Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
File: GhREUllzKqZzbCSCNEZZR_wjdNA.mft (raw, json)
Hash identifier: PuCCRoGzqhWSF+9SGHSbJnZT9jD5tUX6ENmg0X1KGVA=
Subject key identifier: 2C:C3:6C:3D:C0:08:D2:4E:4C:D0:00:76:10:3C:0D:DD:73:E4:E9:EA
Authority key identifier: 1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
Certificate issuer: /CN=1a14445259732aa6736c248234465947fc2374d0
Certificate serial: 019D2704287D0B45A953161D3444259BE37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
Manifest number: 0F02
Signing time: Wed 25 Mar 2026 22:01:17 +0000
Manifest this update: Wed 25 Mar 2026 22:01:17 +0000
Manifest next update: Thu 26 Mar 2026 22:01:17 +0000
Files and hashes: 1: GhREUllzKqZzbCSCNEZZR_wjdNA.crl (hash: Y44rKiY14Ng0COSzlzkNLvIPuTxqv26FngL7u7aAW4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:28:7d:0b:45:a9:53:16:1d:34:44:25:9b:e3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a14445259732aa6736c248234465947fc2374d0
Validity
Not Before: Mar 25 22:01:17 2026 GMT
Not After : Mar 26 22:01:17 2026 GMT
Subject: CN=2cc36c3dc008d24e4cd00076103c0ddd73e4e9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:93:06:41:69:85:f7:04:47:38:13:46:02:76:
cc:b8:63:ca:21:b3:99:33:53:e5:bd:a9:05:a7:31:
bd:33:33:bf:72:ac:2b:bc:56:8a:29:3f:52:c0:ef:
f3:b1:8d:23:4e:ca:93:6b:da:65:90:95:84:8d:90:
bc:28:e1:c8:1a:a8:ea:47:d5:84:29:a1:f4:54:18:
71:cb:d5:8a:f0:a3:fd:5b:b6:ee:e2:d2:89:0b:20:
fc:68:2a:33:46:b3:92:9c:69:94:cf:07:6e:c5:23:
70:66:55:0e:7a:3b:57:f3:d1:5c:6c:cc:be:c6:ec:
d7:a9:f4:b9:f4:7e:70:c2:9d:86:db:79:26:d6:2c:
cc:27:a7:02:97:e5:01:12:d3:03:94:ea:26:68:67:
1e:54:d8:4d:d3:29:f9:2d:c7:0d:bb:89:1d:4c:16:
15:9f:ab:63:fe:39:29:7b:3f:fb:14:eb:87:c4:ce:
99:ad:6f:cc:f5:2f:ed:5a:76:bf:f4:24:60:20:df:
ce:d9:5c:fd:ea:52:b8:13:0a:aa:e9:4b:f5:bd:6d:
7a:81:b9:a7:cd:e4:81:ed:2e:79:f3:eb:d7:cb:c8:
95:25:b9:13:8f:dd:36:59:71:b4:9d:39:9e:ab:93:
77:fe:5e:b8:b0:be:a5:87:b6:43:78:04:9b:ee:c5:
81:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C3:6C:3D:C0:08:D2:4E:4C:D0:00:76:10:3C:0D:DD:73:E4:E9:EA
X509v3 Authority Key Identifier:
keyid:1A:14:44:52:59:73:2A:A6:73:6C:24:82:34:46:59:47:FC:23:74:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhREUllzKqZzbCSCNEZZR_wjdNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d10841-7d44-46da-b29c-381f23f183d7/1/GhREUllzKqZzbCSCNEZZR_wjdNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d0:5a:d8:4f:56:a2:ad:99:19:dd:0e:5a:6c:ec:59:53:aa:
bf:dc:d6:3d:ab:78:89:a8:55:ba:75:2e:cf:29:fb:8e:d2:65:
91:44:06:ec:a9:85:cc:a0:5c:9f:60:3b:ee:04:6f:02:3e:a5:
9e:86:f5:f7:8d:fe:ef:07:2c:9f:3d:63:4d:78:f0:4e:78:7a:
83:40:3d:26:dd:67:88:45:f4:a8:6c:57:87:12:9e:a3:25:ff:
f8:d4:81:f1:83:c9:2c:3b:c9:5c:d6:8a:d6:78:97:12:5f:7c:
22:71:7d:33:cc:f0:b7:56:27:d3:c1:5d:b7:75:b5:bc:b3:86:
40:1e:01:7d:43:fd:0b:8b:45:dc:4f:55:f4:53:0f:28:32:03:
14:be:3d:7f:ba:e1:84:33:fc:78:35:12:df:0d:85:46:1d:f1:
05:e7:b4:ca:e2:bc:00:9c:4f:01:7d:2e:ab:94:58:e7:d0:d3:
52:22:5f:7a:aa:39:57:b1:df:c5:70:1f:a0:74:49:12:e2:36:
81:8a:9b:c3:f8:c4:b4:c4:cc:c8:ee:a0:cf:9e:42:16:74:8c:
9b:c7:fe:11:df:f4:46:2c:76:80:7f:0d:c7:7b:e8:0a:10:35:
44:2c:46:8f:a2:15:12:dd:38:84:b7:53:29:75:28:6a:d9:c7:
ab:ff:a6:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBCh9C0WpUxYdNEQlm+N+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMTQ0NDUyNTk3MzJhYTY3MzZjMjQ4MjM0NDY1OTQ3ZmMy
Mzc0ZDAwHhcNMjYwMzI1MjIwMTE3WhcNMjYwMzI2MjIwMTE3WjAzMTEwLwYDVQQD
EygyY2MzNmMzZGMwMDhkMjRlNGNkMDAwNzYxMDNjMGRkZDczZTRlOWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5pMGQWmF9wRHOBNGAnbMuGPKIbOZ
M1PlvakFpzG9MzO/cqwrvFaKKT9SwO/zsY0jTsqTa9plkJWEjZC8KOHIGqjqR9WE
KaH0VBhxy9WK8KP9W7bu4tKJCyD8aCozRrOSnGmUzwduxSNwZlUOejtX89FcbMy+
xuzXqfS59H5wwp2G23km1izMJ6cCl+UBEtMDlOomaGceVNhN0yn5LccNu4kdTBYV
n6tj/jkpez/7FOuHxM6ZrW/M9S/tWna/9CRgIN/O2Vz96lK4Ewqq6Uv1vW16gbmn
zeSB7S558+vXy8iVJbkTj902WXG0nTmeq5N3/l64sL6lh7ZDeASb7sWBZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzDbD3ACNJOTNAAdhA8Dd1z5OnqMB8GA1UdIwQY
MBaAFBoURFJZcyqmc2wkgjRGWUf8I3TQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2hSRVVsbHpLcVp6YkNTQ05FWlpSX3dqZE5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kMTA4NDEtN2Q0NC00NmRhLWIyOWMt
MzgxZjIzZjE4M2Q3LzEvR2hSRVVsbHpLcVp6YkNTQ05FWlpSX3dqZE5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9kMTA4NDEtN2Q0NC00NmRhLWIyOWMtMzgxZjIzZjE4M2Q3
LzEvR2hSRVVsbHpLcVp6YkNTQ05FWlpSX3dqZE5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9Ba2E9W
oq2ZGd0OWmzsWVOqv9zWPat4iahVunUuzyn7jtJlkUQG7KmFzKBcn2A77gRvAj6l
nob1943+7wcsnz1jTXjwTnh6g0A9Jt1niEX0qGxXhxKeoyX/+NSB8YPJLDvJXNaK
1niXEl98InF9M8zwt1Yn08Fdt3W1vLOGQB4BfUP9C4tF3E9V9FMPKDIDFL49f7rh
hDP8eDUS3w2FRh3xBee0yuK8AJxPAX0uq5RY59DTUiJfeqo5V7HfxXAfoHRJEuI2
gYqbw/jEtMTMyO6gz55CFnSMm8f+Ed/0Rix2gH8Nx3voChA1RCxGj6IVEt04hLdT
KXUoatnHq/+mxw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:28 2026 by rpki-client