Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft
File: gz8MJRPUNTtAzvg5F57r-HOCRcY.mft (raw, json)
Hash identifier: pM3mZ6738H9bWX+gM6aJN/aLzp3gajOcXEzAjncuaK8=
Subject key identifier: 1E:68:79:96:4D:84:4C:E8:01:7D:2A:B2:F5:B0:02:E7:4A:8F:59:E9
Authority key identifier: 83:3F:0C:25:13:D4:35:3B:40:CE:F8:39:17:9E:EB:F8:73:82:45:C6
Certificate issuer: /CN=833f0c2513d4353b40cef839179eebf8738245c6
Certificate serial: 019CAB6B48CFEC79AE7FCC9FFBFCFAC14524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz8MJRPUNTtAzvg5F57r-HOCRcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft
Manifest number: 131A
Signing time: Sun 01 Mar 2026 22:01:00 +0000
Manifest this update: Sun 01 Mar 2026 22:01:00 +0000
Manifest next update: Mon 02 Mar 2026 22:01:00 +0000
Files and hashes: 1: gz8MJRPUNTtAzvg5F57r-HOCRcY.crl (hash: nKpcRx5/+B2+UyDD3sDDW/i4OaT19SFj03VThMEfSCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz8MJRPUNTtAzvg5F57r-HOCRcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:48:cf:ec:79:ae:7f:cc:9f:fb:fc:fa:c1:45:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833f0c2513d4353b40cef839179eebf8738245c6
Validity
Not Before: Mar 1 22:01:00 2026 GMT
Not After : Mar 2 22:01:00 2026 GMT
Subject: CN=1e6879964d844ce8017d2ab2f5b002e74a8f59e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:af:2a:be:b2:8c:05:18:e6:9e:b3:36:4a:f7:
53:12:0d:9c:ce:6f:52:89:6b:e0:9a:ac:c3:cb:2e:
40:84:b6:60:96:20:c8:56:7b:cd:8b:84:d0:5a:86:
bc:14:82:58:66:57:4a:ff:45:51:06:f3:a8:84:eb:
11:a3:c2:0b:b9:25:4d:b0:79:de:fa:2c:9b:d4:47:
49:19:58:73:ec:04:6a:57:e4:1c:2a:b8:17:9f:2b:
f6:dd:1b:0a:af:2f:3b:09:92:9a:51:68:76:98:7e:
77:11:0c:cd:08:11:19:d3:39:98:ef:dd:5f:80:13:
12:fc:a3:56:c0:c7:33:21:d8:8d:18:87:7d:01:ff:
3a:a2:19:28:65:8c:d2:91:11:4e:39:0d:6c:23:18:
c6:a6:6a:1d:5d:aa:77:af:21:9c:9c:3a:07:8c:3c:
ca:03:23:c1:38:8f:74:de:a9:88:a8:98:98:79:ee:
b0:07:4b:8b:d2:62:e6:d6:39:a6:64:9c:64:6b:63:
82:ed:fc:c8:e8:a1:d6:75:24:c0:93:ee:8c:b2:95:
8c:bc:d7:a8:31:48:d7:08:4f:39:e0:b2:ec:3a:8c:
3a:96:09:ac:d8:6c:cf:c1:52:08:e9:00:8f:be:f3:
5d:7c:db:12:fd:f6:92:6b:ae:f7:8d:07:b5:ed:ae:
fa:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:68:79:96:4D:84:4C:E8:01:7D:2A:B2:F5:B0:02:E7:4A:8F:59:E9
X509v3 Authority Key Identifier:
keyid:83:3F:0C:25:13:D4:35:3B:40:CE:F8:39:17:9E:EB:F8:73:82:45:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz8MJRPUNTtAzvg5F57r-HOCRcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/9f2fc8-8f2c-47e0-97da-ed07ecf2dc36/1/gz8MJRPUNTtAzvg5F57r-HOCRcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5f:17:90:e9:bf:67:28:e9:4d:b3:97:d5:94:79:c8:ec:26:
a8:78:f1:b0:48:ea:8c:82:17:2f:19:8b:b0:c2:eb:06:6a:67:
c3:e3:1a:45:85:0f:31:7f:48:49:0c:d3:42:9f:ab:a3:59:23:
57:fc:56:98:75:33:b1:e4:68:4b:52:50:b9:62:ce:6f:ce:58:
ec:28:05:a0:3f:59:cb:9c:2b:3f:ed:e3:f1:d7:21:9c:f4:db:
c3:1a:ea:c1:9f:3d:b9:95:b7:fc:c5:fa:30:08:89:3f:e8:58:
c9:e2:22:86:9e:b7:69:57:68:68:9b:b5:a1:f0:9e:f1:fc:b1:
06:a5:51:64:0d:80:bd:b0:35:56:09:c9:ac:b6:36:bb:84:e6:
f8:d9:f4:5f:14:8c:7d:21:7e:c8:08:ac:ba:24:67:0a:58:d4:
7e:73:e9:10:a6:db:eb:5e:d9:85:16:e7:40:ad:29:ba:4b:1d:
2e:24:9e:01:a3:17:42:66:8e:d0:e8:9d:c2:80:a8:d5:05:b7:
a3:d5:85:04:d2:a2:e1:e6:38:09:4f:4d:42:5f:7d:13:a4:33:
28:29:a8:0c:d4:51:8e:9c:d1:91:79:bb:a5:7c:8d:29:2e:07:
b0:3e:c8:fc:d7:d4:cb:0c:d6:da:21:6a:32:ae:fa:cb:3b:6a:
5c:db:e8:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra0jP7Hmuf8yf+/z6wUUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2YwYzI1MTNkNDM1M2I0MGNlZjgzOTE3OWVlYmY4NzM4
MjQ1YzYwHhcNMjYwMzAxMjIwMTAwWhcNMjYwMzAyMjIwMTAwWjAzMTEwLwYDVQQD
EygxZTY4Nzk5NjRkODQ0Y2U4MDE3ZDJhYjJmNWIwMDJlNzRhOGY1OWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnK8qvrKMBRjmnrM2SvdTEg2czm9S
iWvgmqzDyy5AhLZgliDIVnvNi4TQWoa8FIJYZldK/0VRBvOohOsRo8ILuSVNsHne
+iyb1EdJGVhz7ARqV+QcKrgXnyv23RsKry87CZKaUWh2mH53EQzNCBEZ0zmY791f
gBMS/KNWwMczIdiNGId9Af86ohkoZYzSkRFOOQ1sIxjGpmodXap3ryGcnDoHjDzK
AyPBOI903qmIqJiYee6wB0uL0mLm1jmmZJxka2OC7fzI6KHWdSTAk+6MspWMvNeo
MUjXCE854LLsOow6lgms2GzPwVII6QCPvvNdfNsS/faSa673jQe17a76hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5oeZZNhEzoAX0qsvWwAudKj1npMB8GA1UdIwQY
MBaAFIM/DCUT1DU7QM74ORee6/hzgkXGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o4TUpSUFVOVHRBenZnNUY1N3ItSE9DUmNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi85ZjJmYzgtOGYyYy00N2UwLTk3ZGEt
ZWQwN2VjZjJkYzM2LzEvZ3o4TUpSUFVOVHRBenZnNUY1N3ItSE9DUmNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi85ZjJmYzgtOGYyYy00N2UwLTk3ZGEtZWQwN2VjZjJkYzM2
LzEvZ3o4TUpSUFVOVHRBenZnNUY1N3ItSE9DUmNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUF8XkOm/
ZyjpTbOX1ZR5yOwmqHjxsEjqjIIXLxmLsMLrBmpnw+MaRYUPMX9ISQzTQp+ro1kj
V/xWmHUzseRoS1JQuWLOb85Y7CgFoD9Zy5wrP+3j8dchnPTbwxrqwZ89uZW3/MX6
MAiJP+hYyeIihp63aVdoaJu1ofCe8fyxBqVRZA2AvbA1VgnJrLY2u4Tm+Nn0XxSM
fSF+yAisuiRnCljUfnPpEKbb617ZhRbnQK0puksdLiSeAaMXQmaO0OidwoCo1QW3
o9WFBNKi4eY4CU9NQl99E6QzKCmoDNRRjpzRkXm7pXyNKS4HsD7I/NfUywzW2iFq
Mq76yztqXNvoOw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:07:55 2026 by rpki-client