Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: 8nwBJgeOYzbzEKqdPWGHL7edLvz6ZOnAuMYcbhEQI5o=
Subject key identifier: A8:FC:1F:F1:A1:3B:12:A9:9C:83:31:D2:4F:D9:46:73:4C:1B:AC:AB
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 01A171DC7695E7BCE5FED9E84CBC896BD9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 1AC4
Signing time: Sun 25 Oct 2026 07:00:36 +0000
Manifest this update: Sun 25 Oct 2026 07:00:36 +0000
Manifest next update: Mon 26 Oct 2026 07:00:36 +0000
Files and hashes: 1: Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa (hash: 4BYNISLW+6a1Rm7fYvPimlxLy4jJM2Fwgwu5hoZNF4o=)
2: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: +9E8H0GdB3weQUSk/JzO7SB1ivhV7Dwb2qR6r2op9kY=)
3: JlkD4EYy4fdjW9cybX6Rmv1PhMI.roa (hash: pUW2Tt4TUNvQKWWScIb3hItHUaVoXgsVYQO1UFGRry8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 07:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:dc:76:95:e7:bc:e5:fe:d9:e8:4c:bc:89:6b:d9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Oct 25 07:00:36 2026 GMT
Not After : Oct 26 07:00:36 2026 GMT
Subject: CN=a8fc1ff1a13b12a99c8331d24fd946734c1bacab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:ca:e3:ed:67:b6:21:46:3a:96:9f:35:b0:
73:03:4b:29:a6:81:97:2a:07:85:bf:4f:47:a9:3d:
5b:de:96:c7:e5:28:1d:a2:db:0e:98:06:db:63:0a:
6c:98:11:2d:91:5c:30:d3:32:5a:73:7e:bc:df:07:
5e:98:97:01:0a:ff:ef:70:57:b9:6b:60:ec:d5:2b:
af:f7:55:33:df:ac:fd:ed:6c:77:8f:cf:bd:7d:ee:
84:00:32:b7:5e:6b:c0:45:d9:57:3c:8a:c1:6e:a8:
20:fe:bf:e2:60:bc:2d:37:79:eb:c9:79:b1:63:4a:
54:d6:7a:05:86:0e:e4:4e:3d:2c:86:a1:91:0f:16:
1a:67:ed:55:e9:97:18:cf:e6:cd:d1:a2:30:72:28:
89:75:a9:1d:70:4b:71:86:7c:41:62:00:9d:aa:7b:
33:8a:82:af:35:0b:22:45:ea:04:f3:c1:ae:f6:9d:
c6:96:b8:f4:5d:71:c7:20:fa:44:88:e4:d5:94:cf:
03:5d:97:a3:6e:d0:45:4b:a1:35:92:37:2c:46:c5:
11:47:6f:84:55:28:36:ff:c4:f7:43:18:62:29:50:
a3:24:ce:fd:95:26:fd:08:df:35:9c:3f:21:6e:4a:
fd:64:22:f5:8b:45:46:07:74:ce:52:60:fc:ac:f8:
27:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FC:1F:F1:A1:3B:12:A9:9C:83:31:D2:4F:D9:46:73:4C:1B:AC:AB
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:2d:02:fd:4e:68:38:53:d4:34:24:0a:51:db:b8:62:3b:fc:
a0:c8:de:66:a5:e3:cb:a0:5d:ea:26:3c:11:67:3f:9f:01:22:
48:f8:42:66:22:51:43:aa:4d:99:b6:8f:21:79:1a:3a:af:5c:
cc:fa:51:67:a6:1b:30:5f:ac:af:b6:99:d9:a9:a1:99:72:52:
7b:38:6e:fd:9e:87:67:87:c8:ab:83:88:6d:b6:67:d1:02:8c:
1b:71:99:dc:8c:9f:70:42:a5:06:3a:a9:64:f3:9e:67:e7:b1:
11:5d:d9:ab:dc:47:a9:91:fa:26:eb:d5:52:34:38:60:50:87:
c4:33:23:72:94:f6:49:f3:92:33:65:16:6a:57:ed:fa:f5:62:
05:7b:29:5f:ab:f9:5c:73:f4:02:87:26:0a:84:5b:d1:2d:9f:
ea:08:f5:81:ae:70:94:21:13:9b:85:dc:61:17:7d:61:b2:95:
74:cc:63:5a:12:08:bb:31:04:31:83:cf:62:54:69:fd:dd:b0:
52:95:f1:06:85:62:ac:8c:18:d4:92:b9:d7:b1:a6:95:c8:2e:
ac:83:38:87:0f:10:00:a8:0b:58:76:26:dd:12:0e:e9:e9:d9:
22:e2:80:e3:e3:c2:d3:52:9e:bb:5b:f3:a5:c6:40:3d:99:5a:
c9:de:7d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 13:49:23 2026 by rpki-client