:eb:ac:b0:8a:5d:4f:ae:35:74:
24:cd:83:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:13 2026 by rpki-client