Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
File: gGM2o7hr9zon3dkGZn6tp1tHxJk.mft (raw, json)
Hash identifier: esk6Eru2uByxwfQTshbJCLoz0GZ8fp1VHyd2KUAfqD4=
Subject key identifier: CE:83:4C:D9:0D:3D:BB:0B:18:28:C8:9B:63:86:DF:95:AE:01:DE:77
Authority key identifier: 80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
Certificate issuer: /CN=806336a3b86bf73a27ddd906667eada75b47c499
Certificate serial: 019D3940E0B4D5CCA116945355D483871C93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
Manifest number: 0E2C
Signing time: Sun 29 Mar 2026 11:00:46 +0000
Manifest this update: Sun 29 Mar 2026 11:00:46 +0000
Manifest next update: Mon 30 Mar 2026 11:00:46 +0000
Files and hashes: 1: gGM2o7hr9zon3dkGZn6tp1tHxJk.crl (hash: i/vp1lT/5QQyvrO56K316Hfevjp0eEZfrdvT/obmqEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:e0:b4:d5:cc:a1:16:94:53:55:d4:83:87:1c:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806336a3b86bf73a27ddd906667eada75b47c499
Validity
Not Before: Mar 29 11:00:46 2026 GMT
Not After : Mar 30 11:00:46 2026 GMT
Subject: CN=ce834cd90d3dbb0b1828c89b6386df95ae01de77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3f:b9:a4:eb:64:ae:7e:36:43:a4:9a:e0:b0:
d7:66:6d:40:ef:2c:19:84:69:f0:f7:b2:2a:35:36:
94:1c:98:f1:59:c0:2f:ab:45:3b:6b:de:1a:1b:6d:
00:5a:12:80:a8:e7:cc:17:8c:d0:7a:84:f8:a7:34:
60:76:b0:3f:0f:63:b4:6e:cf:4e:8d:03:cb:c0:c1:
1e:17:7f:71:a0:ec:36:aa:e0:0c:96:13:b1:cb:39:
cd:9b:bb:86:94:10:14:b7:cf:13:27:c0:24:06:43:
7c:a2:3b:8c:fc:20:49:04:b0:9c:05:27:3a:fe:99:
94:3e:3a:5d:ea:9a:33:8e:e7:07:a2:27:38:f1:2b:
46:7c:78:0c:33:75:d1:51:39:2f:52:6b:5f:dc:26:
fa:86:53:3e:4a:cd:e5:f0:a8:87:ce:fd:ee:b0:5a:
b7:2a:6c:0e:37:f8:c8:42:23:e7:ac:39:2e:8a:3a:
72:05:fd:7f:3e:bc:38:70:a7:40:62:af:7c:48:91:
2c:7e:8a:28:9f:90:2c:fa:ec:65:9d:50:dd:5c:61:
8c:b7:0a:12:93:ec:35:38:1f:55:27:0d:3f:10:eb:
f8:ac:7d:d0:94:11:b7:3d:5b:8f:26:55:6c:f1:49:
1e:6d:ac:2c:9a:97:c8:9e:85:15:13:94:ec:5c:37:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:83:4C:D9:0D:3D:BB:0B:18:28:C8:9B:63:86:DF:95:AE:01:DE:77
X509v3 Authority Key Identifier:
keyid:80:63:36:A3:B8:6B:F7:3A:27:DD:D9:06:66:7E:AD:A7:5B:47:C4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGM2o7hr9zon3dkGZn6tp1tHxJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/aa80fc-0d4a-4a97-ab81-09bb596e8454/1/gGM2o7hr9zon3dkGZn6tp1tHxJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6b:0c:d6:64:fe:8d:a2:ef:e3:dd:51:65:fb:46:e4:65:67:
ed:70:33:0e:79:da:98:df:08:80:0d:93:49:35:34:f7:95:4a:
ca:60:03:cb:87:71:0a:a4:17:ef:20:47:b1:13:2b:9f:bd:97:
05:30:e4:5d:2a:02:7a:2a:24:07:df:8c:fd:44:2c:1b:eb:36:
8d:3b:95:03:c9:05:8c:f3:0a:14:7d:dd:83:e8:9e:4f:35:7d:
96:62:73:15:6a:5b:75:8c:49:56:6e:57:e7:fb:c8:99:31:d5:
65:92:a1:40:39:8d:a7:2e:29:7e:42:a3:54:dd:a8:0c:b1:92:
9a:e0:da:33:00:13:8d:c3:90:a4:e5:ad:36:d3:de:00:3a:09:
33:87:f6:9d:76:b1:38:ec:c0:20:e5:1d:1a:e4:97:fd:8b:e8:
6a:ff:75:4d:48:f5:3b:60:a7:21:f1:04:6f:8e:22:2b:5d:94:
ef:e1:df:7f:5d:83:16:50:fc:fb:9a:bc:bc:48:a4:e3:8e:56:
33:94:63:de:72:35:9e:81:b8:9e:ef:4a:0b:99:3d:9d:72:bd:
d6:d2:e6:e3:3c:ee:56:c0:93:7e:47:c6:11:7d:c8:eb:51:d7:
5f:3b:2a:58:f5:72:73:c4:2f:5f:7d:b8:5e:52:4a:95:b2:65:
f1:4c:c3:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QOC01cyhFpRTVdSDhxyTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNjMzNmEzYjg2YmY3M2EyN2RkZDkwNjY2N2VhZGE3NWI0
N2M0OTkwHhcNMjYwMzI5MTEwMDQ2WhcNMjYwMzMwMTEwMDQ2WjAzMTEwLwYDVQQD
EyhjZTgzNGNkOTBkM2RiYjBiMTgyOGM4OWI2Mzg2ZGY5NWFlMDFkZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz+5pOtkrn42Q6Sa4LDXZm1A7ywZ
hGnw97IqNTaUHJjxWcAvq0U7a94aG20AWhKAqOfMF4zQeoT4pzRgdrA/D2O0bs9O
jQPLwMEeF39xoOw2quAMlhOxyznNm7uGlBAUt88TJ8AkBkN8ojuM/CBJBLCcBSc6
/pmUPjpd6pozjucHoic48StGfHgMM3XRUTkvUmtf3Cb6hlM+Ss3l8KiHzv3usFq3
KmwON/jIQiPnrDkuijpyBf1/Prw4cKdAYq98SJEsfooon5As+uxlnVDdXGGMtwoS
k+w1OB9VJw0/EOv4rH3QlBG3PVuPJlVs8UkebawsmpfInoUVE5TsXDeLvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6DTNkNPbsLGCjIm2OG35WuAd53MB8GA1UdIwQY
MBaAFIBjNqO4a/c6J93ZBmZ+radbR8SZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0dNMm83aHI5em9uM2RrR1puNnRwMXRIeEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hYTgwZmMtMGQ0YS00YTk3LWFiODEt
MDliYjU5NmU4NDU0LzEvZ0dNMm83aHI5em9uM2RrR1puNnRwMXRIeEprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hYTgwZmMtMGQ0YS00YTk3LWFiODEtMDliYjU5NmU4NDU0
LzEvZ0dNMm83aHI5em9uM2RrR1puNnRwMXRIeEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX2sM1mT+
jaLv491RZftG5GVn7XAzDnnamN8IgA2TSTU095VKymADy4dxCqQX7yBHsRMrn72X
BTDkXSoCeiokB9+M/UQsG+s2jTuVA8kFjPMKFH3dg+ieTzV9lmJzFWpbdYxJVm5X
5/vImTHVZZKhQDmNpy4pfkKjVN2oDLGSmuDaMwATjcOQpOWtNtPeADoJM4f2nXax
OOzAIOUdGuSX/Yvoav91TUj1O2CnIfEEb44iK12U7+Hff12DFlD8+5q8vEik445W
M5Rj3nI1noG4nu9KC5k9nXK91tLm4zzuVsCTfkfGEX3I61HXXzsqWPVyc8QvX324
XlJKlbJl8UzDSA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:00 2026 by rpki-client