Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
File: gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json)
Hash identifier: feZA1YiL0wxsWx6mP9ttmQZVKqdvS6kmS/vbMhCZfng=
Subject key identifier: 06:B2:4B:3F:4C:50:B2:5F:10:CA:EE:4A:DB:50:26:5B:2B:D6:1D:60
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial: 019D37894B7B98B5C13C4E782270B15D288F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
Manifest number: 15B9
Signing time: Sun 29 Mar 2026 03:00:37 +0000
Manifest this update: Sun 29 Mar 2026 03:00:37 +0000
Manifest next update: Mon 30 Mar 2026 03:00:37 +0000
Files and hashes: 1: 7e4cKF3TuVRmJGKrCMROf7YbeTM.roa (hash: EI5hNOLcVf+LZoym/zm/8vnZenolnXToI8NdHBuqEzE=)
2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: ahXrnxgPd1pKm+9I3ayIjgmH1N/zqtnDln3c/WiDuWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:4b:7b:98:b5:c1:3c:4e:78:22:70:b1:5d:28:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
Validity
Not Before: Mar 29 03:00:37 2026 GMT
Not After : Mar 30 03:00:37 2026 GMT
Subject: CN=06b24b3f4c50b25f10caee4adb50265b2bd61d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:04:a9:04:49:d4:57:8e:d0:7d:e8:00:3c:
43:4e:06:7e:9f:71:dc:c6:47:b2:4e:91:7d:1d:00:
f6:fc:76:c0:ec:6c:4d:84:ba:5a:a5:64:50:ec:30:
3e:eb:ed:e6:8f:4e:f3:6d:02:67:3f:af:72:c4:81:
bb:a6:04:f8:5e:57:bd:3d:57:d4:f2:79:85:d7:cf:
29:73:9b:e7:49:cc:ed:96:13:75:56:1e:21:33:d1:
38:a5:7d:7e:a4:a5:2b:2c:ad:74:7b:6b:96:78:8c:
9d:03:3e:56:78:9b:b5:11:c5:3a:79:16:57:4a:80:
8e:a2:24:de:98:ac:0f:a1:b9:3b:6c:21:58:34:e4:
8a:e3:c9:dc:60:1b:c4:1f:f9:91:11:50:86:2a:08:
52:b6:9d:02:04:44:a4:f4:1f:25:0b:43:26:89:5a:
28:32:f0:db:32:09:84:9a:88:18:55:3f:8e:05:56:
92:55:c5:05:07:9d:a6:5a:7f:64:78:dd:37:67:30:
15:1d:5c:91:45:7f:67:5c:8e:0b:e7:10:19:4e:85:
a9:47:eb:54:0b:1f:31:bb:53:12:04:9c:3e:e2:93:
82:1f:b3:c9:5f:dd:86:fc:b2:fc:bb:81:cd:f2:81:
cc:8e:d5:b3:b5:9c:84:01:b4:71:a5:21:7d:42:49:
4b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B2:4B:3F:4C:50:B2:5F:10:CA:EE:4A:DB:50:26:5B:2B:D6:1D:60
X509v3 Authority Key Identifier:
keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5b:32:11:a3:41:91:13:71:f1:9d:2e:0a:99:b4:1f:b7:01:
3f:28:aa:78:57:55:ae:29:76:da:9c:22:5d:af:c3:71:fb:d5:
b3:76:10:2b:f4:ba:2a:33:b8:60:bc:5f:b8:78:09:0e:d0:50:
a9:de:76:a6:88:5c:ff:91:65:76:31:dc:51:7a:71:ab:1e:81:
bb:7f:59:79:75:4c:48:15:cf:22:12:d1:f7:7f:ac:27:5b:3c:
f0:3b:36:bc:cd:8e:5a:38:26:c5:d1:33:92:73:13:9b:e8:1f:
90:67:32:cf:f1:47:7b:b2:96:8a:2d:1f:e9:2b:5a:ca:05:c0:
0d:9e:71:51:b6:75:0d:75:74:11:d1:ea:8c:ee:14:c5:55:f0:
18:86:69:48:fd:29:1b:e0:e4:9a:5f:5a:f2:60:1b:ae:9a:57:
62:fd:f0:73:f4:91:c6:dc:6e:2a:10:c6:f2:87:37:36:31:79:
68:e0:b4:d3:08:04:fb:5e:c0:bd:aa:5b:7e:a3:50:d1:8a:24:
52:9e:20:3c:06:17:f4:59:7e:04:d4:2c:dc:45:39:cc:39:e7:
2c:ba:ab:0d:19:d6:76:85:a4:f2:5c:4d:70:6e:4f:4e:6b:e6:
d2:c8:be:d8:6f:fa:bd:40:09:c8:8e:13:14:9a:cf:45:3f:f3:
a0:c6:34:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iUt7mLXBPE54InCxXSiPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzU0NDRjNTgxMTYxYzU4OGFlODRiZTAxOTY1YmM4ZTgz
NzgwYjgwHhcNMjYwMzI5MDMwMDM3WhcNMjYwMzMwMDMwMDM3WjAzMTEwLwYDVQQD
EygwNmIyNGIzZjRjNTBiMjVmMTBjYWVlNGFkYjUwMjY1YjJiZDYxZDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5YEqQRJ1FeO0H3oADxDTgZ+n3Hc
xkeyTpF9HQD2/HbA7GxNhLpapWRQ7DA+6+3mj07zbQJnP69yxIG7pgT4Xle9PVfU
8nmF188pc5vnScztlhN1Vh4hM9E4pX1+pKUrLK10e2uWeIydAz5WeJu1EcU6eRZX
SoCOoiTemKwPobk7bCFYNOSK48ncYBvEH/mREVCGKghStp0CBESk9B8lC0MmiVoo
MvDbMgmEmogYVT+OBVaSVcUFB52mWn9keN03ZzAVHVyRRX9nXI4L5xAZToWpR+tU
Cx8xu1MSBJw+4pOCH7PJX92G/LL8u4HN8oHMjtWztZyEAbRxpSF9QklL0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaySz9MULJfEMruSttQJlsr1h1gMB8GA1UdIwQY
MBaAFIM1RExYEWHFiK6EvgGWW8joN4C4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEt
MWYxM2Y1NWQwMDU5LzEvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEtMWYxM2Y1NWQwMDU5
LzEvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFsyEaNB
kRNx8Z0uCpm0H7cBPyiqeFdVril22pwiXa/DcfvVs3YQK/S6KjO4YLxfuHgJDtBQ
qd52pohc/5FldjHcUXpxqx6Bu39ZeXVMSBXPIhLR93+sJ1s88Ds2vM2OWjgmxdEz
knMTm+gfkGcyz/FHe7KWii0f6StaygXADZ5xUbZ1DXV0EdHqjO4UxVXwGIZpSP0p
G+Dkml9a8mAbrppXYv3wc/SRxtxuKhDG8oc3NjF5aOC00wgE+17AvapbfqNQ0Yok
Up4gPAYX9Fl+BNQs3EU5zDnnLLqrDRnWdoWk8lxNcG5PTmvm0si+2G/6vUAJyI4T
FJrPRT/zoMY0HA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:40 2026 by rpki-client