Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
File: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft (raw, json)
Hash identifier: D03amF91BRQhOU6p17SQtH/fDsB0zFmdawC5J2iyzIw=
Subject key identifier: 8E:C4:57:8A:C6:6F:3B:72:F7:0A:3A:F2:EC:AF:9C:70:F3:10:41:0A
Authority key identifier: D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA
Certificate issuer: /CN=d46c9be46cba3051066233ca4f9628a26df8fcca
Certificate serial: 019CADC7B752D1486DF13B24DB254B8802DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
Manifest number: 11C3
Signing time: Mon 02 Mar 2026 09:01:12 +0000
Manifest this update: Mon 02 Mar 2026 09:01:12 +0000
Manifest next update: Tue 03 Mar 2026 09:01:12 +0000
Files and hashes: 1: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl (hash: v8ssEulPsgoMXadrjcdZFvYX1FmNAlYoIOLBstynlCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:b7:52:d1:48:6d:f1:3b:24:db:25:4b:88:02:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46c9be46cba3051066233ca4f9628a26df8fcca
Validity
Not Before: Mar 2 09:01:12 2026 GMT
Not After : Mar 3 09:01:12 2026 GMT
Subject: CN=8ec4578ac66f3b72f70a3af2ecaf9c70f310410a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:78:6e:77:87:f1:58:cf:13:f2:8c:7f:54:
e4:2c:e9:36:ba:33:94:37:8c:b5:5e:81:3b:be:f4:
d3:65:80:b8:3f:46:5a:ce:32:77:9f:81:1d:71:3a:
07:da:3b:ff:04:db:a4:d0:e2:a6:73:f7:5a:26:c2:
c6:6a:a1:7f:e4:6f:3a:6b:af:4b:43:6b:6c:cb:76:
fe:30:32:54:b6:c1:ea:d5:e4:af:57:c2:84:ec:c8:
2b:ce:89:32:83:cb:75:04:2f:e7:c4:5c:b7:63:29:
e1:1b:a3:55:37:b3:93:b3:21:f6:74:be:20:cb:c6:
68:f2:94:b9:82:d0:c8:fe:ca:cf:4d:1e:1c:58:20:
56:0e:ad:cc:21:7e:98:a6:eb:7f:bb:c7:fc:8c:dc:
89:5c:32:25:85:6d:d2:01:31:7a:c7:e7:c8:8a:ba:
58:13:c6:4e:24:4e:53:d3:c1:2f:fd:81:72:59:85:
f3:81:73:2b:53:f7:4b:aa:ab:98:8e:f4:5c:c9:7c:
76:cc:1b:b0:68:a7:6c:94:4d:5d:9c:a5:d5:5b:4e:
7c:7a:f3:df:30:82:7d:bc:51:28:15:38:22:13:d5:
8c:72:ce:cd:f4:be:07:0a:59:d5:ae:aa:9b:df:09:
55:6e:ed:6f:50:c7:62:2c:da:9b:13:aa:51:bd:5c:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:C4:57:8A:C6:6F:3B:72:F7:0A:3A:F2:EC:AF:9C:70:F3:10:41:0A
X509v3 Authority Key Identifier:
keyid:D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e4:00:8e:6b:6d:4d:47:b8:60:ac:fc:bb:69:31:f3:e4:bb:
10:83:65:b0:ef:cd:64:6e:14:69:c7:8c:c9:e6:42:15:64:94:
9c:aa:74:08:a2:18:76:81:e2:8d:fb:f1:ae:da:c3:9a:a7:f5:
6e:b1:6e:96:c6:00:92:59:e5:5d:30:a9:17:7d:59:61:c2:46:
3e:5c:09:61:73:23:fc:1e:ed:db:59:ca:17:bb:63:40:8b:da:
de:2e:05:1c:04:66:8e:78:20:06:f5:5b:b5:91:e3:63:e9:48:
41:44:91:d8:53:96:eb:60:ea:3a:90:34:a7:cd:1f:57:c0:3c:
0b:2d:31:91:fa:07:75:8d:90:16:bf:8c:37:d1:9f:23:46:b6:
0c:f0:3c:55:00:fe:09:dc:d6:d5:c0:47:ef:d9:10:50:a8:b1:
3e:36:af:48:fb:77:c2:11:fc:a8:65:ac:fb:56:e2:f6:61:f9:
6d:50:45:a7:0e:6a:39:e1:d2:46:a7:9f:f0:32:ed:66:ac:ae:
7a:6e:31:29:3c:65:8a:39:a1:c6:31:f6:a8:63:f1:db:27:b7:
b2:d4:86:b6:8d:03:6c:30:07:b6:0c:c2:be:61:ab:ab:a1:d7:
31:60:8b:2b:82:c1:b2:89:6b:ff:03:f5:5a:b9:22:21:b0:11:
4b:01:76:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytx7dS0Uht8Tsk2yVLiALbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NmM5YmU0NmNiYTMwNTEwNjYyMzNjYTRmOTYyOGEyNmRm
OGZjY2EwHhcNMjYwMzAyMDkwMTEyWhcNMjYwMzAzMDkwMTEyWjAzMTEwLwYDVQQD
Eyg4ZWM0NTc4YWM2NmYzYjcyZjcwYTNhZjJlY2FmOWM3MGYzMTA0MTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAF4bneH8VjPE/KMf1TkLOk2ujOU
N4y1XoE7vvTTZYC4P0ZazjJ3n4EdcToH2jv/BNuk0OKmc/daJsLGaqF/5G86a69L
Q2tsy3b+MDJUtsHq1eSvV8KE7Mgrzokyg8t1BC/nxFy3YynhG6NVN7OTsyH2dL4g
y8Zo8pS5gtDI/srPTR4cWCBWDq3MIX6Yput/u8f8jNyJXDIlhW3SATF6x+fIirpY
E8ZOJE5T08Ev/YFyWYXzgXMrU/dLqquYjvRcyXx2zBuwaKdslE1dnKXVW058evPf
MIJ9vFEoFTgiE9WMcs7N9L4HClnVrqqb3wlVbu1vUMdiLNqbE6pRvVz8MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7EV4rGbzty9wo68uyvnHDzEEEKMB8GA1UdIwQY
MBaAFNRsm+RsujBRBmIzyk+WKKJt+PzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9kYmIyZGMtZGEwNi00NjdiLWIzMTIt
NzNjODY3MWE5MGY2LzEvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9kYmIyZGMtZGEwNi00NjdiLWIzMTItNzNjODY3MWE5MGY2
LzEvMUd5YjVHeTZNRkVHWWpQS1Q1WW9vbTM0X01vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf+QAjmtt
TUe4YKz8u2kx8+S7EINlsO/NZG4UaceMyeZCFWSUnKp0CKIYdoHijfvxrtrDmqf1
brFulsYAklnlXTCpF31ZYcJGPlwJYXMj/B7t21nKF7tjQIva3i4FHARmjnggBvVb
tZHjY+lIQUSR2FOW62DqOpA0p80fV8A8Cy0xkfoHdY2QFr+MN9GfI0a2DPA8VQD+
CdzW1cBH79kQUKixPjavSPt3whH8qGWs+1bi9mH5bVBFpw5qOeHSRqef8DLtZqyu
em4xKTxlijmhxjH2qGPx2ye3stSGto0DbDAHtgzCvmGrq6HXMWCLK4LBsolr/wP1
WrkiIbARSwF2bg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:13 2026 by rpki-client