Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
File: gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json)
Hash identifier: gSpGVCgcD3wft22XwrtXLAOr6rSfkZsKzqI16hAtFOc=
Subject key identifier: 3C:D3:B7:4F:20:95:23:18:5F:65:5A:A9:0E:3D:3F:AB:DF:55:52:32
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial: 01A1279EC78853F61DF3935DF3AAEA1BD608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
Manifest number: 17C3
Signing time: Sat 10 Oct 2026 21:01:19 +0000
Manifest this update: Sat 10 Oct 2026 21:01:19 +0000
Manifest next update: Sun 11 Oct 2026 21:01:19 +0000
Files and hashes: 1: 7e4cKF3TuVRmJGKrCMROf7YbeTM.roa (hash: EI5hNOLcVf+LZoym/zm/8vnZenolnXToI8NdHBuqEzE=)
2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: 6OfnHX2zsT+hwdky6nRdlarKTVqvId7tNUN58CdODbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 20:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:27:9e:c7:88:53:f6:1d:f3:93:5d:f3:aa:ea:1b:d6:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
Validity
Not Before: Oct 10 21:01:19 2026 GMT
Not After : Oct 11 21:01:19 2026 GMT
Subject: CN=3cd3b74f209523185f655aa90e3d3fabdf555232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:2a:82:18:99:f8:cf:50:2a:43:27:9d:2f:00:
6a:89:36:68:f8:e4:f3:9e:96:f6:78:9f:61:d6:ff:
df:00:5f:bd:d3:b2:c6:7d:5a:bf:b4:c6:1e:66:be:
3e:c5:e9:b2:fe:a8:65:ca:5d:98:ea:e8:52:2a:61:
06:5c:9c:54:d2:56:04:09:fb:c8:67:1c:d4:49:87:
9d:5b:69:49:e6:5c:98:71:0f:3f:4c:01:da:20:75:
00:15:66:99:eb:db:10:5a:b4:80:06:e3:3d:c5:f3:
a2:c9:10:5a:bb:6e:09:27:e4:0c:74:54:72:2d:84:
65:8b:39:e3:2d:78:8d:90:3b:ac:8f:e5:f9:e2:9d:
04:74:20:b0:27:43:5e:bb:68:03:76:9e:ec:f8:48:
36:61:6e:33:7b:68:1f:b7:fe:22:a6:58:22:b8:2b:
01:55:a3:e3:99:09:0a:b4:da:6e:66:6b:72:fa:38:
18:ce:80:8e:27:9d:e0:30:56:68:07:f9:ec:42:45:
91:ce:35:32:e2:52:bf:eb:b0:ed:39:f6:8a:46:42:
84:ce:16:05:9c:1b:ae:25:97:42:59:72:73:d1:ca:
f4:38:71:97:80:43:7e:c0:f5:c5:44:67:15:8a:ce:
37:d9:58:41:31:a0:f8:6e:60:21:5a:1d:ff:5b:5e:
ae:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:D3:B7:4F:20:95:23:18:5F:65:5A:A9:0E:3D:3F:AB:DF:55:52:32
X509v3 Authority Key Identifier:
keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:8d:91:38:64:53:13:65:60:65:c0:c9:9b:49:b1:80:5b:41:
19:b0:65:f8:9c:ec:7f:dd:12:b2:0a:57:a0:ff:62:3f:4a:c3:
4a:ff:85:ca:38:c7:40:88:c2:be:65:5a:68:1f:de:05:24:21:
12:16:c5:f1:7a:95:eb:74:62:29:e6:23:59:3b:8d:08:6a:84:
01:b0:55:26:f6:25:90:5f:b2:3d:01:02:11:a6:58:5e:18:1f:
ed:1a:2a:53:1f:4c:e4:0a:f9:06:10:61:94:3f:20:c2:61:ef:
1a:b2:93:14:1b:fe:1b:52:b9:dd:a2:bf:08:d8:3f:48:0a:f1:
ed:f5:a1:45:ca:cd:54:39:79:72:8e:26:cf:eb:2d:a8:dd:5d:
57:5c:b0:96:3b:d5:a0:85:a5:99:e8:ed:b8:fb:cc:f5:19:96:
80:3d:8f:83:c2:b9:bb:99:e3:5f:52:05:75:46:21:aa:88:28:
11:4d:8a:a8:98:2e:55:7b:90:b8:d9:a2:c8:d6:94:6f:30:39:
19:3f:87:5d:12:a5:5e:2a:48:cf:48:b4:34:16:11:d6:c2:6a:
7b:b9:b6:6d:d5:23:85:f7:bf:27:9a:6c:b7:70:d9:da:f6:85:
c7:84:46:39:fc:d1:62:36:7d:92:c3:ea:2b:b4:95:b1:dc:62:
9d:20:ba:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:12:35 2026 by rpki-client