Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
File: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft (raw, json)
Hash identifier: jcJGDSuJlVUWmEtIHXroOvMf3MMb7uH2ROsBnPZNb7Q=
Subject key identifier: CB:3A:FE:46:42:2F:F4:7C:D5:68:52:D1:80:CD:CE:48:96:64:1D:5B
Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
Certificate issuer: /CN=199b3f908ce6e1764617731b624539421d13c94d
Certificate serial: 01A180741D4AE17E7537CF937715B5CBC92A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
Manifest number: 036E
Signing time: Wed 28 Oct 2026 03:00:55 +0000
Manifest this update: Wed 28 Oct 2026 03:00:55 +0000
Manifest next update: Thu 29 Oct 2026 03:00:55 +0000
Files and hashes: 1: 32Hy8z56io1EAMHSQy31lR5BNU8.asa (hash: uCjE8niVCbUockt0spHx/AFhMSClNxfQDlRLXzBF/Tw=)
2: 9HbfhKUnZ7haZ03pPm7cMB8XKU8.roa (hash: ImuG4if+Hc6PIgHVLJaf1cQyzFqgiLjKr6z/klhg4eU=)
3: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl (hash: 7Q2zwvAiyrWaYzN8xlV0mLI7sxaVTGU3/Z3d9FVcw8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:74:1d:4a:e1:7e:75:37:cf:93:77:15:b5:cb:c9:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d
Validity
Not Before: Oct 28 03:00:55 2026 GMT
Not After : Oct 29 03:00:55 2026 GMT
Subject: CN=cb3afe46422ff47cd56852d180cdce4896641d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f4:e4:37:be:04:69:7c:ae:67:56:36:45:e4:
34:d4:78:af:0c:3e:98:58:cb:48:9c:0f:ad:d3:72:
29:cf:6c:1f:b2:49:b6:65:4e:48:4a:27:a7:04:80:
d3:fc:b4:01:66:e9:5d:c4:fa:76:fd:34:a9:77:f8:
b6:74:60:61:b6:3b:85:df:ba:79:f3:15:4a:fc:7b:
8c:be:6e:d3:94:c5:13:f3:58:7c:4f:10:e7:d8:20:
a3:1e:29:8f:58:86:52:97:fa:99:cf:f7:3d:47:1f:
48:aa:11:08:22:7e:ff:16:3e:40:bb:4f:43:15:27:
fe:23:d6:3d:0a:36:ed:50:79:7d:b7:7e:07:0a:7b:
1c:3b:7b:2b:81:f8:38:3e:ae:a5:42:be:b1:da:e1:
73:de:93:eb:ee:72:b0:61:55:3f:bf:a3:4b:9e:e6:
ed:57:da:0d:1a:a8:6e:1b:05:2c:b9:23:12:46:e4:
5e:36:98:d7:2e:2b:68:07:23:6a:fd:5e:be:92:bc:
6a:e1:e9:98:79:38:c4:92:0e:cd:50:0c:2a:ce:40:
97:e2:cc:d5:1c:90:77:15:d0:eb:f5:2b:11:83:e6:
96:12:d6:05:ab:34:ac:90:36:95:8c:d1:40:59:52:
62:6b:1c:88:87:dd:cc:a8:c8:68:e2:23:7c:4f:5e:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3A:FE:46:42:2F:F4:7C:D5:68:52:D1:80:CD:CE:48:96:64:1D:5B
X509v3 Authority Key Identifier:
keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:17:a7:67:33:e3:8a:f0:3b:91:ef:67:cc:76:81:3a:3d:00:
70:f8:5e:09:23:65:45:5c:5e:be:02:af:9a:6c:e0:1c:0d:18:
fe:16:89:34:4d:64:44:de:e4:36:ef:d9:41:3b:6f:b8:2b:01:
f0:9a:d8:78:03:52:27:6d:09:12:a1:fa:d7:d0:41:c1:b0:67:
d1:49:13:75:b5:f3:86:1f:98:12:be:15:4e:33:66:2f:78:cc:
94:a3:86:21:08:74:9b:b2:22:ea:a0:44:d1:b4:8a:a2:c2:c0:
29:ea:83:de:88:65:e4:89:ac:fb:c5:45:51:c5:df:10:e6:82:
08:d4:4e:e6:b9:bc:25:80:e1:b2:b6:54:6b:50:88:f7:84:d9:
be:47:79:f6:d8:da:61:41:36:68:21:d8:00:85:06:67:1d:8e:
fb:71:3e:92:40:4f:71:22:d8:52:3b:0c:af:cd:87:1b:e4:89:
63:66:10:20:d6:c8:49:eb:c5:dd:ef:98:19:f5:a4:ab:9f:24:
89:5d:56:3c:76:a2:eb:52:17:0c:0e:96:e3:4f:f3:60:ce:15:
4c:30:a2:a5:bf:83:53:e0:9a:9d:c5:58:26:05:40:3a:e6:02:
08:e8:e1:ad:04:47:bf:19:86:f1:11:4a:eb:0e:2a:dc:6e:49:
86:94:9a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:51:42 2026 by rpki-client