Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
File: gh7As3VkunTWFpG4sq1Da52qshM.mft (raw, json)
Hash identifier: TcfDRtfw/3UwahPruTMXXVcmPu9eV7D96SSv8eZBE/I=
Subject key identifier: 6A:49:B9:2D:2F:8F:70:DF:ED:39:25:A7:B0:26:CC:31:18:36:4D:3C
Authority key identifier: 82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
Certificate issuer: /CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Certificate serial: 019D3865AA5F55F803C2375C3CD51089FEB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:19 +0000
Manifest this update: Sun 29 Mar 2026 07:01:19 +0000
Manifest next update: Mon 30 Mar 2026 07:01:19 +0000
Files and hashes: 1: gh7As3VkunTWFpG4sq1Da52qshM.crl (hash: tKXLETpAtJV47FimeewAG9Zkz+PPVjIkcWwryP8RRsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:aa:5f:55:f8:03:c2:37:5c:3c:d5:10:89:fe:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821ec0b37564ba74d61691b8b2ad436b9daab213
Validity
Not Before: Mar 29 07:01:19 2026 GMT
Not After : Mar 30 07:01:19 2026 GMT
Subject: CN=6a49b92d2f8f70dfed3925a7b026cc3118364d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:ff:9f:ca:96:0a:55:4b:7b:6e:04:9e:ee:
d0:6c:bb:a2:62:a6:22:09:c2:a3:ed:67:80:84:d4:
8b:27:66:6e:01:0c:0d:4c:46:51:d8:ac:5e:a4:a5:
9a:13:75:2d:f1:3e:83:5d:b3:13:1c:70:73:e3:0c:
45:a9:02:0c:aa:e3:9e:a7:6a:c4:35:de:66:17:76:
38:da:84:8a:40:5d:51:2e:a7:f0:5e:fe:1b:d0:64:
41:69:e8:bf:70:fc:05:9b:54:f5:27:34:4d:6a:f8:
eb:ba:bc:bc:f6:32:f6:10:51:e7:16:5b:e1:57:0a:
31:50:7b:68:b9:18:2c:8d:87:37:78:7a:b0:7a:1a:
fe:19:68:2a:eb:49:62:86:fd:b3:5a:3c:23:c7:55:
65:21:8c:3f:fc:f2:41:df:e0:e4:8c:6b:8b:45:3f:
11:a9:9e:74:af:ec:26:40:4e:c5:8d:b6:b7:28:6b:
15:05:70:85:3d:ca:e0:07:64:90:85:0a:79:34:83:
0c:c7:9f:26:15:97:64:84:5a:50:95:f3:9f:8a:2e:
1c:a4:9c:8c:14:cc:5e:97:eb:be:99:fe:32:5d:20:
3d:dc:27:33:8b:1c:da:42:cb:1e:ad:c1:e4:44:d4:
00:6d:00:15:a1:67:9e:0c:93:19:47:10:70:60:56:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:49:B9:2D:2F:8F:70:DF:ED:39:25:A7:B0:26:CC:31:18:36:4D:3C
X509v3 Authority Key Identifier:
keyid:82:1E:C0:B3:75:64:BA:74:D6:16:91:B8:B2:AD:43:6B:9D:AA:B2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gh7As3VkunTWFpG4sq1Da52qshM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/689b5c-a8d9-47ca-af68-9f92f3855f86/1/gh7As3VkunTWFpG4sq1Da52qshM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:33:5f:bc:c1:fb:3b:4e:28:aa:0b:2d:51:82:52:d7:88:bc:
de:71:98:c9:6f:97:79:5d:fc:8b:44:4a:1c:e3:4a:84:b4:8d:
f2:e7:b6:d9:b3:e4:cd:a8:7b:24:e7:85:57:f3:79:33:87:87:
0d:a5:9e:77:3d:51:ad:4e:79:6c:d7:c9:55:09:74:e1:e8:bf:
1e:d1:1a:f7:45:2e:f1:91:3f:89:62:30:7e:b9:27:3c:d1:71:
39:55:dd:05:86:76:f8:a8:70:4e:e0:f2:dc:ea:e6:bc:4d:40:
f1:d4:a7:b6:db:c4:85:e2:af:41:9b:69:54:1d:a7:75:9d:6f:
8e:ad:a9:d6:c6:b1:a3:ff:91:bc:54:c4:11:97:c1:5c:e0:84:
92:47:9a:94:c3:1d:38:6c:c3:e6:33:8e:d4:ff:66:70:d5:b9:
45:e6:55:3d:cc:96:b5:b4:b4:97:1d:88:84:9d:5d:92:ee:c7:
47:6a:bf:25:b6:ee:f7:72:97:71:66:ba:b7:0b:fa:5c:12:c2:
2e:63:a0:82:e1:44:23:10:2f:a2:42:2e:7a:1f:53:4f:6d:84:
dd:29:26:17:78:ff:94:1d:77:5d:ef:65:27:76:4e:18:da:d2:
cb:16:f1:40:e7:44:e8:07:92:6b:28:f4:49:19:84:32:bb:04:
9f:7b:3e:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZapfVfgDwjdcPNUQif64MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWVjMGIzNzU2NGJhNzRkNjE2OTFiOGIyYWQ0MzZiOWRh
YWIyMTMwHhcNMjYwMzI5MDcwMTE5WhcNMjYwMzMwMDcwMTE5WjAzMTEwLwYDVQQD
Eyg2YTQ5YjkyZDJmOGY3MGRmZWQzOTI1YTdiMDI2Y2MzMTE4MzY0ZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwI3/n8qWClVLe24Enu7QbLuiYqYi
CcKj7WeAhNSLJ2ZuAQwNTEZR2KxepKWaE3Ut8T6DXbMTHHBz4wxFqQIMquOep2rE
Nd5mF3Y42oSKQF1RLqfwXv4b0GRBaei/cPwFm1T1JzRNavjrury89jL2EFHnFlvh
VwoxUHtouRgsjYc3eHqwehr+GWgq60lihv2zWjwjx1VlIYw//PJB3+DkjGuLRT8R
qZ50r+wmQE7Fjba3KGsVBXCFPcrgB2SQhQp5NIMMx58mFZdkhFpQlfOfii4cpJyM
FMxel+u+mf4yXSA93CczixzaQssercHkRNQAbQAVoWeeDJMZRxBwYFZgFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpJuS0vj3Df7Tklp7AmzDEYNk08MB8GA1UdIwQY
MBaAFIIewLN1ZLp01haRuLKtQ2udqrITMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2g3QXMzVmt1blRXRnBHNHNxMURhNTJxc2hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ODliNWMtYThkOS00N2NhLWFmNjgt
OWY5MmYzODU1Zjg2LzEvZ2g3QXMzVmt1blRXRnBHNHNxMURhNTJxc2hNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82ODliNWMtYThkOS00N2NhLWFmNjgtOWY5MmYzODU1Zjg2
LzEvZ2g3QXMzVmt1blRXRnBHNHNxMURhNTJxc2hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApDNfvMH7
O04oqgstUYJS14i83nGYyW+XeV38i0RKHONKhLSN8ue22bPkzah7JOeFV/N5M4eH
DaWedz1RrU55bNfJVQl04ei/HtEa90Uu8ZE/iWIwfrknPNFxOVXdBYZ2+KhwTuDy
3OrmvE1A8dSnttvEheKvQZtpVB2ndZ1vjq2p1saxo/+RvFTEEZfBXOCEkkealMMd
OGzD5jOO1P9mcNW5ReZVPcyWtbS0lx2IhJ1dku7HR2q/Jbbu93KXcWa6twv6XBLC
LmOgguFEIxAvokIueh9TT22E3SkmF3j/lB13Xe9lJ3ZOGNrSyxbxQOdE6AeSayj0
SRmEMrsEn3s+pg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:31 2026 by rpki-client