Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
File: gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft (raw, json)
Hash identifier: XSJugJANnN6KhLRWW7x2aseqBGPJfkmRic565FIjvIY=
Subject key identifier: F6:74:CB:F1:CB:6B:01:E5:6E:28:44:D3:77:C5:2B:7B:DD:12:6F:8C
Authority key identifier: 80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8
Certificate issuer: /CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
Certificate serial: 019D2704D22341008705BB0BD5963C85000B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:02:00 +0000
Manifest this update: Wed 25 Mar 2026 22:02:00 +0000
Manifest next update: Thu 26 Mar 2026 22:02:00 +0000
Files and hashes: 1: gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl (hash: LzcMnyE239pRVE6tC2ECzeSrs/iQGX0ZMqMlaee+c54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:d2:23:41:00:87:05:bb:0b:d5:96:3c:85:00:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
Validity
Not Before: Mar 25 22:02:00 2026 GMT
Not After : Mar 26 22:02:00 2026 GMT
Subject: CN=f674cbf1cb6b01e56e2844d377c52b7bdd126f8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:09:bd:10:ed:f7:f8:16:95:4a:97:08:57:
8c:65:3e:52:4a:53:35:fa:fe:13:1d:7a:a0:57:34:
a2:e1:6e:1d:9a:57:b5:5c:75:86:62:6a:4a:d6:20:
e9:f2:ce:fc:87:5c:7b:ee:11:d6:14:98:9a:b2:19:
1d:11:a4:29:37:5c:dc:7e:c4:88:d0:88:56:e8:be:
52:b0:97:b3:31:19:f2:9c:93:f8:c7:3a:db:6d:94:
33:7e:64:5a:58:b2:bf:83:36:6e:c8:11:cf:c3:77:
dd:cf:64:ac:1b:50:ec:89:cc:dd:e4:d7:e0:45:ec:
01:df:46:9a:09:65:19:06:e8:a7:44:90:56:02:a7:
67:94:d6:c3:28:33:af:fc:bc:1b:26:bf:33:a7:dc:
22:10:6d:5c:0b:e7:f0:a5:0e:3b:d4:47:c3:c1:f2:
7a:7b:8b:fe:a5:cd:44:c6:12:be:d8:e5:3c:42:47:
d2:80:64:80:7c:f8:ba:24:58:20:9e:e7:25:8d:0c:
42:32:80:18:78:be:ba:3d:3d:cd:be:af:8c:1a:33:
6c:41:b4:67:4f:af:1a:90:7b:f9:0b:c7:8c:33:90:
9e:a5:40:1e:12:a9:75:01:e7:fe:ff:20:00:2f:a9:
cf:2c:ab:6e:db:3d:2d:6d:f5:57:d9:c2:ed:b6:c0:
8d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:74:CB:F1:CB:6B:01:E5:6E:28:44:D3:77:C5:2B:7B:DD:12:6F:8C
X509v3 Authority Key Identifier:
keyid:80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:3b:62:82:2f:d0:b6:3d:3d:f0:a1:1a:64:95:f6:32:aa:90:
60:5c:72:fa:25:86:57:c5:92:d5:dd:51:e4:79:71:26:1d:84:
ae:57:c8:88:e7:7a:34:fb:3f:78:38:31:f8:6f:f2:79:f2:9e:
98:41:e4:54:48:aa:eb:37:8d:2c:f5:43:99:56:af:f6:ae:f5:
2a:34:34:a4:d1:5a:de:68:59:ae:91:6e:46:53:f1:f1:2e:d2:
f3:26:75:24:27:8a:93:0f:d9:e3:f2:ae:f8:84:8e:aa:ed:d3:
20:16:7d:83:4f:39:7e:2d:20:55:60:74:71:10:ae:86:12:99:
e1:86:04:38:7b:28:25:e9:0a:92:86:a9:a6:6b:ea:3c:d4:01:
47:55:b3:5f:66:11:2b:03:ec:b5:15:3a:81:94:1c:15:76:cb:
7c:92:51:0e:e0:61:96:4c:c8:74:1a:fd:19:b6:24:db:39:b5:
93:9d:8b:c0:a5:5f:c5:b5:1a:d4:94:32:1c:34:c0:aa:45:9f:
e5:84:f7:a9:ba:5c:2d:c5:61:0a:d8:04:40:2d:82:fc:97:22:
d5:35:43:db:23:9e:77:11:65:6b:85:d5:27:47:b9:84:d7:9c:
82:c7:cd:74:2c:6e:fd:b7:b9:2e:83:a2:5d:c7:e0:5e:65:35:
c4:ab:b3:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBNIjQQCHBbsL1ZY8hQALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNmMxODA2YjA2YzVhOGMyYjAzNTBhMGZjNmY3NDZhNjY3
ZTRlYzgwHhcNMjYwMzI1MjIwMjAwWhcNMjYwMzI2MjIwMjAwWjAzMTEwLwYDVQQD
EyhmNjc0Y2JmMWNiNmIwMWU1NmUyODQ0ZDM3N2M1MmI3YmRkMTI2ZjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNcJvRDt9/gWlUqXCFeMZT5SSlM1
+v4THXqgVzSi4W4dmle1XHWGYmpK1iDp8s78h1x77hHWFJiashkdEaQpN1zcfsSI
0IhW6L5SsJezMRnynJP4xzrbbZQzfmRaWLK/gzZuyBHPw3fdz2SsG1Dsiczd5Nfg
RewB30aaCWUZBuinRJBWAqdnlNbDKDOv/LwbJr8zp9wiEG1cC+fwpQ471EfDwfJ6
e4v+pc1ExhK+2OU8QkfSgGSAfPi6JFggnucljQxCMoAYeL66PT3Nvq+MGjNsQbRn
T68akHv5C8eMM5CepUAeEql1Aef+/yAAL6nPLKtu2z0tbfVX2cLttsCNWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZ0y/HLawHlbihE03fFK3vdEm+MMB8GA1UdIwQY
MBaAFIBsGAawbFqMKwNQoPxvdGpmfk7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jZWMxMDEtMjRlZC00YjY0LTgxNGEt
Mjg4NzhlNGZhZmRkLzEvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jZWMxMDEtMjRlZC00YjY0LTgxNGEtMjg4NzhlNGZhZmRk
LzEvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtDtigi/Q
tj098KEaZJX2MqqQYFxy+iWGV8WS1d1R5HlxJh2ErlfIiOd6NPs/eDgx+G/yefKe
mEHkVEiq6zeNLPVDmVav9q71KjQ0pNFa3mhZrpFuRlPx8S7S8yZ1JCeKkw/Z4/Ku
+ISOqu3TIBZ9g085fi0gVWB0cRCuhhKZ4YYEOHsoJekKkoappmvqPNQBR1WzX2YR
KwPstRU6gZQcFXbLfJJRDuBhlkzIdBr9GbYk2zm1k52LwKVfxbUa1JQyHDTAqkWf
5YT3qbpcLcVhCtgEQC2C/Jci1TVD2yOedxFla4XVJ0e5hNecgsfNdCxu/be5LoOi
XcfgXmU1xKuz6A==
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:53:34 2026 by rpki-client