Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
File: GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft (raw, json)
Hash identifier: GxmH7r/Js0G76tUNBN+hQytMAdgylbzoxmswIO2fIlQ=
Subject key identifier: 34:33:83:14:F0:2E:FC:BC:FA:F2:76:39:78:ED:BC:60:94:73:D4:EF
Authority key identifier: 1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
Certificate issuer: /CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Certificate serial: 019CAA8F89002F3A1AB236435840AF4AFF75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
Manifest number: 1843
Signing time: Sun 01 Mar 2026 18:00:59 +0000
Manifest this update: Sun 01 Mar 2026 18:00:59 +0000
Manifest next update: Mon 02 Mar 2026 18:00:59 +0000
Files and hashes: 1: GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl (hash: q9X1PEq2kwT1BMZmL1PxHx2MqtUQEftq7qYGSSSbvfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:89:00:2f:3a:1a:b2:36:43:58:40:af:4a:ff:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a09cbac57fcc6c0cab73a24d20f016f686b7626
Validity
Not Before: Mar 1 18:00:59 2026 GMT
Not After : Mar 2 18:00:59 2026 GMT
Subject: CN=34338314f02efcbcfaf2763978edbc609473d4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:3a:2d:17:be:46:01:0c:9a:78:ec:d5:10:
a9:8d:ac:68:b4:45:86:ab:45:20:ce:92:5b:2a:b2:
0a:70:5a:a1:b5:55:be:cb:db:fd:6d:b4:50:1e:d4:
e1:36:bf:26:a0:a1:33:b4:17:5a:67:58:5e:06:f7:
d7:52:c4:33:1a:dd:da:9b:c0:f9:73:2e:ce:98:bc:
f4:2f:3e:7e:96:3c:97:60:83:26:40:32:1c:ec:92:
23:8e:be:d4:fc:df:84:4c:e5:65:45:31:10:67:4f:
b2:4c:3e:0b:7c:37:69:79:25:27:2d:c9:21:ec:01:
ad:81:b2:c3:99:ec:99:9b:d0:5f:d3:c4:3b:88:1d:
84:14:18:de:67:b2:f0:19:dc:e7:d7:1e:ad:6f:ea:
3a:47:d3:5b:63:d4:0d:e2:1d:60:60:d1:ab:14:96:
53:17:92:36:5b:68:81:cf:29:1b:19:88:c4:9a:4b:
b9:42:55:67:de:be:bc:19:49:ac:70:8d:34:88:72:
71:50:cb:a2:28:66:94:da:94:92:71:b9:d0:c6:09:
ff:9f:df:69:47:71:35:66:53:e6:be:1b:dc:63:b5:
88:f4:6e:14:4c:11:ee:2d:14:62:04:a5:d8:25:da:
0e:7a:6f:25:df:0b:69:13:15:db:72:a4:94:94:79:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:33:83:14:F0:2E:FC:BC:FA:F2:76:39:78:ED:BC:60:94:73:D4:EF
X509v3 Authority Key Identifier:
keyid:1A:09:CB:AC:57:FC:C6:C0:CA:B7:3A:24:D2:0F:01:6F:68:6B:76:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GgnLrFf8xsDKtzok0g8Bb2hrdiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9062af-676f-45d9-80f4-a576f0a145ba/1/GgnLrFf8xsDKtzok0g8Bb2hrdiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:71:fe:2c:46:79:85:c4:4a:6a:ad:df:86:f2:d4:7b:8e:38:
22:b6:94:ee:a6:a6:ea:bf:0e:f9:98:fb:9c:dc:a8:36:2c:2e:
e1:75:48:09:6e:98:cb:53:3f:b1:b8:b0:ae:31:cb:d6:bb:f7:
c9:1c:ab:a5:2d:02:8e:37:72:1f:d9:42:9a:ea:3b:c6:0e:c4:
20:3a:32:fe:1a:12:2a:3a:ab:b3:ab:a0:c8:7c:c9:65:b1:ea:
65:9e:77:3a:2e:f0:3f:e9:11:be:45:e1:1c:f0:a0:17:d1:55:
48:4b:e6:d6:a0:44:9d:3d:5d:d7:e6:33:16:d4:e7:84:90:b7:
71:0c:6c:1d:de:54:be:af:9b:6a:3e:06:aa:d2:94:6a:98:43:
54:41:1c:0a:bf:41:11:37:80:1f:c4:0c:5c:f3:e9:57:a0:32:
25:92:9b:ef:95:45:d9:fd:ee:9d:d8:79:03:a5:db:4e:83:ba:
a5:07:e9:9e:a7:5c:f8:0f:9a:8b:2c:ec:d4:a0:1b:4f:96:5a:
0e:ea:90:fc:8c:09:6c:94:8f:89:ce:0a:5b:05:f4:55:66:0a:
82:7c:f4:bd:c5:5d:28:4c:31:79:c0:b0:63:e8:a1:86:ac:19:
67:bd:81:01:95:73:a4:7b:3a:64:a3:ac:77:00:a3:52:96:05:
8d:1c:34:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj4kALzoasjZDWECvSv91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhMDljYmFjNTdmY2M2YzBjYWI3M2EyNGQyMGYwMTZmNjg2
Yjc2MjYwHhcNMjYwMzAxMTgwMDU5WhcNMjYwMzAyMTgwMDU5WjAzMTEwLwYDVQQD
EygzNDMzODMxNGYwMmVmY2JjZmFmMjc2Mzk3OGVkYmM2MDk0NzNkNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiI6LRe+RgEMmnjs1RCpjaxotEWG
q0UgzpJbKrIKcFqhtVW+y9v9bbRQHtThNr8moKEztBdaZ1heBvfXUsQzGt3am8D5
cy7OmLz0Lz5+ljyXYIMmQDIc7JIjjr7U/N+ETOVlRTEQZ0+yTD4LfDdpeSUnLckh
7AGtgbLDmeyZm9Bf08Q7iB2EFBjeZ7LwGdzn1x6tb+o6R9NbY9QN4h1gYNGrFJZT
F5I2W2iBzykbGYjEmku5QlVn3r68GUmscI00iHJxUMuiKGaU2pSScbnQxgn/n99p
R3E1ZlPmvhvcY7WI9G4UTBHuLRRiBKXYJdoOem8l3wtpExXbcqSUlHmKKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQzgxTwLvy8+vJ2OXjtvGCUc9TvMB8GA1UdIwQY
MBaAFBoJy6xX/MbAyrc6JNIPAW9oa3YmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQt
YTU3NmYwYTE0NWJhLzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85MDYyYWYtNjc2Zi00NWQ5LTgwZjQtYTU3NmYwYTE0NWJh
LzEvR2duTHJGZjh4c0RLdHpvazBnOEJiMmhyZGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXH+LEZ5
hcRKaq3fhvLUe444IraU7qam6r8O+Zj7nNyoNiwu4XVICW6Yy1M/sbiwrjHL1rv3
yRyrpS0CjjdyH9lCmuo7xg7EIDoy/hoSKjqrs6ugyHzJZbHqZZ53Oi7wP+kRvkXh
HPCgF9FVSEvm1qBEnT1d1+YzFtTnhJC3cQxsHd5Uvq+baj4GqtKUaphDVEEcCr9B
ETeAH8QMXPPpV6AyJZKb75VF2f3undh5A6XbToO6pQfpnqdc+A+aiyzs1KAbT5Za
DuqQ/IwJbJSPic4KWwX0VWYKgnz0vcVdKEwxecCwY+ihhqwZZ72BAZVzpHs6ZKOs
dwCjUpYFjRw06g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:59 2026 by rpki-client