Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
File: GE__PPkA52quDSzS533-riTF0kw.mft (raw, json)
Hash identifier: qlafsNBonyr4HzOqbSeJaGlVStW05GgqDY8T5HUqPKc=
Subject key identifier: 00:1A:C2:00:F4:69:D8:FE:92:04:1D:BA:AD:78:9E:7E:B2:44:9D:14
Authority key identifier: 18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
Certificate issuer: /CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Certificate serial: 019D2A72844E1468C28FB57DC7A9C76840C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
Manifest number: 0EF6
Signing time: Thu 26 Mar 2026 14:00:41 +0000
Manifest this update: Thu 26 Mar 2026 14:00:41 +0000
Manifest next update: Fri 27 Mar 2026 14:00:41 +0000
Files and hashes: 1: GE__PPkA52quDSzS533-riTF0kw.crl (hash: N4TQ4Sa3fw5O6A5UchTvzDkv2PFkPW7qBvFn6vq0jFI=)
2: rUaeP0oUdPvhV-Z1zHmVDofPVMg.roa (hash: yKtILw4rHDCHQjsROea7n0Z4TscVtMBleCX2L+hkG+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:84:4e:14:68:c2:8f:b5:7d:c7:a9:c7:68:40:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=184fff3cf900e76aae0d2cd2e77dfeae24c5d24c
Validity
Not Before: Mar 26 14:00:41 2026 GMT
Not After : Mar 27 14:00:41 2026 GMT
Subject: CN=001ac200f469d8fe92041dbaad789e7eb2449d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a5:cd:ae:87:05:2b:5d:2d:48:68:6b:22:9c:
a4:3a:0a:b8:57:85:97:f6:15:5a:80:4a:ea:c4:0a:
a4:26:d1:e7:d6:88:a1:e9:4b:e5:6a:3f:86:94:58:
e7:73:3e:5f:80:0b:5e:14:49:7d:cc:86:32:22:cb:
d5:49:b1:7f:4d:b1:48:ce:b8:c6:f0:44:eb:1e:d8:
ba:3f:fa:0f:f9:5a:ea:4f:7c:11:8c:6c:76:07:27:
49:0d:d8:5a:1a:0d:e1:ba:e2:0c:60:2d:8e:db:0d:
ca:b4:2a:21:d0:b5:26:2c:c0:7b:87:ec:e8:ca:06:
8c:9b:f9:69:a7:18:30:11:f7:09:f4:83:e4:d0:97:
ed:fc:c1:d9:d0:a3:af:1b:45:00:18:2f:fc:98:68:
8d:a4:f9:56:a1:25:e3:2a:db:03:da:95:16:d1:4e:
4f:01:47:ba:23:73:6f:3d:19:ce:e5:c2:cd:1e:6b:
b1:13:68:b4:73:88:ea:7a:3c:f9:b3:82:e1:55:d3:
7c:82:a6:67:78:9a:b6:39:c2:f4:34:06:54:0c:81:
39:5b:88:99:5a:44:43:ac:d7:e9:0a:49:76:ae:d9:
a9:08:71:b5:45:1c:80:47:87:85:1f:da:80:dd:56:
90:b5:bf:a1:2e:1f:0d:97:a9:f3:a8:6f:9c:65:8b:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1A:C2:00:F4:69:D8:FE:92:04:1D:BA:AD:78:9E:7E:B2:44:9D:14
X509v3 Authority Key Identifier:
keyid:18:4F:FF:3C:F9:00:E7:6A:AE:0D:2C:D2:E7:7D:FE:AE:24:C5:D2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GE__PPkA52quDSzS533-riTF0kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a9666e-fcf0-4fb6-a452-38b392c6e1bf/1/GE__PPkA52quDSzS533-riTF0kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:64:ee:cd:01:a8:37:8b:de:d5:15:a7:90:cb:f2:bc:10:31:
dd:f3:a7:4a:53:bb:23:df:75:2f:db:ca:04:b6:14:3b:40:74:
d3:9d:ff:b2:3b:e6:54:f3:8d:8a:23:22:7c:26:91:ac:a1:4c:
ad:13:c4:b0:28:ed:e3:5c:90:51:c8:c2:01:c3:ba:f8:53:53:
91:68:8f:f0:5a:68:4d:a2:ad:07:0c:45:07:c8:2a:63:ed:1a:
7e:e9:00:0b:65:bc:88:43:a1:cd:e8:a6:f2:1c:c6:e8:3f:56:
80:d4:5b:c7:0e:54:6c:ce:8d:b6:ed:00:82:64:52:43:cd:21:
f1:93:22:1c:98:27:c7:55:75:97:60:d2:94:2c:af:4c:d3:2c:
c6:89:f2:97:c9:eb:f1:c1:d5:ad:23:be:30:2c:49:90:7d:68:
2d:e9:ae:3d:0e:16:c1:39:68:f1:17:ec:3e:d8:74:7a:75:f0:
a8:0b:f8:ee:8f:e7:12:ca:28:3d:b0:72:e1:f3:33:0a:73:d1:
80:d0:f3:87:5f:8c:79:a4:89:6e:11:dd:67:11:9d:71:e6:0b:
7c:1f:a2:20:b9:61:31:63:3f:14:43:a5:45:7c:6b:ec:be:e3:
69:31:8c:47:9b:b7:a8:87:30:51:34:b4:b2:bb:0b:9b:5e:0c:
dc:1b:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:30:13 2026 by rpki-client