Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
File: gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft (raw, json)
Hash identifier: iv2hrNF345GHndBjzkrXG3as/staIVVi7unrxx26elQ=
Subject key identifier: FE:35:99:43:17:D6:0C:E7:FB:A4:1D:7E:95:96:D3:87:49:8D:37:61
Authority key identifier: 80:E7:13:7D:0D:80:58:62:46:C6:AF:F4:96:72:7B:60:3D:35:16:92
Certificate issuer: /CN=80e7137d0d80586246c6aff496727b603d351692
Certificate serial: 019D3A8B20FFD2ACD2E045214C5231FECFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
Manifest number: 01F2
Signing time: Sun 29 Mar 2026 17:01:29 +0000
Manifest this update: Sun 29 Mar 2026 17:01:29 +0000
Manifest next update: Mon 30 Mar 2026 17:01:29 +0000
Files and hashes: 1: gOcTfQ2AWGJGxq_0lnJ7YD01FpI.crl (hash: i02/xIAOF+G+DmgxThrSaz/LIwyfJIde+B8H+h7Ui0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8b:20:ff:d2:ac:d2:e0:45:21:4c:52:31:fe:cf:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80e7137d0d80586246c6aff496727b603d351692
Validity
Not Before: Mar 29 17:01:29 2026 GMT
Not After : Mar 30 17:01:29 2026 GMT
Subject: CN=fe35994317d60ce7fba41d7e9596d387498d3761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2a:fc:93:4e:3b:ea:fd:11:51:35:7c:c3:b4:
13:fc:5b:d6:14:38:d8:49:32:a6:7d:45:b6:11:f3:
9a:f6:de:3e:01:fd:a6:67:cf:81:2f:72:64:b1:e4:
35:85:a5:bb:0d:dd:70:f1:cb:c0:9e:9c:a0:d8:44:
55:0f:a5:c8:1a:12:9d:1e:6f:c7:f8:b5:b7:af:63:
16:36:19:c9:f3:b0:ed:cc:8e:76:92:3a:80:d8:35:
96:f5:a2:28:49:ed:d1:3b:e3:92:17:b1:65:47:2b:
1c:65:d6:56:4b:d4:52:10:55:d6:94:9c:0b:f9:8a:
73:b6:c0:a0:98:f1:23:52:03:3b:e8:b1:1a:1f:63:
70:f9:90:55:ff:c4:6d:7d:a5:05:ff:d8:d3:d8:01:
d4:07:ae:2f:77:2b:8e:34:47:53:11:f5:2e:80:2b:
3f:9f:06:22:f1:70:08:05:32:ad:b4:f1:8e:da:86:
c7:10:23:50:ca:57:7c:62:83:8b:0a:c3:ce:05:ca:
a7:ce:3e:be:68:7c:1c:34:41:69:11:ac:41:96:50:
68:56:d4:c5:ef:11:76:ed:22:65:27:a0:02:6b:52:
0e:ba:75:7b:46:65:e0:de:ff:20:35:f3:88:3b:e3:
fa:b5:f5:bd:b5:99:49:12:71:b8:6b:71:fe:73:2e:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:35:99:43:17:D6:0C:E7:FB:A4:1D:7E:95:96:D3:87:49:8D:37:61
X509v3 Authority Key Identifier:
keyid:80:E7:13:7D:0D:80:58:62:46:C6:AF:F4:96:72:7B:60:3D:35:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/eed1eb-5e22-439c-8068-82c80263b47e/1/gOcTfQ2AWGJGxq_0lnJ7YD01FpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:9b:0a:0f:78:61:6d:a0:df:0c:b4:a7:e3:16:d0:c3:fc:9f:
66:1b:4b:ff:88:d5:75:ab:29:27:4c:58:d6:cd:b6:32:ef:24:
1e:de:ae:a4:95:c4:d7:2f:4e:f6:89:1d:39:81:a5:7f:89:fd:
42:79:3a:d2:5e:88:fb:28:df:52:0e:e8:66:5a:3b:1a:aa:6c:
6e:5e:f8:aa:74:12:0c:3f:35:f2:cb:52:13:e7:84:18:0a:59:
8b:a5:f6:cc:e3:46:2c:83:a9:47:20:b9:e0:6f:85:05:6b:e9:
12:57:a9:eb:df:0e:2b:40:3f:70:e4:84:2c:ea:6c:be:eb:c7:
63:4a:ed:1c:a2:99:46:fb:c2:7e:91:da:62:94:4a:25:37:e5:
99:b6:e9:7f:8e:bf:cf:69:44:80:53:7b:1a:ba:f4:dd:ae:14:
e2:d3:b7:cf:ad:e4:bc:81:60:52:fc:29:d5:21:7f:91:c5:8c:
ff:d0:68:ad:bc:08:f9:0a:8a:c3:bc:b2:8d:2b:5f:1c:4d:55:
68:b0:dd:6a:e4:72:3c:98:8c:65:4b:6d:0d:4a:37:68:f6:48:
65:f8:d8:7d:f9:45:2a:4a:e6:aa:46:39:11:b5:28:8b:d6:a5:
26:2a:9a:82:24:23:22:d0:d1:a9:13:f5:48:1a:62:e8:79:44:
84:24:1a:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06iyD/0qzS4EUhTFIx/s+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZTcxMzdkMGQ4MDU4NjI0NmM2YWZmNDk2NzI3YjYwM2Qz
NTE2OTIwHhcNMjYwMzI5MTcwMTI5WhcNMjYwMzMwMTcwMTI5WjAzMTEwLwYDVQQD
EyhmZTM1OTk0MzE3ZDYwY2U3ZmJhNDFkN2U5NTk2ZDM4NzQ5OGQzNzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yr8k0476v0RUTV8w7QT/FvWFDjY
STKmfUW2EfOa9t4+Af2mZ8+BL3JkseQ1haW7Dd1w8cvAnpyg2ERVD6XIGhKdHm/H
+LW3r2MWNhnJ87DtzI52kjqA2DWW9aIoSe3RO+OSF7FlRyscZdZWS9RSEFXWlJwL
+YpztsCgmPEjUgM76LEaH2Nw+ZBV/8RtfaUF/9jT2AHUB64vdyuONEdTEfUugCs/
nwYi8XAIBTKttPGO2obHECNQyld8YoOLCsPOBcqnzj6+aHwcNEFpEaxBllBoVtTF
7xF27SJlJ6ACa1IOunV7RmXg3v8gNfOIO+P6tfW9tZlJEnG4a3H+cy6aqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP41mUMX1gzn+6QdfpWW04dJjTdhMB8GA1UdIwQY
MBaAFIDnE30NgFhiRsav9JZye2A9NRaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ09jVGZRMkFXR0pHeHFfMGxuSjdZRDAxRnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9lZWQxZWItNWUyMi00MzljLTgwNjgt
ODJjODAyNjNiNDdlLzEvZ09jVGZRMkFXR0pHeHFfMGxuSjdZRDAxRnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9lZWQxZWItNWUyMi00MzljLTgwNjgtODJjODAyNjNiNDdl
LzEvZ09jVGZRMkFXR0pHeHFfMGxuSjdZRDAxRnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJsKD3hh
baDfDLSn4xbQw/yfZhtL/4jVdaspJ0xY1s22Mu8kHt6upJXE1y9O9okdOYGlf4n9
Qnk60l6I+yjfUg7oZlo7Gqpsbl74qnQSDD818stSE+eEGApZi6X2zONGLIOpRyC5
4G+FBWvpElep698OK0A/cOSELOpsvuvHY0rtHKKZRvvCfpHaYpRKJTflmbbpf46/
z2lEgFN7Grr03a4U4tO3z63kvIFgUvwp1SF/kcWM/9BorbwI+QqKw7yyjStfHE1V
aLDdauRyPJiMZUttDUo3aPZIZfjYfflFKkrmqkY5EbUoi9alJiqagiQjItDRqRP1
SBpi6HlEhCQaRQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 20:25:44 2026 by rpki-client