Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
File: gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft (raw, json)
Hash identifier: MC8hwFGTv5sDxkpHgAjEP11o15YFhYgYajK/3lDu328=
Subject key identifier: D5:7A:CE:F7:50:BB:00:70:4E:89:55:91:4F:B3:30:F3:A1:2C:4C:5D
Authority key identifier: 80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8
Certificate issuer: /CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
Certificate serial: 019D9AE390D53B2CB7A6B0B16033CACD0A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 10:01:38 +0000
Manifest this update: Fri 17 Apr 2026 10:01:38 +0000
Manifest next update: Sat 18 Apr 2026 10:01:38 +0000
Files and hashes: 1: gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl (hash: OVcCVBR0Ma1OPtiMm945Q+wDJ3qp7dDFsBnhj3bF9kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:90:d5:3b:2c:b7:a6:b0:b1:60:33:ca:cd:0a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=806c1806b06c5a8c2b0350a0fc6f746a667e4ec8
Validity
Not Before: Apr 17 10:01:38 2026 GMT
Not After : Apr 18 10:01:38 2026 GMT
Subject: CN=d57acef750bb00704e8955914fb330f3a12c4c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:ab:06:ee:64:19:38:a6:c1:cc:e8:a8:13:
db:42:34:83:3d:48:06:be:64:5c:d1:5c:63:32:f7:
d7:c4:d4:57:20:14:ca:c7:5c:42:ad:9a:26:81:09:
34:08:2a:7d:1d:63:ea:d7:ef:f3:bb:23:a1:23:53:
c1:eb:52:d3:50:4a:d9:ad:be:f9:37:1e:5f:d6:f2:
6c:3b:cc:2e:f3:51:07:c7:79:c1:66:6c:e5:28:ed:
a7:99:6c:80:9d:66:92:93:3e:d4:79:ce:bf:0f:8c:
39:db:04:fb:5f:ec:53:12:04:e5:54:24:7f:52:83:
4b:f8:42:a8:bb:79:de:4d:3c:2f:24:f3:2a:67:68:
87:e8:c8:67:4a:a3:92:4c:88:26:b9:bd:10:dd:bf:
91:50:c4:59:67:5e:4b:c1:98:2d:bc:d9:a7:a4:68:
ed:a5:7a:7e:6f:d2:66:e7:8b:53:20:f0:a7:71:ab:
fb:b1:bd:f2:bb:41:d1:ca:df:42:a9:1b:32:2e:5b:
1e:ad:a3:d4:5b:ff:a3:f4:62:fa:2d:38:9a:d1:40:
e2:38:d3:c8:83:8d:00:a5:9d:e3:b8:d6:fb:66:83:
77:ec:1e:fd:89:f0:28:c9:33:36:ff:c1:b9:76:00:
be:45:8b:a5:51:90:ea:43:a3:0e:5d:43:9c:61:88:
03:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7A:CE:F7:50:BB:00:70:4E:89:55:91:4F:B3:30:F3:A1:2C:4C:5D
X509v3 Authority Key Identifier:
keyid:80:6C:18:06:B0:6C:5A:8C:2B:03:50:A0:FC:6F:74:6A:66:7E:4E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGwYBrBsWowrA1Cg_G90amZ-Tsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/cec101-24ed-4b64-814a-28878e4fafdd/1/gGwYBrBsWowrA1Cg_G90amZ-Tsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8c:91:fd:ea:68:0e:3f:cc:02:db:b9:31:7f:05:da:6e:8e:
7b:8d:8e:b3:5b:dc:9d:d1:cb:53:21:85:67:b9:7b:04:c2:db:
6a:9d:e9:3e:2d:c7:93:c6:00:db:a1:59:d1:0e:5b:12:1d:29:
a8:24:1f:10:e0:79:86:a4:15:63:2e:a4:56:3e:85:8d:bd:3f:
da:e9:9f:e6:c6:d6:13:8e:f9:e2:5e:90:ba:f9:83:e5:91:9f:
54:a8:7b:03:a5:11:23:69:b7:d7:a4:4e:11:3b:5c:80:e5:d8:
5a:39:01:9d:82:be:dd:b0:5e:ef:b8:87:fb:5d:ff:a6:6d:eb:
b3:d9:fd:34:b6:06:f0:d4:3d:97:70:28:f6:84:89:fd:1a:94:
29:be:b6:b6:26:4a:58:6d:80:6d:cb:54:1a:01:1e:16:6f:a7:
bb:5d:3a:4c:4d:a4:8d:87:24:65:b8:e4:ce:9f:40:39:25:14:
50:5e:87:f0:b9:25:19:bc:f2:49:14:51:33:9b:27:2d:77:cc:
42:00:84:40:75:1b:e7:66:c8:4a:bb:c2:ce:a0:e1:18:c1:fd:
24:96:38:09:ee:68:1b:7c:ad:a0:99:1d:99:4c:6b:7c:1c:4f:
bf:f9:7f:a0:9d:35:98:dc:38:8b:13:c2:9a:92:19:01:0a:06:
e6:1b:c6:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a45DVOyy3prCxYDPKzQp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNmMxODA2YjA2YzVhOGMyYjAzNTBhMGZjNmY3NDZhNjY3
ZTRlYzgwHhcNMjYwNDE3MTAwMTM4WhcNMjYwNDE4MTAwMTM4WjAzMTEwLwYDVQQD
EyhkNTdhY2VmNzUwYmIwMDcwNGU4OTU1OTE0ZmIzMzBmM2ExMmM0YzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8KrBu5kGTimwczoqBPbQjSDPUgG
vmRc0VxjMvfXxNRXIBTKx1xCrZomgQk0CCp9HWPq1+/zuyOhI1PB61LTUErZrb75
Nx5f1vJsO8wu81EHx3nBZmzlKO2nmWyAnWaSkz7Uec6/D4w52wT7X+xTEgTlVCR/
UoNL+EKou3neTTwvJPMqZ2iH6MhnSqOSTIgmub0Q3b+RUMRZZ15LwZgtvNmnpGjt
pXp+b9Jm54tTIPCncav7sb3yu0HRyt9CqRsyLlseraPUW/+j9GL6LTia0UDiONPI
g40ApZ3juNb7ZoN37B79ifAoyTM2/8G5dgC+RYulUZDqQ6MOXUOcYYgDWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNV6zvdQuwBwTolVkU+zMPOhLExdMB8GA1UdIwQY
MBaAFIBsGAawbFqMKwNQoPxvdGpmfk7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jZWMxMDEtMjRlZC00YjY0LTgxNGEt
Mjg4NzhlNGZhZmRkLzEvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9jZWMxMDEtMjRlZC00YjY0LTgxNGEtMjg4NzhlNGZhZmRk
LzEvZ0d3WUJyQnNXb3dyQTFDZ19HOTBhbVotVHNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuIyR/epo
Dj/MAtu5MX8F2m6Oe42Os1vcndHLUyGFZ7l7BMLbap3pPi3Hk8YA26FZ0Q5bEh0p
qCQfEOB5hqQVYy6kVj6Fjb0/2umf5sbWE4754l6QuvmD5ZGfVKh7A6URI2m316RO
ETtcgOXYWjkBnYK+3bBe77iH+13/pm3rs9n9NLYG8NQ9l3Ao9oSJ/RqUKb62tiZK
WG2AbctUGgEeFm+nu106TE2kjYckZbjkzp9AOSUUUF6H8LklGbzySRRRM5snLXfM
QgCEQHUb52bISrvCzqDhGMH9JJY4Ce5oG3ytoJkdmUxrfBxPv/l/oJ01mNw4ixPC
mpIZAQoG5hvGbw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:01:57 2026 by rpki-client