Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: w63uweNNXSLNNep17yIsaytghYiLtvm41X3o5bDYH8g=
Subject key identifier: C0:8C:58:CD:F1:CD:10:D5:F0:95:97:DC:3B:8F:7E:D8:0C:F9:5D:33
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 019E22ED4FF6060812A81C18E2049D73F4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 0541
Signing time: Wed 13 May 2026 20:00:38 +0000
Manifest this update: Wed 13 May 2026 20:00:38 +0000
Manifest next update: Thu 14 May 2026 20:00:38 +0000
Files and hashes: 1: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: BbbpoFXLVockumHVOXgVMKpheAccNR4C9ZMurPIu1q0=)
2: WKAggwW4-2Bg4MeY0gX0Cx4LA4U.roa (hash: /G/TygfNsNBDAG6vbAPSrcTJMAI8N6hE5YMA8pkrvnA=)
3: rM0uTZNoLmKtjZkk_tSk7q-w9BI.roa (hash: dwD/35OeBK2EzCg4af00B6g6AoSl3HcpyQOtzC0IokY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:22:ed:4f:f6:06:08:12:a8:1c:18:e2:04:9d:73:f4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: May 13 20:00:38 2026 GMT
Not After : May 14 20:00:38 2026 GMT
Subject: CN=c08c58cdf1cd10d5f09597dc3b8f7ed80cf95d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9f:d3:79:f3:81:4d:a1:64:2b:a1:fc:ef:6c:
36:66:17:c5:81:4a:96:38:e4:7c:6f:50:9b:c1:c5:
a5:d8:fc:5f:40:a0:63:de:d4:d7:19:04:2a:b9:d2:
79:f8:52:f8:c1:fa:fb:3b:dc:58:02:49:dd:6f:51:
ae:2b:44:f8:1a:68:0a:b7:6b:9b:fa:a3:46:36:3d:
aa:ad:73:28:02:f0:39:f4:b2:63:fc:38:2e:50:b9:
12:e4:5a:b5:55:aa:2c:3e:34:9d:4d:e1:ae:38:5c:
67:a0:07:47:fa:97:93:7d:f0:6e:0e:67:0d:44:c3:
5f:27:b3:46:a9:3a:07:a3:b0:f5:32:50:b6:e5:f9:
63:93:ed:70:1c:ee:43:1c:76:95:14:70:8c:22:c1:
41:d7:7e:1f:ba:3c:b9:fd:ee:f5:35:ad:de:72:af:
42:98:f1:ea:07:03:ca:f0:f9:30:3d:15:fb:dc:87:
6d:69:0f:0c:47:ee:85:65:48:b5:82:b1:b2:3d:f4:
83:7d:86:f7:fb:99:52:81:e1:b2:40:94:47:de:6f:
35:bf:24:1f:4b:a3:d5:1e:d8:55:ad:39:6f:6a:94:
96:e5:68:7b:6b:a2:28:15:a0:dc:37:c4:7e:c8:04:
1e:6c:24:25:d2:01:e0:75:0a:7e:cc:1b:9e:8f:b5:
be:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8C:58:CD:F1:CD:10:D5:F0:95:97:DC:3B:8F:7E:D8:0C:F9:5D:33
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:d5:0b:64:ea:54:3f:b4:ab:35:8f:0c:c2:6a:6f:bc:10:91:
a7:24:c6:df:1e:ec:ea:ea:7e:14:35:72:a1:6c:8e:ba:4b:25:
86:18:21:b3:f7:ec:13:4b:33:6c:a6:c8:3d:ef:7c:85:9e:8a:
ec:b4:43:9b:f8:55:b0:a9:8f:b8:ed:9a:0b:2d:81:f7:45:22:
42:00:b4:f3:8c:d8:b2:3a:64:fa:7f:3d:b7:10:cc:6c:ac:35:
f6:56:fc:d0:fd:70:a4:c3:be:6c:07:a4:54:2a:c5:85:a8:ea:
91:c4:9c:1c:bf:6b:f5:15:81:31:ac:d6:d4:f0:80:99:f6:78:
d9:cc:2c:7f:ab:09:fc:e5:95:70:0d:74:2c:fb:5d:73:b2:a3:
cf:93:aa:0e:c3:60:7a:f7:90:de:5f:93:62:92:f3:4f:42:86:
f2:10:7b:64:b2:70:4f:c6:44:58:20:0d:8d:18:0e:d2:19:cc:
fd:4e:71:86:d0:00:58:fb:ae:14:1d:a9:45:3a:58:8d:bb:5b:
a3:e5:33:c2:5d:01:21:00:84:a7:e2:6d:c4:24:92:75:8c:3e:
83:bd:0f:e6:58:43:da:95:41:39:8c:b3:a9:fb:4a:86:65:7e:
e2:19:d4:b3:ed:6f:8a:c8:22:99:a7:7b:7f:21:2f:52:d3:f6:
1e:02:d3:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4i7U/2BggSqBwY4gSdc/TwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OTRiZjg0ZGUzNmZmYjlkOTRiMjU3ZjMyNzgxMzQxOTQx
MzM0OTgwHhcNMjYwNTEzMjAwMDM4WhcNMjYwNTE0MjAwMDM4WjAzMTEwLwYDVQQD
EyhjMDhjNThjZGYxY2QxMGQ1ZjA5NTk3ZGMzYjhmN2VkODBjZjk1ZDMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5/TefOBTaFkK6H872w2ZhfFgUqW
OOR8b1CbwcWl2PxfQKBj3tTXGQQqudJ5+FL4wfr7O9xYAkndb1GuK0T4GmgKt2ub
+qNGNj2qrXMoAvA59LJj/DguULkS5Fq1VaosPjSdTeGuOFxnoAdH+peTffBuDmcN
RMNfJ7NGqToHo7D1MlC25fljk+1wHO5DHHaVFHCMIsFB134fujy5/e71Na3ecq9C
mPHqBwPK8PkwPRX73IdtaQ8MR+6FZUi1grGyPfSDfYb3+5lSgeGyQJRH3m81vyQf
S6PVHthVrTlvapSW5Wh7a6IoFaDcN8R+yAQebCQl0gHgdQp+zBuej7W+IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCMWM3xzRDV8JWX3DuPftgM+V0zMB8GA1UdIwQY
MBaAFBmUv4TeNv+52UslfzJ4E0GUEzSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUt
NDZhZjNlNTBjMDUyLzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUtNDZhZjNlNTBjMDUy
LzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtULZOpU
P7SrNY8MwmpvvBCRpyTG3x7s6up+FDVyoWyOukslhhghs/fsE0szbKbIPe98hZ6K
7LRDm/hVsKmPuO2aCy2B90UiQgC084zYsjpk+n89txDMbKw19lb80P1wpMO+bAek
VCrFhajqkcScHL9r9RWBMazW1PCAmfZ42cwsf6sJ/OWVcA10LPtdc7Kjz5OqDsNg
eveQ3l+TYpLzT0KG8hB7ZLJwT8ZEWCANjRgO0hnM/U5xhtAAWPuuFB2pRTpYjbtb
o+Uzwl0BIQCEp+JtxCSSdYw+g70P5lhD2pVBOYyzqftKhmV+4hnUs+1visgimad7
fyEvUtP2HgLTOA==
-----END CERTIFICATE-----
Generated at Thu May 14 03:43:21 2026 by rpki-client