Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
File: Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft (raw, json)
Hash identifier: PBBBRP+gOi+sgDlVGiUlK6RDTRt/3EG8VgSpXP1Ebgw=
Subject key identifier: D0:D6:68:10:FE:C6:37:3B:DD:A6:4D:AB:34:B4:B9:68:97:01:0E:8E
Authority key identifier: 1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
Certificate issuer: /CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Certificate serial: 019D390A3CB478FCF5648126184F620006E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 10:01:05 +0000
Manifest this update: Sun 29 Mar 2026 10:01:05 +0000
Manifest next update: Mon 30 Mar 2026 10:01:05 +0000
Files and hashes: 1: Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl (hash: 4iNzo4poHO/S9yJhAwUpXuc/74Ezwn1eCZXmr4W5aHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:3c:b4:78:fc:f5:64:81:26:18:4f:62:00:06:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a0f84d6973aaf2ac448d0d32ac7f34d74085a43
Validity
Not Before: Mar 29 10:01:05 2026 GMT
Not After : Mar 30 10:01:05 2026 GMT
Subject: CN=d0d66810fec6373bdda64dab34b4b96897010e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:63:56:44:54:3b:af:5a:74:79:72:25:a8:4d:
d2:65:ff:81:11:92:a7:7c:0d:24:5c:82:0b:6f:04:
b6:cf:ee:b1:50:0b:d5:37:fe:a5:cb:f1:a3:be:f7:
2b:51:ec:ec:55:cc:f3:da:e7:f5:51:f6:a2:73:3f:
6e:4f:b3:50:3f:f3:7f:64:18:0e:b1:8f:61:28:de:
b6:0d:bb:77:d7:7e:c5:6d:8e:02:17:f9:42:08:64:
77:d8:1b:27:83:44:90:d4:d4:04:ab:e3:12:54:20:
32:4c:7f:03:3d:a5:6f:0e:6a:8d:a8:a0:50:d5:91:
f2:36:e1:e6:97:ec:7d:5c:b6:b9:be:d4:67:1b:4c:
e5:b5:5f:3b:3d:ff:b3:78:09:d7:a5:c1:76:4c:8f:
e1:68:88:b9:f0:26:0f:40:89:29:85:f1:ca:57:16:
f3:2e:0e:16:f0:38:e6:41:fb:cd:9f:82:64:90:b4:
3e:76:a6:d7:fd:61:48:d4:e6:e8:84:b8:85:71:39:
8d:b7:c7:d1:b5:7f:62:3a:33:c2:10:97:ec:a3:9c:
a2:55:9c:40:5c:ba:e3:ec:3b:64:30:f6:b5:d0:21:
cb:1d:be:99:02:67:fe:e7:e2:fb:8a:1b:9c:fc:8d:
3c:94:d5:03:8f:23:94:6c:06:a6:d3:59:36:e2:eb:
84:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D6:68:10:FE:C6:37:3B:DD:A6:4D:AB:34:B4:B9:68:97:01:0E:8E
X509v3 Authority Key Identifier:
keyid:1A:0F:84:D6:97:3A:AF:2A:C4:48:D0:D3:2A:C7:F3:4D:74:08:5A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gg-E1pc6ryrESNDTKsfzTXQIWkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/f0e1ef-21a1-49fd-ba69-54a6adaccb7d/1/Gg-E1pc6ryrESNDTKsfzTXQIWkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:04:8d:92:78:51:a4:ad:f0:fa:b0:a5:2e:4a:ad:a5:d5:13:
4c:4b:ed:c1:39:ae:c1:e8:d3:cf:a6:5f:b0:60:a2:91:5b:2e:
b5:4f:2b:2f:12:b3:91:0c:2c:3f:b7:e2:78:8c:3d:57:01:cc:
1b:a8:5a:4b:c4:e2:13:b5:b1:19:bf:73:a5:c6:41:c7:94:fb:
74:fa:cd:aa:d4:ff:49:6f:b1:23:2d:bc:55:71:49:8b:d1:62:
5f:2c:16:e3:a2:3e:4b:b0:89:ec:c7:a5:c9:dd:32:22:c1:38:
8a:57:4d:94:9a:c0:5f:71:c7:da:89:5c:ce:a0:91:2d:22:1a:
a9:48:3a:8a:61:49:40:b8:c8:97:ce:da:1d:35:b1:46:cf:19:
c7:6e:a2:49:d2:46:26:dc:10:7b:bc:d8:67:e5:b1:e6:2f:ec:
fe:84:70:36:bf:5a:b7:fc:91:36:22:60:59:7d:44:53:f7:0f:
2f:86:62:7e:e7:4d:82:58:35:65:c5:a1:bf:f8:a0:72:da:9f:
d5:71:cc:d4:66:dc:e7:d9:e2:18:28:9f:e6:db:4f:4a:28:e0:
f3:e6:67:59:f3:39:d5:70:3c:a3:63:76:c6:b5:38:6a:7c:7b:
44:51:3d:4e:ad:f3:4e:3c:c3:0a:b6:a9:f7:2e:76:98:b6:de:
c6:87:d2:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Cjy0ePz1ZIEmGE9iAAbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMGY4NGQ2OTczYWFmMmFjNDQ4ZDBkMzJhYzdmMzRkNzQw
ODVhNDMwHhcNMjYwMzI5MTAwMTA1WhcNMjYwMzMwMTAwMTA1WjAzMTEwLwYDVQQD
EyhkMGQ2NjgxMGZlYzYzNzNiZGRhNjRkYWIzNGI0Yjk2ODk3MDEwZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmNWRFQ7r1p0eXIlqE3SZf+BEZKn
fA0kXIILbwS2z+6xUAvVN/6ly/GjvvcrUezsVczz2uf1Ufaicz9uT7NQP/N/ZBgO
sY9hKN62Dbt3137FbY4CF/lCCGR32Bsng0SQ1NQEq+MSVCAyTH8DPaVvDmqNqKBQ
1ZHyNuHml+x9XLa5vtRnG0zltV87Pf+zeAnXpcF2TI/haIi58CYPQIkphfHKVxbz
Lg4W8DjmQfvNn4JkkLQ+dqbX/WFI1ObohLiFcTmNt8fRtX9iOjPCEJfso5yiVZxA
XLrj7DtkMPa10CHLHb6ZAmf+5+L7ihuc/I08lNUDjyOUbAam01k24uuEPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNDWaBD+xjc73aZNqzS0uWiXAQ6OMB8GA1UdIwQY
MBaAFBoPhNaXOq8qxEjQ0yrH8010CFpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9mMGUxZWYtMjFhMS00OWZkLWJhNjkt
NTRhNmFkYWNjYjdkLzEvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9mMGUxZWYtMjFhMS00OWZkLWJhNjktNTRhNmFkYWNjYjdk
LzEvR2ctRTFwYzZyeXJFU05EVEtzZnpUWFFJV2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgSNknhR
pK3w+rClLkqtpdUTTEvtwTmuwejTz6ZfsGCikVsutU8rLxKzkQwsP7fieIw9VwHM
G6haS8TiE7WxGb9zpcZBx5T7dPrNqtT/SW+xIy28VXFJi9FiXywW46I+S7CJ7Mel
yd0yIsE4ildNlJrAX3HH2olczqCRLSIaqUg6imFJQLjIl87aHTWxRs8Zx26iSdJG
JtwQe7zYZ+Wx5i/s/oRwNr9at/yRNiJgWX1EU/cPL4ZifudNglg1ZcWhv/igctqf
1XHM1Gbc59niGCif5ttPSijg8+ZnWfM51XA8o2N2xrU4anx7RFE9Tq3zTjzDCrap
9y52mLbexofS4g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:23 2026 by rpki-client