Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
File: gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft (raw, json)
Hash identifier: lsszA5VftD/UxEz9HdWwRPyaO1HSn0lfGpLSA4TclEs=
Subject key identifier: 6B:37:B7:17:BB:74:C6:C5:97:C4:E0:47:A4:47:EF:CA:E3:79:2C:EF
Authority key identifier: 80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8
Certificate issuer: /CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
Certificate serial: 019D3865D690FFED6D661F7ECD1D94FC747F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:31 +0000
Manifest this update: Sun 29 Mar 2026 07:01:31 +0000
Manifest next update: Mon 30 Mar 2026 07:01:31 +0000
Files and hashes: 1: gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl (hash: /ftGKMoexI9NeV/g0zT7A+uU05cwVYcraW2mOHJxqq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:d6:90:ff:ed:6d:66:1f:7e:cd:1d:94:fc:74:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
Validity
Not Before: Mar 29 07:01:31 2026 GMT
Not After : Mar 30 07:01:31 2026 GMT
Subject: CN=6b37b717bb74c6c597c4e047a447efcae3792cef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d0:57:ba:24:01:86:1d:c2:d1:52:38:47:0f:
dc:f9:19:91:84:67:25:6e:44:e6:6d:ff:a7:6d:20:
f5:c8:8c:02:f0:64:ef:ec:b4:36:c8:51:b4:4c:50:
1d:70:70:59:9c:a5:66:4d:1c:2c:65:20:06:20:25:
e5:b5:d0:9f:ab:58:28:14:c0:62:2a:e4:46:99:94:
54:ff:b2:f1:ae:93:49:5a:8b:10:f5:27:7f:63:47:
a1:7d:a1:2d:fc:f5:c7:59:a5:e0:d8:df:8c:1b:63:
e7:5c:1f:c8:05:81:78:5a:a6:e1:e6:70:bb:f8:8d:
81:6e:13:34:2a:41:48:f9:6d:42:56:d0:8e:29:3a:
aa:43:d7:9f:94:05:7e:79:2f:88:a6:0b:87:f0:81:
f1:05:85:be:f5:5d:26:4d:1d:f5:41:e8:55:ca:35:
44:fc:87:f2:c9:14:af:5e:f2:31:5a:ff:07:b9:13:
fb:5a:03:16:7f:0b:c8:2b:b2:b2:9c:f8:32:3a:93:
09:1f:d8:64:5c:51:57:0d:19:22:ee:d6:96:7c:b6:
3d:64:29:22:c1:8c:4d:a8:d8:b2:2a:f5:4a:f4:01:
27:92:36:a5:a0:86:7d:f4:77:e5:6e:a6:09:12:c9:
cb:6b:3e:a5:c7:ad:f0:2a:52:bf:e5:cd:45:7f:55:
0e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:37:B7:17:BB:74:C6:C5:97:C4:E0:47:A4:47:EF:CA:E3:79:2C:EF
X509v3 Authority Key Identifier:
keyid:80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2b:df:68:28:62:8c:1c:bb:8b:6b:54:ad:24:45:70:9e:ad:
f2:f0:df:e9:3c:ce:48:79:90:2c:2a:9d:71:56:16:ba:32:0a:
df:73:1f:bd:f3:6b:5f:ab:ad:2e:28:99:ca:f7:39:d1:00:3b:
5c:33:9e:6a:15:fb:8c:d9:80:81:8c:00:fa:4b:4f:7d:f7:e9:
d7:56:24:fe:5d:c2:f1:80:24:14:cd:4e:2a:96:55:6e:cd:b1:
f7:b9:b7:2c:8f:d9:de:be:c6:bd:21:b3:5b:6a:95:25:53:f0:
87:69:69:06:2d:e1:56:7d:20:c6:1a:c6:c9:00:17:2b:51:0f:
12:0c:90:a4:13:2e:59:db:e4:7b:3b:09:93:c3:31:2a:d1:3c:
96:aa:d5:be:0a:5f:e8:ef:45:bf:ab:27:04:3a:dd:3a:dc:2f:
88:72:b7:4e:4a:a5:d0:9e:e7:11:0c:41:2d:b5:f1:77:44:22:
66:77:79:99:44:97:bc:7a:9a:fe:a6:81:46:a9:29:57:4e:e0:
41:ae:d1:2e:32:cd:40:d1:f7:13:de:6c:47:8a:31:27:9a:6f:
b4:62:13:df:5f:8c:84:2f:ce:0e:b2:22:77:3e:9b:07:b0:8b:
3b:47:21:e3:94:f8:6a:9c:37:cc:a1:ee:26:48:37:19:41:32:
35:42:4b:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZdaQ/+1tZh9+zR2U/HR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNmMxODA2YjA2YzVhOGMyYjAzNTBhMGZjNmY3NDZhNjY3
ZTRlYzgwHhcNMjYwMzI5MDcwMTMxWhcNMjYwMzMwMDcwMTMxWjAzMTEwLwYDVQQD
Eyg2YjM3YjcxN2JiNzRjNmM1OTdjNGUwNDdhNDQ3ZWZjYWUzNzkyY2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdBXuiQBhh3C0VI4Rw/c+RmRhGcl
bkTmbf+nbSD1yIwC8GTv7LQ2yFG0TFAdcHBZnKVmTRwsZSAGICXltdCfq1goFMBi
KuRGmZRU/7LxrpNJWosQ9Sd/Y0ehfaEt/PXHWaXg2N+MG2PnXB/IBYF4Wqbh5nC7
+I2BbhM0KkFI+W1CVtCOKTqqQ9eflAV+eS+IpguH8IHxBYW+9V0mTR31QehVyjVE
/IfyyRSvXvIxWv8HuRP7WgMWfwvIK7KynPgyOpMJH9hkXFFXDRki7taWfLY9ZCki
wYxNqNiyKvVK9AEnkjaloIZ99HflbqYJEsnLaz6lx63wKlK/5c1Ff1UOVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGs3txe7dMbFl8TgR6RH78rjeSzvMB8GA1UdIwQY
MBaAFIBsGAawbFqMKwNQoPxvdGpmfk7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jZWMxMDEtMjRlZC00YjY0LTgxNGEt
Mjg4NzhlNGZhZmRkLzEvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jZWMxMDEtMjRlZC00YjY0LTgxNGEtMjg4NzhlNGZhZmRk
LzEvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApCvfaChi
jBy7i2tUrSRFcJ6t8vDf6TzOSHmQLCqdcVYWujIK33MfvfNrX6utLiiZyvc50QA7
XDOeahX7jNmAgYwA+ktPfffp11Yk/l3C8YAkFM1OKpZVbs2x97m3LI/Z3r7GvSGz
W2qVJVPwh2lpBi3hVn0gxhrGyQAXK1EPEgyQpBMuWdvkezsJk8MxKtE8lqrVvgpf
6O9Fv6snBDrdOtwviHK3Tkql0J7nEQxBLbXxd0QiZnd5mUSXvHqa/qaBRqkpV07g
Qa7RLjLNQNH3E95sR4oxJ5pvtGIT31+MhC/ODrIidz6bB7CLO0ch45T4apw3zKHu
Jkg3GUEyNUJLfA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 15:38:19 2026 by rpki-client