Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json)
Hash identifier: UJ86MLmUstIT+sc8Tq74QDIs8jLVYFBndPiGnGSa15Y=
Subject key identifier: 0E:9D:EF:55:44:A7:EB:64:AB:56:7E:AD:81:6E:FA:96:9E:82:C1:1B
Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Certificate issuer: /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Certificate serial: 019D39778C636BABED652035F855FDB5FF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 12:00:29 +0000
Manifest this update: Sun 29 Mar 2026 12:00:29 +0000
Manifest next update: Mon 30 Mar 2026 12:00:29 +0000
Files and hashes: 1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: yuERXeiwq0nHGlKq6v5kaKkLwUHY20PFjBu4LHOj+Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:8c:63:6b:ab:ed:65:20:35:f8:55:fd:b5:ff:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Validity
Not Before: Mar 29 12:00:29 2026 GMT
Not After : Mar 30 12:00:29 2026 GMT
Subject: CN=0e9def5544a7eb64ab567ead816efa969e82c11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d4:e7:98:d6:dd:f6:04:cd:eb:9a:ba:43:41:
cd:4c:f4:6f:15:68:f4:50:6f:65:62:21:30:46:7f:
29:5f:1e:e5:7a:5e:7a:a6:ce:cb:71:49:bc:56:52:
b2:61:5b:64:29:5b:dd:ff:38:68:94:a0:63:af:a4:
f9:4f:8c:f5:16:04:ce:bb:b0:f4:ba:f5:13:ef:81:
ef:ff:27:1e:08:c6:3c:07:26:8e:0c:3b:e3:27:64:
91:2b:f9:69:85:ce:5b:b4:db:cd:17:75:40:84:5e:
da:ba:2a:6b:af:68:69:b4:75:8c:68:40:e3:d1:54:
c2:70:17:3b:80:15:46:89:ca:ea:c5:97:d4:fc:13:
15:4e:4c:4d:92:3a:87:56:9b:df:66:23:83:83:46:
ce:0e:97:2f:59:f5:87:c1:82:f7:56:7a:93:24:39:
78:e6:dc:57:bd:b7:92:ae:82:57:36:c3:b4:87:15:
26:9e:1e:57:94:82:2f:0a:ae:a0:43:f6:98:d2:66:
ac:1e:cf:93:84:9a:80:60:c4:69:4d:17:01:ae:8b:
90:6e:9e:00:04:23:ca:99:2a:f8:cc:25:e3:b4:19:
b5:46:db:92:81:18:1e:e1:78:43:59:53:b4:f6:57:
fb:cc:52:e9:b7:1f:21:28:b3:90:2c:99:18:7e:8d:
8e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9D:EF:55:44:A7:EB:64:AB:56:7E:AD:81:6E:FA:96:9E:82:C1:1B
X509v3 Authority Key Identifier:
keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:36:c7:28:c5:ee:ab:f3:3f:bb:48:ee:98:85:4c:00:d7:20:
70:51:d7:bf:08:03:9c:58:7d:eb:f7:15:13:88:fa:89:07:48:
6e:cd:29:a6:c3:35:0d:54:5c:a4:3c:45:ad:a5:8d:f6:4d:92:
19:24:2e:e8:1d:3a:ff:03:04:1a:f8:27:2a:ff:c1:c2:43:12:
4e:08:fa:49:df:7a:10:75:4c:c0:3f:89:83:20:ec:6c:53:59:
3e:5a:82:c4:6e:f7:03:ee:bc:27:77:17:4e:1c:9e:d3:f6:92:
31:ff:0c:1f:c5:a9:84:e2:db:1b:b3:52:9c:31:1d:5b:08:36:
2f:2c:0c:37:34:91:db:74:ed:37:ec:58:8f:65:3f:aa:ad:54:
77:c9:f7:51:b0:99:30:99:61:d2:8c:4c:0f:65:18:20:7d:69:
6d:46:85:2b:d4:6e:ba:5d:9e:31:20:aa:be:27:81:e7:2c:4e:
27:f6:4a:9e:aa:4d:6b:26:83:6d:0b:c5:4a:05:b9:20:46:29:
c6:32:b7:8f:a5:79:46:f6:8c:10:36:1e:ee:ec:ce:60:55:1b:
17:37:ae:61:79:6d:bd:12:0a:9b:89:2d:80:3e:34:9f:47:7b:
57:57:ff:b1:7d:b8:5a:7e:a4:2e:31:cc:12:19:c0:bf:79:db:
8e:fc:af:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d4xja6vtZSA1+FX9tf9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDljYmFjNTdmY2M2YzBjYWI3M2EyNGQyMGYwMTZmNjg2
Yjc2MjYwHhcNMjYwMzI5MTIwMDI5WhcNMjYwMzMwMTIwMDI5WjAzMTEwLwYDVQQD
EygwZTlkZWY1NTQ0YTdlYjY0YWI1NjdlYWQ4MTZlZmE5NjllODJjMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dTnmNbd9gTN65q6Q0HNTPRvFWj0
UG9lYiEwRn8pXx7lel56ps7LcUm8VlKyYVtkKVvd/zholKBjr6T5T4z1FgTOu7D0
uvUT74Hv/yceCMY8ByaODDvjJ2SRK/lphc5btNvNF3VAhF7auiprr2hptHWMaEDj
0VTCcBc7gBVGicrqxZfU/BMVTkxNkjqHVpvfZiODg0bODpcvWfWHwYL3VnqTJDl4
5txXvbeSroJXNsO0hxUmnh5XlIIvCq6gQ/aY0masHs+ThJqAYMRpTRcBrouQbp4A
BCPKmSr4zCXjtBm1RtuSgRge4XhDWVO09lf7zFLptx8hKLOQLJkYfo2O4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA6d71VEp+tkq1Z+rYFu+paegsEbMB8GA1UdIwQY
MBaAFBoJy6xX/MbAyrc6JNIPAW9oa3YmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQt
YTU3NmYwYTE0NWJhLzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQtYTU3NmYwYTE0NWJh
LzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzbHKMXu
q/M/u0jumIVMANcgcFHXvwgDnFh96/cVE4j6iQdIbs0ppsM1DVRcpDxFraWN9k2S
GSQu6B06/wMEGvgnKv/BwkMSTgj6Sd96EHVMwD+JgyDsbFNZPlqCxG73A+68J3cX
Thye0/aSMf8MH8WphOLbG7NSnDEdWwg2LywMNzSR23TtN+xYj2U/qq1Ud8n3UbCZ
MJlh0oxMD2UYIH1pbUaFK9Ruul2eMSCqvieB5yxOJ/ZKnqpNayaDbQvFSgW5IEYp
xjK3j6V5RvaMEDYe7uzOYFUbFzeuYXltvRIKm4ktgD40n0d7V1f/sX24Wn6kLjHM
EhnAv3nbjvyvxw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:27:53 2026 by rpki-client