Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
File: gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft (raw, json)
Hash identifier: A0FRetdAH/YXJkErvdtF54Fg81GYqfryNiluLCql+DQ=
Subject key identifier: F8:A9:08:76:A5:51:F5:BB:8E:90:2B:1C:89:13:7E:19:31:08:F8:80
Authority key identifier: 80:E7:13:7D:0D:80:58:62:46:C6:AF:F4:96:72:7B:60:3D:35:16:92
Certificate issuer: /CN=80e7137d0d80586246c6aff496727b603d351692
Certificate serial: 019D273B25ECE45CD62755F623E02518A3A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
Manifest number: 01E8
Signing time: Wed 25 Mar 2026 23:01:20 +0000
Manifest this update: Wed 25 Mar 2026 23:01:20 +0000
Manifest next update: Thu 26 Mar 2026 23:01:20 +0000
Files and hashes: 1: gOcTfQ2AWGJGxq_0lnJ7YD01FpI.crl (hash: +LugMv0mCoeVoUnyXks5tP9efRZBpE0tPdhO8Sm3moA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:25:ec:e4:5c:d6:27:55:f6:23:e0:25:18:a3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e7137d0d80586246c6aff496727b603d351692
Validity
Not Before: Mar 25 23:01:20 2026 GMT
Not After : Mar 26 23:01:20 2026 GMT
Subject: CN=f8a90876a551f5bb8e902b1c89137e193108f880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:86:bf:d2:0d:32:d9:99:20:bb:3b:34:21:
9c:9c:82:59:df:d1:cd:11:2f:56:99:35:f9:c9:ae:
f9:d4:a5:bc:3d:09:47:e9:f8:6e:36:4e:74:d5:5f:
41:73:7d:0a:84:a6:79:b4:90:45:31:26:de:a1:e8:
43:d5:e8:cc:85:8a:0a:15:e4:ae:82:07:73:96:94:
c0:2e:99:6e:33:05:52:92:ce:3a:8c:ed:da:9d:4e:
54:45:4c:17:99:78:1e:47:33:15:08:3d:71:3c:ac:
20:09:97:8e:67:69:3d:d8:1f:77:7c:24:68:c9:97:
de:6d:54:14:5e:e9:85:ad:f2:d3:6b:c9:db:8e:0f:
41:93:56:55:ce:6b:76:99:18:15:da:53:be:c9:a8:
35:68:7f:a5:f7:ab:19:c6:5c:0b:9b:8c:55:75:39:
f2:70:79:b5:7c:de:b7:54:55:b5:eb:df:40:e5:f6:
f5:cf:20:9c:d4:f6:45:75:3a:0e:18:20:6f:e8:a3:
e3:70:61:78:ce:57:2a:21:6a:23:c3:9c:42:23:78:
ec:61:85:2c:a0:f6:86:5b:64:03:48:af:64:24:71:
34:1b:6d:8f:d2:be:1d:96:04:3d:f9:48:41:19:2b:
e9:e1:12:66:53:db:1f:bd:b8:aa:46:09:53:2f:af:
62:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A9:08:76:A5:51:F5:BB:8E:90:2B:1C:89:13:7E:19:31:08:F8:80
X509v3 Authority Key Identifier:
keyid:80:E7:13:7D:0D:80:58:62:46:C6:AF:F4:96:72:7B:60:3D:35:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c5:4a:80:9f:a9:16:59:e0:13:05:53:37:63:fb:a6:93:b4:
b0:8b:ab:95:77:a0:f7:c6:38:c7:5e:24:a4:ee:6e:6c:21:74:
24:57:38:12:5f:1b:49:d8:21:b5:7a:66:77:0e:53:56:df:ca:
16:f5:53:03:30:e7:f5:dd:4b:cd:b6:c9:8c:10:f5:41:7e:47:
cc:27:9d:b7:33:71:e4:fe:09:b6:e4:7e:e1:f9:ab:73:56:8b:
4b:a7:6d:24:85:24:14:f3:36:c1:9b:8b:e1:1f:d2:78:4b:39:
30:29:97:08:bf:67:93:f8:5f:c7:7a:df:a4:7c:7a:dd:ff:13:
cd:ea:06:e6:ab:2a:72:49:62:f0:4b:79:a7:d1:a2:3d:ba:d7:
d5:50:33:ca:b8:46:f2:5e:73:48:d0:7d:80:56:44:48:e4:3d:
0a:b1:28:33:fe:5d:c8:9b:3e:f4:3d:b0:57:0f:56:85:dd:b8:
8a:70:56:a1:c4:82:22:fb:b1:08:97:bc:c6:f7:5f:87:4c:51:
5f:47:a5:61:54:f8:88:15:7f:d5:bc:49:6e:0e:06:15:68:93:
f2:79:9b:c0:cf:54:dc:b7:66:1d:d3:ab:6e:e8:ea:be:cf:fd:
b7:21:78:75:4e:b6:08:bc:6d:56:0d:b5:fa:d2:b2:f3:3b:ac:
2c:05:1a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:34 2026 by rpki-client