Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: ssbfoXRZuPB+/TGTiJA6D0yH7WYyZh+I3vkApZSuNk0=
Subject key identifier: 84:8A:CC:B2:C7:DC:8D:AB:18:5B:86:57:C9:F8:A2:1F:05:67:19:F8
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 01A138C90F3A4729A8D16C70955EB5A9BDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 06DA
Signing time: Wed 14 Oct 2026 05:01:03 +0000
Manifest this update: Wed 14 Oct 2026 05:01:03 +0000
Manifest next update: Thu 15 Oct 2026 05:01:03 +0000
Files and hashes: 1: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: I4BEa9YHH24w0r4qvefCsToZqAok/Hwhdr0lwdszUus=)
2: WKAggwW4-2Bg4MeY0gX0Cx4LA4U.roa (hash: /G/TygfNsNBDAG6vbAPSrcTJMAI8N6hE5YMA8pkrvnA=)
3: rM0uTZNoLmKtjZkk_tSk7q-w9BI.roa (hash: dwD/35OeBK2EzCg4af00B6g6AoSl3HcpyQOtzC0IokY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:c9:0f:3a:47:29:a8:d1:6c:70:95:5e:b5:a9:bd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Oct 14 05:01:03 2026 GMT
Not After : Oct 15 05:01:03 2026 GMT
Subject: CN=848accb2c7dc8dab185b8657c9f8a21f056719f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8e:d0:a7:47:aa:23:61:3c:d8:9a:9e:d8:b5:
11:bc:fa:3d:27:bc:30:98:91:d0:e4:6e:33:6f:c1:
7f:d0:84:1e:74:de:4a:2b:fe:f3:a6:19:55:e4:a0:
e5:c0:0d:bc:39:54:06:78:10:4d:de:d6:45:61:65:
ab:cf:74:9b:96:b4:04:19:47:cd:f3:4e:8b:81:35:
2b:48:a1:62:02:1a:4a:71:e2:ba:c1:9f:56:54:b4:
ca:0b:2c:22:92:96:82:b7:6b:b5:49:2a:35:f1:11:
cc:2e:09:87:fc:eb:b3:bb:c8:90:f8:bc:0b:da:97:
b2:88:90:92:d2:f7:1c:ca:48:a8:f4:dd:26:8d:34:
5d:d3:8b:0a:36:fe:a5:9b:b8:a3:03:1e:9a:b0:ac:
10:3c:89:cb:08:11:e3:89:88:87:3a:16:47:88:d6:
f3:55:5d:3d:2b:de:8e:25:fb:ac:cd:2e:6d:bf:5e:
53:a7:3a:93:82:64:c5:bf:66:0c:3c:3b:2b:ea:c2:
84:44:13:2e:cf:dd:13:90:81:9d:5c:9d:af:8d:82:
54:83:0e:83:b5:c0:ea:19:86:dc:31:f8:90:2e:60:
20:ec:d8:b1:ea:47:39:bf:66:3f:6d:8e:6f:70:cc:
10:6c:8a:9d:8e:cf:06:55:0d:ea:af:0f:ff:df:9e:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:8A:CC:B2:C7:DC:8D:AB:18:5B:86:57:C9:F8:A2:1F:05:67:19:F8
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:2e:40:28:67:ff:0f:73:b2:9d:2c:59:57:d4:6d:89:0c:0e:
1a:4b:07:af:2c:16:ac:cc:3c:91:c0:63:bc:c8:2b:20:06:97:
14:2d:45:53:f6:1f:29:37:82:58:42:31:92:23:74:d4:43:3b:
a6:5b:7f:70:13:06:c6:b8:53:f3:e3:5c:e9:bc:b9:17:a7:2d:
d3:0d:d3:28:f8:b5:39:91:a0:b7:4b:dd:53:12:7f:50:f0:d1:
ba:b7:4a:6a:95:b9:58:c2:48:67:6f:7e:0e:35:7f:df:6f:af:
ba:bf:11:78:52:d3:00:5e:52:ad:31:37:50:48:7a:d0:61:12:
6d:b2:c3:6c:fa:56:b0:04:40:d7:fc:53:96:94:f4:26:4e:00:
b5:41:5f:9f:2d:55:e5:a1:e5:30:95:f1:f9:9b:87:78:3a:07:
6b:ad:38:cc:d3:56:8f:7d:2b:8b:ac:f0:d1:76:72:60:75:36:
68:3a:39:c7:84:b0:4b:65:1b:88:a3:32:40:59:d8:84:3e:29:
49:9d:17:84:c2:76:31:33:30:99:ef:6a:56:4e:7e:08:94:22:
00:a2:8b:6e:d1:c1:7f:5c:bc:0c:4f:63:f6:b6:33:40:81:31:
bd:4e:f9:b8:be:7d:01:cc:a8:39:81:aa:b3:92:21:22:c9:ce:
a8:c6:fe:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:52:33 2026 by rpki-client