Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
File: gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft (raw, json)
Hash identifier: FSJyOG+OWgnLfCFzU7GxcKozhk5FFSBJkyPrwICkN88=
Subject key identifier: BA:DF:38:E4:68:55:4B:2C:58:BA:0F:E5:69:AC:00:B6:CB:AA:1A:77
Authority key identifier: 81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
Certificate issuer: /CN=8159495b72ff015878c1314d24759b6e9147a8e0
Certificate serial: 019D390A6312AD84F679016DF3AA6B325653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 10:01:15 +0000
Manifest this update: Sun 29 Mar 2026 10:01:15 +0000
Manifest next update: Mon 30 Mar 2026 10:01:15 +0000
Files and hashes: 1: gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl (hash: 09v8Z2Oy1bcBc2D0U7s+v84C1hjQClN0wAaPXeew7qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:63:12:ad:84:f6:79:01:6d:f3:aa:6b:32:56:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8159495b72ff015878c1314d24759b6e9147a8e0
Validity
Not Before: Mar 29 10:01:15 2026 GMT
Not After : Mar 30 10:01:15 2026 GMT
Subject: CN=badf38e468554b2c58ba0fe569ac00b6cbaa1a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:e1:ee:7b:53:13:e3:f0:0f:0d:b8:9c:32:
7b:8a:6c:78:9a:35:0d:c0:af:e6:ea:bb:2f:33:2a:
fd:fe:22:ed:6a:fc:ad:bf:f0:0f:66:4e:c9:6d:1f:
ac:2b:ff:2a:60:19:52:66:67:54:b8:d6:b8:3d:7a:
a3:ba:23:05:60:44:dd:9c:c8:69:c8:08:b2:a1:ea:
62:5d:6f:38:0e:31:3d:ca:e6:91:c1:0a:b7:21:f6:
13:b0:68:90:ea:86:43:a7:83:a7:25:1a:8f:82:a2:
20:4b:ce:0a:55:15:11:f2:7f:ea:04:be:5b:ba:cf:
a8:cf:12:e7:da:8d:56:d6:1a:e9:f2:dc:30:90:7f:
ae:b0:1a:f1:3a:dc:bb:48:f2:0c:2d:24:fa:66:07:
33:68:6e:6f:99:32:9b:c2:ae:ce:5d:17:51:03:a6:
3e:01:39:ff:73:2f:e7:ba:5b:2e:35:cc:79:27:32:
40:29:32:7a:88:e5:7d:79:16:a9:e8:1a:21:c6:95:
5c:63:98:90:2a:84:0a:a4:2c:d3:5e:56:e5:ab:03:
ef:71:48:30:ed:23:a0:82:f6:6d:a4:32:df:59:e8:
12:b0:55:f3:57:bf:b1:f1:da:75:fd:ed:59:08:b0:
35:00:4a:0b:1d:45:b9:6f:28:23:60:d8:c3:c9:2c:
ea:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DF:38:E4:68:55:4B:2C:58:BA:0F:E5:69:AC:00:B6:CB:AA:1A:77
X509v3 Authority Key Identifier:
keyid:81:59:49:5B:72:FF:01:58:78:C1:31:4D:24:75:9B:6E:91:47:A8:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVlJW3L_AVh4wTFNJHWbbpFHqOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/fe889c-8590-4857-8cbb-9024b0d226c6/1/gVlJW3L_AVh4wTFNJHWbbpFHqOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:08:f8:37:5f:cd:b5:60:61:40:19:26:59:bc:84:86:96:df:
37:99:e0:26:47:37:9d:82:b8:25:b9:27:1e:f4:45:69:f2:43:
56:5c:2c:8b:84:58:61:9b:b1:79:c3:cf:b4:45:fb:14:0c:89:
0a:70:c6:3c:e9:ca:fd:9b:0c:fc:88:b7:9e:96:c8:7d:37:6c:
10:1d:f5:39:69:d5:eb:3e:81:91:75:37:2b:f6:69:3d:97:d0:
3b:59:0d:f3:4c:1d:c8:c8:14:25:1d:8f:fe:ca:f1:39:86:b1:
df:37:05:c8:6a:79:e5:6c:dc:94:14:a6:d9:0c:b6:8c:cf:6e:
2b:45:70:13:54:cc:19:77:ee:90:51:e8:f2:b6:1a:57:08:1c:
7c:93:22:5c:81:de:f1:fa:4a:40:f8:df:98:e9:61:c7:e4:29:
b6:71:cc:2e:30:5c:fb:4c:c2:70:9b:b9:41:d9:a4:ef:4d:e1:
94:d5:48:07:23:2b:3f:3b:3b:5e:ee:9d:e3:83:a8:58:ee:72:
9d:23:7d:5d:7d:bd:54:4e:33:6e:70:dc:83:83:8f:27:6e:21:
a0:fb:91:92:29:f5:ee:9a:4e:78:5a:23:aa:5e:48:a7:e8:79:
a6:b5:91:a9:b6:d5:ec:24:3c:ca:3c:f3:57:00:2a:f9:34:a3:
38:b9:79:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CmMSrYT2eQFt86prMlZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNTk0OTViNzJmZjAxNTg3OGMxMzE0ZDI0NzU5YjZlOTE0
N2E4ZTAwHhcNMjYwMzI5MTAwMTE1WhcNMjYwMzMwMTAwMTE1WjAzMTEwLwYDVQQD
EyhiYWRmMzhlNDY4NTU0YjJjNThiYTBmZTU2OWFjMDBiNmNiYWExYTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnl/h7ntTE+PwDw24nDJ7imx4mjUN
wK/m6rsvMyr9/iLtavytv/APZk7JbR+sK/8qYBlSZmdUuNa4PXqjuiMFYETdnMhp
yAiyoepiXW84DjE9yuaRwQq3IfYTsGiQ6oZDp4OnJRqPgqIgS84KVRUR8n/qBL5b
us+ozxLn2o1W1hrp8twwkH+usBrxOty7SPIMLST6ZgczaG5vmTKbwq7OXRdRA6Y+
ATn/cy/nulsuNcx5JzJAKTJ6iOV9eRap6BohxpVcY5iQKoQKpCzTXlblqwPvcUgw
7SOggvZtpDLfWegSsFXzV7+x8dp1/e1ZCLA1AEoLHUW5bygjYNjDySzqnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrfOORoVUssWLoP5WmsALbLqhp3MB8GA1UdIwQY
MBaAFIFZSVty/wFYeMExTSR1m26RR6jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9mZTg4OWMtODU5MC00ODU3LThjYmIt
OTAyNGIwZDIyNmM2LzEvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9mZTg4OWMtODU5MC00ODU3LThjYmItOTAyNGIwZDIyNmM2
LzEvZ1ZsSlczTF9BVmg0d1RGTkpIV2JicEZIcU9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGwj4N1/N
tWBhQBkmWbyEhpbfN5ngJkc3nYK4JbknHvRFafJDVlwsi4RYYZuxecPPtEX7FAyJ
CnDGPOnK/ZsM/Ii3npbIfTdsEB31OWnV6z6BkXU3K/ZpPZfQO1kN80wdyMgUJR2P
/srxOYax3zcFyGp55WzclBSm2Qy2jM9uK0VwE1TMGXfukFHo8rYaVwgcfJMiXIHe
8fpKQPjfmOlhx+QptnHMLjBc+0zCcJu5Qdmk703hlNVIByMrPzs7Xu6d44OoWO5y
nSN9XX29VE4zbnDcg4OPJ24hoPuRkin17ppOeFojql5Ip+h5prWRqbbV7CQ8yjzz
VwAq+TSjOLl5lA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:51 2026 by rpki-client