Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
File: Gwm9TWooxfH75oPPKs1ei_K65MQ.mft (raw, json)
Hash identifier: rY9MZ176RqVOcxWea+nBIzIKG3hB6cZG64ZCsm3gF3c=
Subject key identifier: BA:1B:21:F9:CA:58:D4:23:C9:BA:4A:50:15:8D:EB:20:1C:CD:60:30
Authority key identifier: 1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4
Certificate issuer: /CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4
Certificate serial: 019D38663A8273F2C95C7910C76605C1984D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
Manifest number: 0658
Signing time: Sun 29 Mar 2026 07:01:56 +0000
Manifest this update: Sun 29 Mar 2026 07:01:56 +0000
Manifest next update: Mon 30 Mar 2026 07:01:56 +0000
Files and hashes: 1: Gwm9TWooxfH75oPPKs1ei_K65MQ.crl (hash: OMsMuq0nEy5dDlg8Dn4dz/RRrTaO77tnek3evVDnA+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:3a:82:73:f2:c9:5c:79:10:c7:66:05:c1:98:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b09bd4d6a28c5f1fbe683cf2acd5e8bf2bae4c4
Validity
Not Before: Mar 29 07:01:56 2026 GMT
Not After : Mar 30 07:01:56 2026 GMT
Subject: CN=ba1b21f9ca58d423c9ba4a50158deb201ccd6030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:75:17:5a:1f:b6:a4:92:d6:62:82:65:b1:
4f:f8:1e:23:21:2b:4d:19:0b:d0:4c:cc:5b:1d:e0:
60:0c:ec:ac:d9:96:9d:50:74:f6:f9:30:30:01:42:
98:ec:41:5e:97:b3:ee:ec:cd:43:ed:37:31:ed:5c:
b0:52:0b:0d:42:26:18:c4:95:8e:9d:bc:c4:65:15:
77:1c:ee:d5:f8:89:35:77:fd:5a:03:f9:fa:80:80:
49:2e:6d:68:8e:ff:ef:c8:44:4c:a3:c4:f4:2c:4b:
f7:4f:93:7e:08:65:0a:12:77:33:48:28:bc:a3:ba:
eb:48:38:18:e0:15:c2:99:fd:1c:89:4a:37:58:4f:
2a:cc:1c:9f:03:ad:b5:ac:f8:ce:54:e2:1d:21:24:
45:b6:6e:b8:59:40:d6:ed:04:75:e7:9a:c8:b1:24:
4e:ce:3b:97:21:6a:6b:f0:78:f4:97:92:e7:33:5d:
1d:da:36:59:e9:c6:97:23:a0:d0:d0:7e:91:da:26:
85:1d:41:e8:9a:8a:6a:51:c3:6e:de:46:9c:ea:7b:
b8:84:c8:85:e7:e6:0d:ef:25:28:9a:df:c0:5f:f7:
a9:c8:3a:0f:85:b9:43:27:6e:99:9c:b4:8a:7d:06:
08:df:da:1e:20:7e:2a:d7:c1:71:87:ea:2e:eb:d0:
ff:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:1B:21:F9:CA:58:D4:23:C9:BA:4A:50:15:8D:EB:20:1C:CD:60:30
X509v3 Authority Key Identifier:
keyid:1B:09:BD:4D:6A:28:C5:F1:FB:E6:83:CF:2A:CD:5E:8B:F2:BA:E4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gwm9TWooxfH75oPPKs1ei_K65MQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/86b54c-b980-4817-8df6-dce7781a2c5c/1/Gwm9TWooxfH75oPPKs1ei_K65MQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a0:d3:dd:be:61:78:e3:d8:fa:be:c0:ad:fd:bb:3c:ef:b5:
a5:ab:d1:d7:f1:53:ce:5d:f4:58:78:ad:c2:a0:3c:a0:85:81:
af:b5:5d:82:88:95:57:3d:17:e3:c6:7a:be:b2:92:ff:51:f6:
88:38:ae:d7:b1:5f:f1:33:c0:cb:e5:60:e8:77:36:22:e0:5b:
12:bd:79:5e:0c:a1:38:b2:80:77:ba:20:48:1b:cb:93:58:49:
44:d4:17:fb:90:9d:67:98:e0:97:40:32:77:ba:e5:39:7d:8e:
43:e5:8e:d0:97:90:36:2b:5d:f9:85:aa:ec:0e:2d:b9:1d:72:
bc:87:bf:b3:04:95:46:44:db:94:d4:0d:64:51:22:67:43:59:
06:22:a4:91:54:1d:87:d9:32:2e:78:68:fc:fd:f9:87:67:2e:
13:99:91:88:0c:22:6c:3f:73:f6:71:ef:b7:a1:91:0a:8d:ea:
ef:8e:cb:0e:3e:cb:09:1a:73:a9:84:a9:73:f8:5a:8c:ee:3e:
fa:8a:12:38:3f:19:ea:c3:48:8f:88:6f:60:a5:2d:de:28:c8:
58:ca:fc:cb:ac:0c:a7:65:4c:11:c3:a2:a0:4e:14:93:2c:af:
3c:57:1b:bc:d9:d1:8c:e5:6f:e6:fa:09:c9:fa:20:12:e7:c6:
25:33:96:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZjqCc/LJXHkQx2YFwZhNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDliZDRkNmEyOGM1ZjFmYmU2ODNjZjJhY2Q1ZThiZjJi
YWU0YzQwHhcNMjYwMzI5MDcwMTU2WhcNMjYwMzMwMDcwMTU2WjAzMTEwLwYDVQQD
EyhiYTFiMjFmOWNhNThkNDIzYzliYTRhNTAxNThkZWIyMDFjY2Q2MDMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9l1F1oftqSS1mKCZbFP+B4jIStN
GQvQTMxbHeBgDOys2ZadUHT2+TAwAUKY7EFel7Pu7M1D7Tcx7VywUgsNQiYYxJWO
nbzEZRV3HO7V+Ik1d/1aA/n6gIBJLm1ojv/vyERMo8T0LEv3T5N+CGUKEnczSCi8
o7rrSDgY4BXCmf0ciUo3WE8qzByfA621rPjOVOIdISRFtm64WUDW7QR155rIsSRO
zjuXIWpr8Hj0l5LnM10d2jZZ6caXI6DQ0H6R2iaFHUHomopqUcNu3kac6nu4hMiF
5+YN7yUomt/AX/epyDoPhblDJ26ZnLSKfQYI39oeIH4q18Fxh+ou69D/9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLobIfnKWNQjybpKUBWN6yAczWAwMB8GA1UdIwQY
MBaAFBsJvU1qKMXx++aDzyrNXovyuuTEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dtOVRXb294Zkg3NW9QUEtzMWVpX0s2NU1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS84NmI1NGMtYjk4MC00ODE3LThkZjYt
ZGNlNzc4MWEyYzVjLzEvR3dtOVRXb294Zkg3NW9QUEtzMWVpX0s2NU1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS84NmI1NGMtYjk4MC00ODE3LThkZjYtZGNlNzc4MWEyYzVj
LzEvR3dtOVRXb294Zkg3NW9QUEtzMWVpX0s2NU1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6DT3b5h
eOPY+r7Arf27PO+1pavR1/FTzl30WHitwqA8oIWBr7VdgoiVVz0X48Z6vrKS/1H2
iDiu17Ff8TPAy+Vg6Hc2IuBbEr15XgyhOLKAd7ogSBvLk1hJRNQX+5CdZ5jgl0Ay
d7rlOX2OQ+WO0JeQNitd+YWq7A4tuR1yvIe/swSVRkTblNQNZFEiZ0NZBiKkkVQd
h9kyLnho/P35h2cuE5mRiAwibD9z9nHvt6GRCo3q747LDj7LCRpzqYSpc/hajO4+
+ooSOD8Z6sNIj4hvYKUt3ijIWMr8y6wMp2VMEcOioE4UkyyvPFcbvNnRjOVv5voJ
yfogEufGJTOWfg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:59 2026 by rpki-client