Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: Qt/RVO5ua+lbGVM9dIyjKN6UHfhu9EDSo8O1iqMis2A=
Subject key identifier: 44:89:41:96:67:67:DD:9D:E5:41:F0:E1:2A:39:76:E6:AF:B0:46:5E
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 019CC674BC82959EC79F86D93EB43DFEAED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 1859
Signing time: Sat 07 Mar 2026 04:01:05 +0000
Manifest this update: Sat 07 Mar 2026 04:01:05 +0000
Manifest next update: Sun 08 Mar 2026 04:01:05 +0000
Files and hashes: 1: Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa (hash: 4BYNISLW+6a1Rm7fYvPimlxLy4jJM2Fwgwu5hoZNF4o=)
2: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: d+a6X4zXi1ibYSb2TVwHZ3nj25JhrGPSeaCtm0XyYMU=)
3: JlkD4EYy4fdjW9cybX6Rmv1PhMI.roa (hash: pUW2Tt4TUNvQKWWScIb3hItHUaVoXgsVYQO1UFGRry8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 04:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c6:74:bc:82:95:9e:c7:9f:86:d9:3e:b4:3d:fe:ae:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Mar 7 04:01:05 2026 GMT
Not After : Mar 8 04:01:05 2026 GMT
Subject: CN=448941966767dd9de541f0e12a3976e6afb0465e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:a4:fc:c2:d2:18:6a:83:18:ee:27:d5:c6:
c8:b6:9a:6f:01:93:2e:36:27:08:85:e3:98:e5:36:
b6:5e:67:ba:cf:1a:da:22:96:c8:c8:bf:79:ea:78:
01:71:47:f8:40:0e:99:44:d5:60:1b:42:ac:d6:63:
78:d8:9f:94:ef:11:17:1d:5a:04:d4:12:1e:da:aa:
b0:4e:d8:dd:c9:a0:49:9d:ed:0d:91:79:5d:24:87:
58:bc:53:fc:a2:c8:23:c1:50:d4:c8:4b:63:e0:2d:
02:a0:7c:e2:12:67:e6:48:04:ba:e8:3d:1a:50:a6:
40:6c:33:db:a2:20:d1:fd:ae:eb:1b:5b:87:8f:77:
9c:73:aa:a2:cb:85:e3:4a:2a:72:6d:53:9b:f0:b3:
e2:5a:53:9f:8f:32:c6:ed:1a:46:27:e0:c0:82:12:
1f:bd:6f:15:de:f1:58:a5:6f:a6:3e:b9:de:97:54:
a6:28:bf:3d:f8:99:f4:d6:8f:32:66:e2:4a:fc:51:
35:21:7e:bc:23:2d:12:42:67:28:73:be:0a:ad:fb:
b9:2b:36:bf:7a:b4:67:c6:b1:bb:0a:1e:3f:71:1a:
24:d4:be:c4:54:df:09:92:38:9d:7a:88:73:3c:db:
7a:86:df:34:52:1a:7d:06:ae:a5:8b:2a:9a:e8:17:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:89:41:96:67:67:DD:9D:E5:41:F0:E1:2A:39:76:E6:AF:B0:46:5E
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ea:6e:8d:c5:bc:0a:f2:b0:5f:99:47:dc:13:ad:fc:2b:65:
01:99:1c:6b:e1:41:2f:93:79:ab:57:39:1a:45:38:47:12:49:
0b:28:3a:c1:d8:d8:02:83:e9:e4:77:12:33:40:a1:90:f5:6e:
4a:43:b1:76:77:46:75:ae:cd:80:31:54:05:d5:61:36:53:d5:
df:58:d1:8f:c0:49:4a:c0:b6:ba:22:3f:fd:74:cb:9e:01:db:
18:c6:3f:97:42:7a:26:fd:28:7b:53:3e:95:4c:ca:7d:f2:46:
76:7d:cc:4d:81:65:f2:86:1f:d2:bc:c8:ee:a0:3a:a1:ee:af:
f9:cd:dc:b0:fc:11:2b:60:c4:e5:0f:97:de:db:b8:a3:9d:23:
b3:15:a3:12:f3:eb:10:cc:d7:38:c9:ca:84:b1:84:2e:04:7a:
56:da:f0:06:ca:ec:cb:8c:e7:2f:04:da:6c:01:30:f3:bc:cd:
1c:6d:6e:4c:31:da:c5:f4:bd:91:42:d9:98:63:53:d3:eb:8b:
a4:b3:58:17:99:7e:85:d0:fc:51:16:ff:85:23:64:93:55:5d:
5e:92:43:f9:99:b2:0b:f4:b3:44:8f:9f:b4:bd:9d:26:32:56:
c3:21:65:37:a2:31:69:ef:ae:7e:8f:38:4d:de:34:3c:86:bd:
c3:6e:fd:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 12:44:15 2026 by rpki-client