Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
File: gWiVcrIAukh5OByFdCdCZVkqFKs.mft (raw, json)
Hash identifier: lL4gM/vhGT9Z48/UDxVli6XsIdD6ExoB9lNbaeVBONo=
Subject key identifier: 20:D0:8F:0C:14:02:EF:55:DF:CE:73:EB:79:0F:03:31:C5:4A:29:40
Authority key identifier: 81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
Certificate issuer: /CN=81689572b200ba4879381c8574274265592a14ab
Certificate serial: 019D38655B0773B6A62BDBAAB8E377297232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:00:59 +0000
Manifest this update: Sun 29 Mar 2026 07:00:59 +0000
Manifest next update: Mon 30 Mar 2026 07:00:59 +0000
Files and hashes: 1: gWiVcrIAukh5OByFdCdCZVkqFKs.crl (hash: qCncNPTzdhtbaOGFiWFvyz/OmoETSt92mk1TrnLH6d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5b:07:73:b6:a6:2b:db:aa:b8:e3:77:29:72:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81689572b200ba4879381c8574274265592a14ab
Validity
Not Before: Mar 29 07:00:59 2026 GMT
Not After : Mar 30 07:00:59 2026 GMT
Subject: CN=20d08f0c1402ef55dfce73eb790f0331c54a2940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:fa:c6:ce:b6:2f:4c:1f:43:1e:df:75:ff:
db:52:8a:bc:8c:b1:fc:1f:42:e2:3f:ce:6b:0c:f3:
58:df:ce:a0:1f:e2:6a:b2:fe:4d:4e:4c:83:96:5c:
1e:31:62:72:3d:b6:53:c0:25:55:ae:26:85:61:e7:
24:02:2d:29:8b:f9:43:73:6b:a0:ca:c5:b1:d4:ca:
c2:9c:07:e2:1d:5d:86:c1:15:2a:b9:f2:b2:96:cf:
75:ae:f1:51:b0:f8:a9:28:a5:ce:8c:79:89:0e:61:
26:28:f1:b6:c2:13:b9:42:28:91:8a:4f:39:a3:1a:
e7:46:89:ec:f9:86:11:d4:9a:bd:00:07:72:71:0a:
f9:e9:48:d2:83:67:73:b3:89:93:0e:70:f9:75:c1:
53:20:f8:f9:53:6c:27:cc:fa:d2:f4:95:e3:aa:8f:
28:22:0d:29:3a:4c:20:51:29:f8:99:11:6e:76:37:
43:16:40:06:3c:db:75:25:b5:70:09:f9:c1:f4:d1:
b8:fe:38:f9:5c:6a:6e:27:77:2c:7c:8b:71:4d:f0:
6b:bd:ef:51:22:fe:ea:e5:52:08:a9:0e:c6:92:e6:
ac:12:46:72:d3:72:9d:94:d7:ce:eb:84:d6:2d:34:
b0:de:e8:71:1b:73:48:b4:dd:2b:96:8e:14:3e:13:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D0:8F:0C:14:02:EF:55:DF:CE:73:EB:79:0F:03:31:C5:4A:29:40
X509v3 Authority Key Identifier:
keyid:81:68:95:72:B2:00:BA:48:79:38:1C:85:74:27:42:65:59:2A:14:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWiVcrIAukh5OByFdCdCZVkqFKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/88d684-5627-4ff2-aa4b-6241592a944b/1/gWiVcrIAukh5OByFdCdCZVkqFKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:e3:ee:ea:b2:e1:74:7e:94:85:61:44:ca:cc:23:12:1d:0f:
ed:21:ea:66:2b:f1:3a:ec:4c:76:70:b4:a2:63:d1:5c:32:62:
af:c7:c4:82:24:7a:f0:49:8b:7d:96:a2:67:0f:3f:73:eb:e2:
12:23:2d:b2:d5:36:b7:aa:80:c8:44:67:04:cf:c6:d0:b1:3b:
eb:8c:70:1f:bb:81:09:c4:68:79:90:38:e2:9b:e7:b7:7e:52:
68:0d:88:d3:a7:c9:37:3d:d3:e8:b0:17:11:94:17:7a:9d:db:
4a:93:6a:c0:f9:44:32:56:c9:c3:33:c3:6a:13:0f:39:06:d0:
15:c7:69:3d:ec:2f:ec:50:c9:cb:f5:2b:d6:b0:ea:12:33:c9:
f3:f2:fd:1b:a3:58:69:87:5a:5f:01:7b:43:d4:76:52:53:f9:
6c:19:8e:d7:54:09:e9:c4:5f:8a:22:70:47:72:47:c1:15:b0:
62:4c:b3:f5:d4:ab:51:71:66:22:91:33:d3:b9:1c:55:c0:78:
b7:50:cd:89:97:51:10:67:bd:66:a1:da:34:c2:d2:cc:32:f7:
85:c8:4e:9c:62:3f:34:60:6d:72:94:06:64:a5:0d:24:70:91:
12:bf:40:ff:16:4b:ee:f6:8e:cb:db:9e:fa:c5:c6:29:f8:8e:
e0:ee:68:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZVsHc7amK9uquON3KXIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNjg5NTcyYjIwMGJhNDg3OTM4MWM4NTc0Mjc0MjY1NTky
YTE0YWIwHhcNMjYwMzI5MDcwMDU5WhcNMjYwMzMwMDcwMDU5WjAzMTEwLwYDVQQD
EygyMGQwOGYwYzE0MDJlZjU1ZGZjZTczZWI3OTBmMDMzMWM1NGEyOTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkT6xs62L0wfQx7fdf/bUoq8jLH8
H0LiP85rDPNY386gH+Jqsv5NTkyDllweMWJyPbZTwCVVriaFYeckAi0pi/lDc2ug
ysWx1MrCnAfiHV2GwRUqufKyls91rvFRsPipKKXOjHmJDmEmKPG2whO5QiiRik85
oxrnRons+YYR1Jq9AAdycQr56UjSg2dzs4mTDnD5dcFTIPj5U2wnzPrS9JXjqo8o
Ig0pOkwgUSn4mRFudjdDFkAGPNt1JbVwCfnB9NG4/jj5XGpuJ3csfItxTfBrve9R
Iv7q5VIIqQ7GkuasEkZy03KdlNfO64TWLTSw3uhxG3NItN0rlo4UPhOpjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDQjwwUAu9V385z63kPAzHFSilAMB8GA1UdIwQY
MBaAFIFolXKyALpIeTgchXQnQmVZKhSrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OGQ2ODQtNTYyNy00ZmYyLWFhNGIt
NjI0MTU5MmE5NDRiLzEvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84OGQ2ODQtNTYyNy00ZmYyLWFhNGItNjI0MTU5MmE5NDRi
LzEvZ1dpVmNySUF1a2g1T0J5RmRDZENaVmtxRktzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAduPu6rLh
dH6UhWFEyswjEh0P7SHqZivxOuxMdnC0omPRXDJir8fEgiR68EmLfZaiZw8/c+vi
EiMtstU2t6qAyERnBM/G0LE764xwH7uBCcRoeZA44pvnt35SaA2I06fJNz3T6LAX
EZQXep3bSpNqwPlEMlbJwzPDahMPOQbQFcdpPewv7FDJy/Ur1rDqEjPJ8/L9G6NY
aYdaXwF7Q9R2UlP5bBmO11QJ6cRfiiJwR3JHwRWwYkyz9dSrUXFmIpEz07kcVcB4
t1DNiZdREGe9ZqHaNMLSzDL3hchOnGI/NGBtcpQGZKUNJHCREr9A/xZL7vaOy9ue
+sXGKfiO4O5o3Q==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:49 2026 by rpki-client