Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
File: gMez3pa5HtxunIXZ1aZoQZIDtfU.mft (raw, json)
Hash identifier: tv37YEIHI6ms6Z/hLw3FcKmWelbgq/QzhS4AXzSIb3Y=
Subject key identifier: 4D:3A:F8:FE:0F:90:A3:79:D7:EE:C4:D8:CA:C5:B8:CD:29:C3:05:97
Authority key identifier: 80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
Certificate issuer: /CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Certificate serial: 019CAAC6D72E15BA0959F4D98001C9A04328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
Manifest number: 0621
Signing time: Sun 01 Mar 2026 19:01:23 +0000
Manifest this update: Sun 01 Mar 2026 19:01:23 +0000
Manifest next update: Mon 02 Mar 2026 19:01:23 +0000
Files and hashes: 1: gMez3pa5HtxunIXZ1aZoQZIDtfU.crl (hash: pNO+B4oyQ5OqttWVBqyXU0KO3jBxA0Lom8i7CbfedB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d7:2e:15:ba:09:59:f4:d9:80:01:c9:a0:43:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c7b3de96b91edc6e9c85d9d5a668419203b5f5
Validity
Not Before: Mar 1 19:01:23 2026 GMT
Not After : Mar 2 19:01:23 2026 GMT
Subject: CN=4d3af8fe0f90a379d7eec4d8cac5b8cd29c30597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:66:f8:10:28:b9:c4:98:83:f3:42:71:4c:90:
22:ba:9c:3c:91:bf:77:71:56:b0:e4:91:ff:6d:d6:
03:a8:4e:b2:16:96:6d:50:f5:7a:56:5c:e2:af:ed:
b8:08:ee:5f:1b:72:3d:22:d4:86:7b:c4:9d:76:75:
df:13:70:88:0d:bb:46:99:a7:6e:24:c8:83:eb:27:
a9:23:a1:ad:b9:e9:eb:a0:7a:38:96:e1:70:3d:82:
30:db:e7:d9:48:80:e3:34:73:45:1c:b0:83:5d:32:
18:bd:e5:94:fe:11:c2:9b:f5:50:02:d1:12:35:08:
20:cb:6c:86:ae:44:04:58:2d:20:3b:7c:26:d9:63:
67:48:70:c1:38:72:e8:58:7f:79:3a:7d:fe:9e:29:
c4:c3:c1:3b:ff:7e:12:02:2a:5d:0f:b7:31:43:f8:
47:4e:23:f4:d3:a3:8e:65:84:e9:e7:d3:99:c0:21:
82:d2:56:07:c6:09:c7:f3:82:8c:59:5b:79:e4:b9:
34:4e:37:d1:03:4f:1b:b4:25:fe:3b:68:25:94:1c:
4a:bd:63:59:f4:84:dc:95:34:ef:98:2a:da:de:32:
52:e9:30:5f:a9:dd:e1:1e:3b:56:3d:dd:03:03:90:
b5:c5:26:a5:ba:a0:b3:ff:72:6b:50:45:a5:ec:a0:
3d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3A:F8:FE:0F:90:A3:79:D7:EE:C4:D8:CA:C5:B8:CD:29:C3:05:97
X509v3 Authority Key Identifier:
keyid:80:C7:B3:DE:96:B9:1E:DC:6E:9C:85:D9:D5:A6:68:41:92:03:B5:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMez3pa5HtxunIXZ1aZoQZIDtfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c301fb-3174-45c3-a447-a7fcfb529dc7/1/gMez3pa5HtxunIXZ1aZoQZIDtfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:4b:d1:00:73:f5:37:26:65:97:97:c3:38:72:7b:f3:f6:2b:
b0:4d:20:4c:68:7e:bb:62:5f:f0:f6:86:ff:df:f0:25:65:04:
f3:fd:07:ad:40:75:10:3d:da:11:f7:3f:7f:1b:03:f9:2e:aa:
18:68:93:7b:df:93:e9:ce:e4:8d:b8:a3:d2:15:47:09:84:08:
61:bd:ae:f9:65:5f:9b:15:6a:8f:f5:fb:14:9c:9e:6e:c9:34:
7b:8e:d3:6b:dc:d7:31:5e:13:81:84:c6:28:6c:e3:c6:09:00:
77:c4:d7:cf:95:41:b0:78:ba:43:bc:c3:c5:c5:41:00:24:71:
1b:a1:d0:ba:34:9b:8c:28:e9:25:bb:94:30:5f:4e:47:0d:c5:
fd:f6:0e:f5:eb:f4:5e:d1:1b:09:b5:5f:59:8c:16:c0:18:dd:
12:22:10:5c:af:57:03:c6:43:83:62:da:3d:42:fa:40:83:7b:
d7:48:4c:f1:a1:f8:eb:40:6c:1c:32:b2:21:68:ec:0f:1e:63:
4b:31:c0:ec:5e:06:3c:e0:74:01:23:b6:db:61:0d:44:c1:e0:
7f:78:22:3e:ba:8f:29:51:72:d2:c3:76:3a:07:52:68:21:bb:
fb:7f:dd:ff:ab:b4:cb:62:51:25:63:7e:e7:5a:d0:4f:28:f5:
d9:23:31:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxtcuFboJWfTZgAHJoEMoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYzdiM2RlOTZiOTFlZGM2ZTljODVkOWQ1YTY2ODQxOTIw
M2I1ZjUwHhcNMjYwMzAxMTkwMTIzWhcNMjYwMzAyMTkwMTIzWjAzMTEwLwYDVQQD
Eyg0ZDNhZjhmZTBmOTBhMzc5ZDdlZWM0ZDhjYWM1YjhjZDI5YzMwNTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Gb4ECi5xJiD80JxTJAiupw8kb93
cVaw5JH/bdYDqE6yFpZtUPV6Vlzir+24CO5fG3I9ItSGe8SddnXfE3CIDbtGmadu
JMiD6yepI6GtuenroHo4luFwPYIw2+fZSIDjNHNFHLCDXTIYveWU/hHCm/VQAtES
NQggy2yGrkQEWC0gO3wm2WNnSHDBOHLoWH95On3+ninEw8E7/34SAipdD7cxQ/hH
TiP006OOZYTp59OZwCGC0lYHxgnH84KMWVt55Lk0TjfRA08btCX+O2gllBxKvWNZ
9ITclTTvmCra3jJS6TBfqd3hHjtWPd0DA5C1xSaluqCz/3JrUEWl7KA9yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE06+P4PkKN51+7E2MrFuM0pwwWXMB8GA1UdIwQY
MBaAFIDHs96WuR7cbpyF2dWmaEGSA7X1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMzAxZmItMzE3NC00NWMzLWE0NDct
YTdmY2ZiNTI5ZGM3LzEvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9jMzAxZmItMzE3NC00NWMzLWE0NDctYTdmY2ZiNTI5ZGM3
LzEvZ01lejNwYTVIdHh1bklYWjFhWm9RWklEdGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUvRAHP1
NyZll5fDOHJ78/YrsE0gTGh+u2Jf8PaG/9/wJWUE8/0HrUB1ED3aEfc/fxsD+S6q
GGiTe9+T6c7kjbij0hVHCYQIYb2u+WVfmxVqj/X7FJyebsk0e47Ta9zXMV4TgYTG
KGzjxgkAd8TXz5VBsHi6Q7zDxcVBACRxG6HQujSbjCjpJbuUMF9ORw3F/fYO9ev0
XtEbCbVfWYwWwBjdEiIQXK9XA8ZDg2LaPUL6QIN710hM8aH460BsHDKyIWjsDx5j
SzHA7F4GPOB0ASO222ENRMHgf3giPrqPKVFy0sN2OgdSaCG7+3/d/6u0y2JRJWN+
51rQTyj12SMxuQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:45 2026 by rpki-client