Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: Stu1ku8Mizm2vn0aUzNCYUZwZ4kXS9Pz09n27b2CT28=
Subject key identifier: 49:DE:08:A1:A1:18:A8:FD:29:52:F4:63:9F:64:9D:35:30:86:72:F7
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 019D2DE1327570B566A963890B8F3CCF8019
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 04C2
Signing time: Fri 27 Mar 2026 06:00:26 +0000
Manifest this update: Fri 27 Mar 2026 06:00:26 +0000
Manifest next update: Sat 28 Mar 2026 06:00:26 +0000
Files and hashes: 1: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: wAAwhbjVAzyUq2HCuL4Bh7heUZxWY6HAYzqdHttVcQM=)
2: gdwYYL9CsGDFTkAuG8S2liyK-r0.roa (hash: S6etNmQi4pEy1ZdQxxbNiQYv530X1B2bmlUtb5h29UQ=)
3: rM0uTZNoLmKtjZkk_tSk7q-w9BI.roa (hash: dwD/35OeBK2EzCg4af00B6g6AoSl3HcpyQOtzC0IokY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2d:e1:32:75:70:b5:66:a9:63:89:0b:8f:3c:cf:80:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Mar 27 06:00:26 2026 GMT
Not After : Mar 28 06:00:26 2026 GMT
Subject: CN=49de08a1a118a8fd2952f4639f649d35308672f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:f2:03:f5:44:dd:84:c2:61:57:7c:5f:e9:
3c:d0:7f:d2:da:7a:84:0b:e2:99:cf:e3:37:8d:47:
1f:9b:c6:d1:66:5d:a4:1a:2d:cb:49:f0:78:a2:19:
df:b5:bd:be:b5:c9:2b:dc:70:05:5d:5a:e9:14:8a:
89:61:3d:2f:dc:b2:b6:cb:b8:07:14:73:be:83:62:
5f:03:68:fa:e2:f4:b0:aa:53:e3:76:f0:8e:2f:42:
97:8a:23:eb:99:72:b5:b4:93:4d:08:ae:78:7c:d9:
e7:b9:a2:01:da:6e:66:19:2e:e9:6e:6e:40:fe:c6:
70:f5:e9:77:41:71:33:e4:ee:71:2e:c3:3a:01:30:
e8:28:b3:20:8a:f2:41:0e:f4:2d:19:83:b5:cb:b9:
93:6d:c9:6f:4f:6b:17:b7:80:f8:b5:2f:b5:7e:4f:
5c:18:cc:d3:aa:8b:73:5a:c0:2c:82:a7:51:7c:b3:
ce:86:c3:9d:7a:b5:96:d3:fa:81:12:1d:43:c4:21:
a8:09:ae:dc:62:9e:1e:18:d8:dd:74:29:10:27:c0:
e8:22:67:a0:2b:ae:14:af:9b:6c:79:d7:64:e2:78:
a8:52:58:e1:6c:d8:ef:0e:79:06:c4:71:06:86:7a:
aa:22:bb:4d:9d:1d:4c:5b:da:a9:d2:e5:bc:37:77:
14:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DE:08:A1:A1:18:A8:FD:29:52:F4:63:9F:64:9D:35:30:86:72:F7
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:23:2f:34:3d:5c:fb:35:19:b6:59:a1:1e:ff:00:58:db:da:
dd:21:9d:af:f6:6c:ab:4e:65:84:32:54:2d:e4:25:f1:a2:d8:
57:dd:57:6c:cf:54:3a:6f:24:2f:48:67:e5:9a:15:56:aa:47:
7b:80:6e:b6:8f:42:66:5d:f1:79:a7:a0:db:e1:31:55:e2:9d:
37:c8:26:4b:0d:3f:11:66:00:06:81:cb:71:d0:00:9d:d6:a1:
8c:e6:b4:cb:59:e2:35:bd:6f:01:6f:c4:a2:4d:09:9e:8d:1b:
d8:a0:77:33:5b:10:26:35:a7:80:5e:53:4b:85:5e:54:cc:6d:
1a:f9:f3:49:0e:75:77:61:92:65:98:f0:2d:15:f3:61:c4:28:
c7:b1:86:31:67:01:f8:67:f2:94:95:4a:6c:57:7e:bd:7f:51:
2c:07:ff:3e:63:f7:f5:01:06:c5:66:27:dc:fe:73:b7:70:02:
60:e5:e4:11:e0:68:64:5d:ed:cf:1c:96:88:31:15:53:8f:e9:
07:e8:a0:9e:37:82:f5:ea:df:b5:dc:46:57:54:10:80:90:c9:
80:34:2c:c5:c4:34:1e:26:5c:85:84:07:cd:72:17:c5:7d:9a:
4e:07:c2:40:06:5c:48:03:0e:bc:da:64:c2:28:d7:ec:1a:d6:
da:6b:68:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 16:09:58 2026 by rpki-client