Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: SdZs4CkNP1ct0QFND0e/CvOFN0VCxjaHv8iUxg4fNa4=
Subject key identifier: C7:15:E0:CB:E9:83:22:BD:EA:44:39:39:8A:70:C4:CB:76:66:BF:75
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 019F85684D53B475599C3521A469B466F4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 19C5
Signing time: Tue 21 Jul 2026 16:00:32 +0000
Manifest this update: Tue 21 Jul 2026 16:00:32 +0000
Manifest next update: Wed 22 Jul 2026 16:00:32 +0000
Files and hashes: 1: Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa (hash: 4BYNISLW+6a1Rm7fYvPimlxLy4jJM2Fwgwu5hoZNF4o=)
2: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: jJcE/z8p6EuJOKtU1QucS+bVxMMrOknpZROhVOP0uKQ=)
3: JlkD4EYy4fdjW9cybX6Rmv1PhMI.roa (hash: pUW2Tt4TUNvQKWWScIb3hItHUaVoXgsVYQO1UFGRry8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:4d:53:b4:75:59:9c:35:21:a4:69:b4:66:f4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Jul 21 16:00:32 2026 GMT
Not After : Jul 22 16:00:32 2026 GMT
Subject: CN=c715e0cbe98322bdea4439398a70c4cb7666bf75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:18:5d:4b:e2:86:e4:57:e7:a5:93:00:3a:
cc:e9:88:28:5c:ec:6f:65:2f:e4:21:b3:d4:64:42:
ee:4e:e2:4d:b6:35:d9:33:11:70:48:48:f4:06:b8:
cc:5b:77:be:cd:70:a2:8a:8d:b7:01:22:44:dc:1f:
a9:50:de:00:19:7f:f7:a7:dc:fa:a0:10:fc:61:1f:
a0:61:31:97:2d:2f:b3:08:db:f6:f6:a2:d6:20:c8:
3d:d8:16:bb:85:03:d5:13:3f:6d:b8:b2:57:f8:e7:
4f:85:b7:a4:f5:b1:31:7f:8b:3a:76:20:d7:1f:34:
a1:48:2c:16:78:89:af:bb:cf:e1:e5:a8:c8:40:85:
8f:a9:3e:c0:6f:50:84:d6:6d:f4:b8:a9:49:48:db:
2c:04:19:36:ae:4d:6b:59:0f:1b:63:a4:f2:bb:b4:
e8:d3:a3:16:9b:82:31:85:19:b1:07:71:dc:a8:d3:
43:f6:9e:6c:09:d4:96:76:99:84:fa:c6:3c:6c:87:
7b:cd:21:42:41:7a:7d:44:06:ce:78:05:ed:4c:1f:
38:12:c2:86:35:ca:b3:12:0a:ff:4c:c9:7f:75:fb:
73:54:b3:eb:64:e2:53:59:4f:bc:02:4d:30:3b:77:
6f:73:ba:09:7a:67:6e:d8:af:b6:b5:59:8d:e0:fa:
e2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:15:E0:CB:E9:83:22:BD:EA:44:39:39:8A:70:C4:CB:76:66:BF:75
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:9c:e5:bb:b3:67:14:29:ad:21:3b:55:6b:38:30:df:70:94:
c5:7d:f2:11:b6:58:e6:cc:76:9f:84:f2:b0:3d:1b:18:62:5b:
1a:f3:51:09:33:a6:5d:e3:48:36:cb:e9:00:3b:af:25:34:6a:
b2:cb:5a:1c:a0:79:56:90:a8:20:a3:15:43:1b:47:19:f3:d3:
3a:a6:a7:bd:b9:1f:3c:a0:14:db:0b:4d:cc:17:21:e6:a5:ab:
3d:9a:3d:ab:a7:90:fa:06:37:bc:54:4f:80:b1:60:81:79:ba:
2a:78:16:a0:73:07:07:30:4b:74:6a:18:50:d3:fa:2f:e0:51:
a5:01:cb:29:26:05:a7:c5:ef:86:f4:84:1d:52:1c:ef:b5:fb:
a2:45:ce:c4:20:ef:9e:04:c8:a0:fb:ef:35:39:df:71:0e:64:
ac:dd:64:10:8f:dc:74:fd:55:e1:0b:4d:fd:5b:3f:2d:df:0e:
cd:62:c3:39:36:ae:27:f3:5c:d8:a0:df:fa:69:88:1b:0e:f8:
c8:0d:01:df:f8:95:3f:cb:af:d2:c7:3d:88:50:42:df:ac:36:
a1:35:bd:1d:71:7e:08:d2:6d:60:10:8e:3f:9f:98:38:09:af:
66:04:af:24:70:e4:dc:55:3f:f1:73:7f:a3:18:38:e3:cf:ff:
a1:58:40:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FaE1TtHVZnDUhpGm0ZvTjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMzY4ZTcwMjY5ZGU2NjBjYmMxNGRmOWM3NjNiMDE4Nzg4
YTFmZmMwHhcNMjYwNzIxMTYwMDMyWhcNMjYwNzIyMTYwMDMyWjAzMTEwLwYDVQQD
EyhjNzE1ZTBjYmU5ODMyMmJkZWE0NDM5Mzk4YTcwYzRjYjc2NjZiZjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY8YXUvihuRX56WTADrM6YgoXOxv
ZS/kIbPUZELuTuJNtjXZMxFwSEj0BrjMW3e+zXCiio23ASJE3B+pUN4AGX/3p9z6
oBD8YR+gYTGXLS+zCNv29qLWIMg92Ba7hQPVEz9tuLJX+OdPhbek9bExf4s6diDX
HzShSCwWeImvu8/h5ajIQIWPqT7Ab1CE1m30uKlJSNssBBk2rk1rWQ8bY6Tyu7To
06MWm4IxhRmxB3HcqNND9p5sCdSWdpmE+sY8bId7zSFCQXp9RAbOeAXtTB84EsKG
NcqzEgr/TMl/dftzVLPrZOJTWU+8Ak0wO3dvc7oJemdu2K+2tVmN4PrizwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcV4MvpgyK96kQ5OYpwxMt2Zr91MB8GA1UdIwQY
MBaAFBs2jnAmneZgy8FN+cdjsBh4ih/8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mNjU5NjAtYjAzYy00OThjLWI2ZDUt
NjA5NTFlOTc1ODhjLzEvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mNjU5NjAtYjAzYy00OThjLWI2ZDUtNjA5NTFlOTc1ODhj
LzEvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3Jzlu7Nn
FCmtITtVazgw33CUxX3yEbZY5sx2n4TysD0bGGJbGvNRCTOmXeNINsvpADuvJTRq
sstaHKB5VpCoIKMVQxtHGfPTOqanvbkfPKAU2wtNzBch5qWrPZo9q6eQ+gY3vFRP
gLFggXm6KngWoHMHBzBLdGoYUNP6L+BRpQHLKSYFp8XvhvSEHVIc77X7okXOxCDv
ngTIoPvvNTnfcQ5krN1kEI/cdP1V4QtN/Vs/Ld8OzWLDOTauJ/Nc2KDf+mmIGw74
yA0B3/iVP8uv0sc9iFBC36w2oTW9HXF+CNJtYBCOP5+YOAmvZgSvJHDk3FU/8XN/
oxg448//oVhAXw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:14:51 2026 by rpki-client