Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
File: gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json)
Hash identifier: yzRiynWu/gxxu9xGhsvqLVMCudR+aNrjNKHPrtYkUEM=
Subject key identifier: 61:53:6B:B7:A9:13:BD:5A:B9:F2:07:BF:AB:F1:E0:E7:14:FC:85:69
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial: 019F0AE29E2D8C6BFBD689EFF0C6A1F097F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
Manifest number: 16AB
Signing time: Sat 27 Jun 2026 21:00:51 +0000
Manifest this update: Sat 27 Jun 2026 21:00:51 +0000
Manifest next update: Sun 28 Jun 2026 21:00:51 +0000
Files and hashes: 1: 7e4cKF3TuVRmJGKrCMROf7YbeTM.roa (hash: EI5hNOLcVf+LZoym/zm/8vnZenolnXToI8NdHBuqEzE=)
2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: cy1sFkizpVOIMCr+RO3sJke6e951oDi7d4DK04G/k/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0a:e2:9e:2d:8c:6b:fb:d6:89:ef:f0:c6:a1:f0:97:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
Validity
Not Before: Jun 27 21:00:51 2026 GMT
Not After : Jun 28 21:00:51 2026 GMT
Subject: CN=61536bb7a913bd5ab9f207bfabf1e0e714fc8569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:31:2b:e9:bd:d8:6c:6c:94:4c:04:a6:1f:e2:
4f:34:61:39:5a:b1:e3:81:5b:03:88:36:16:bf:8e:
89:77:b7:9d:2d:41:0f:60:85:de:e4:5e:7e:03:e2:
a4:86:92:e2:17:f7:22:e2:cd:e2:c8:b4:15:6e:13:
53:d1:30:bb:d8:4c:30:13:85:9e:a8:89:0f:3e:60:
85:03:f8:7a:72:0c:39:a2:d7:1f:1e:12:cf:22:e9:
4f:b0:0f:f5:6d:f4:64:47:fa:12:61:71:3e:10:c0:
78:9d:9d:24:ef:09:5a:30:32:b5:d4:89:21:9c:9f:
91:a8:b3:28:4d:9a:63:65:0f:5a:09:56:69:06:36:
51:5b:ea:2c:d0:87:2e:5a:6e:f5:61:26:00:f0:d5:
7c:65:18:d8:92:ff:84:94:b6:80:e6:15:84:d0:97:
e7:cf:2c:81:fa:32:10:d0:8f:fe:5a:aa:1b:9c:8d:
73:27:fb:99:e0:83:58:a8:8d:1e:be:48:f8:6b:c5:
f6:e3:b1:8f:49:47:1b:a5:23:92:6d:29:81:1a:fb:
15:50:e5:17:22:18:41:82:99:9e:91:b7:68:35:61:
9d:75:3a:c9:a0:61:38:39:44:4e:d9:44:06:c2:64:
62:61:5e:fb:6e:dd:5f:e8:61:40:b6:a5:62:6c:f2:
50:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:6B:B7:A9:13:BD:5A:B9:F2:07:BF:AB:F1:E0:E7:14:FC:85:69
X509v3 Authority Key Identifier:
keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a6:b2:43:da:8f:12:e3:c0:c0:fc:8a:ee:5d:b6:57:2f:ed:
a8:51:df:33:ce:17:14:ad:3c:60:02:95:88:73:e5:b7:81:11:
6f:25:f1:b1:c3:fe:08:ed:41:3a:61:84:99:b2:2b:b0:40:95:
0b:2b:83:2c:29:4e:af:45:45:91:5b:de:d3:b0:da:14:8e:e3:
2c:5d:54:d5:99:db:ec:0b:d5:b2:8e:3a:4a:8b:6a:90:b7:f6:
f3:a0:52:12:85:d3:ad:d8:1e:57:83:7e:3e:3c:5e:a7:a7:38:
8e:fa:5a:ec:61:00:bd:6a:b5:2b:ef:4b:a6:2d:fb:04:87:85:
7f:52:00:16:ba:4d:0d:5f:d3:27:c8:25:0d:cb:c1:83:b9:03:
d8:fb:59:db:c0:25:4c:8a:dd:4e:9a:34:fe:e2:9f:e0:26:d4:
5d:15:f3:1b:0d:e8:b9:a3:2b:14:34:21:a3:33:56:90:0d:6f:
c0:e0:fd:e4:d2:46:e7:8f:88:75:f8:0d:27:c2:37:4a:df:66:
a8:94:c4:ec:7e:23:8f:76:2b:e0:9e:4c:7e:26:84:ad:ea:44:
49:9e:28:1b:a5:ca:bc:32:ee:97:13:b6:c4:21:a2:a5:22:26:
20:b3:f7:4b:53:bc:62:71:e2:0b:b7:b4:09:a9:b6:a4:a1:b4:
74:64:36:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 22:49:26 2026 by rpki-client