
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
File: gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft (raw, json)
Hash identifier: nWRsZc9DB89W6FOFDMbQye0leGbklNaeTsu0HDqJhqQ=
Subject key identifier: CB:CA:1F:B9:B2:DD:E5:91:5B:46:8B:00:D1:B6:BE:73:CC:4E:3F:75
Authority key identifier: 80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8
Certificate issuer: /CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
Certificate serial: 019CAD59F668D931C61A9459EEEEB5D8AE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 07:01:19 +0000
Manifest this update: Mon 02 Mar 2026 07:01:19 +0000
Manifest next update: Tue 03 Mar 2026 07:01:19 +0000
Files and hashes: 1: gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl (hash: 2Ns+wnW1tDoPa4uUFvOdp82lAaY1bOaR8dIzNdyYtdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:f6:68:d9:31:c6:1a:94:59:ee:ee:b5:d8:ae:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
Validity
Not Before: Mar 2 07:01:19 2026 GMT
Not After : Mar 3 07:01:19 2026 GMT
Subject: CN=cbca1fb9b2dde5915b468b00d1b6be73cc4e3f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:88:5a:9b:fc:0f:3f:22:f6:9f:45:91:20:
54:05:fb:7b:eb:f9:e5:a0:50:d4:52:3a:37:d3:60:
fc:d3:37:f8:be:64:86:5e:15:b0:1f:8e:7e:31:0e:
9e:72:a8:af:3a:35:2f:62:15:44:4f:cf:a0:00:38:
5f:be:07:44:be:f2:e3:8c:4c:8e:dd:49:46:18:83:
b6:70:ab:1c:1b:56:99:16:e4:e6:43:b4:45:d1:80:
35:3b:c9:fc:7a:b3:bd:c9:3e:90:da:5b:0b:5d:4e:
e6:d4:b7:31:c8:e2:fe:83:7b:33:2e:fa:0f:52:6a:
53:ad:e1:2b:7f:5b:d7:4c:9d:3b:f0:6d:1a:d3:b6:
c3:3d:12:8e:3d:69:39:59:64:f4:8b:32:03:b0:10:
9e:eb:fb:2e:3a:fd:d4:17:9e:ff:82:24:23:1c:f9:
5e:0b:4c:a5:ba:54:d3:27:6a:ee:41:7c:51:b1:07:
0b:8d:e5:c0:00:92:df:ef:80:8c:6d:08:5c:d8:54:
cd:48:df:84:00:ed:6c:e1:c3:ae:42:96:6d:e3:3c:
18:0f:68:17:03:dd:9e:8c:a6:64:8e:a6:b9:af:fc:
5d:1b:f1:03:10:6e:29:07:1d:57:75:0c:19:98:cf:
b3:11:a9:a3:2e:ea:bc:e8:e7:58:2d:8f:31:31:c9:
b5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CA:1F:B9:B2:DD:E5:91:5B:46:8B:00:D1:B6:BE:73:CC:4E:3F:75
X509v3 Authority Key Identifier:
keyid:80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:53:51:29:fd:0a:07:30:12:a2:aa:da:64:b5:7c:73:d9:53:
00:f9:24:6b:f3:c3:59:9a:29:8e:a0:c1:43:77:87:a6:9a:2f:
dd:c2:4d:70:80:1d:b9:b6:30:6c:d1:61:76:ff:c8:d5:fa:4d:
49:8e:b0:a4:5a:48:ce:ca:8c:69:d5:de:74:57:09:10:43:d5:
88:2f:50:17:01:56:f8:27:97:94:98:f5:05:30:d8:30:77:d1:
ff:7e:dc:5b:c4:9d:d4:fb:64:6d:2b:22:5b:97:31:2e:4c:ad:
8b:7e:52:94:08:97:6a:8d:e8:5c:39:ec:1c:28:28:37:de:32:
3a:85:b8:96:e4:48:a2:bc:4b:81:30:c4:f8:8f:76:6a:2f:48:
2f:aa:d5:19:c4:30:1c:2a:7c:5e:38:21:d4:c7:00:a3:25:ec:
c7:28:32:9f:18:3a:02:62:3b:cf:25:e7:ad:3f:66:7b:d9:1f:
84:84:43:63:f1:e3:2a:53:1c:d4:d0:3c:49:ba:a5:59:ad:17:
71:9a:aa:05:d2:c6:4f:22:c7:52:c7:8b:a0:6e:76:30:6b:c9:
1d:eb:44:73:8d:c4:af:95:99:95:95:d5:d8:84:e5:90:b1:5b:
83:af:fe:c9:9a:68:cc:16:58:a2:d4:03:72:fe:2e:69:62:b0:
e0:15:6e:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWfZo2THGGpRZ7u612K6KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNmMxODA2YjA2YzVhOGMyYjAzNTBhMGZjNmY3NDZhNjY3
ZTRlYzgwHhcNMjYwMzAyMDcwMTE5WhcNMjYwMzAzMDcwMTE5WjAzMTEwLwYDVQQD
EyhjYmNhMWZiOWIyZGRlNTkxNWI0NjhiMDBkMWI2YmU3M2NjNGUzZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+yIWpv8Dz8i9p9FkSBUBft76/nl
oFDUUjo302D80zf4vmSGXhWwH45+MQ6ecqivOjUvYhVET8+gADhfvgdEvvLjjEyO
3UlGGIO2cKscG1aZFuTmQ7RF0YA1O8n8erO9yT6Q2lsLXU7m1LcxyOL+g3szLvoP
UmpTreErf1vXTJ078G0a07bDPRKOPWk5WWT0izIDsBCe6/suOv3UF57/giQjHPle
C0ylulTTJ2ruQXxRsQcLjeXAAJLf74CMbQhc2FTNSN+EAO1s4cOuQpZt4zwYD2gX
A92ejKZkjqa5r/xdG/EDEG4pBx1XdQwZmM+zEamjLuq86OdYLY8xMcm10QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvKH7my3eWRW0aLANG2vnPMTj91MB8GA1UdIwQY
MBaAFIBsGAawbFqMKwNQoPxvdGpmfk7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jZWMxMDEtMjRlZC00YjY0LTgxNGEt
Mjg4NzhlNGZhZmRkLzEvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jZWMxMDEtMjRlZC00YjY0LTgxNGEtMjg4NzhlNGZhZmRk
LzEvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATFNRKf0K
BzASoqraZLV8c9lTAPkka/PDWZopjqDBQ3eHppov3cJNcIAdubYwbNFhdv/I1fpN
SY6wpFpIzsqMadXedFcJEEPViC9QFwFW+CeXlJj1BTDYMHfR/37cW8Sd1PtkbSsi
W5cxLkyti35SlAiXao3oXDnsHCgoN94yOoW4luRIorxLgTDE+I92ai9IL6rVGcQw
HCp8Xjgh1McAoyXsxygynxg6AmI7zyXnrT9me9kfhIRDY/HjKlMc1NA8SbqlWa0X
cZqqBdLGTyLHUseLoG52MGvJHetEc43Er5WZlZXV2ITlkLFbg6/+yZpozBZYotQD
cv4uaWKw4BVunw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:29:48 2026 by rpki-client