Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: 8cp+Xz9j96mvKWOe449hngngIBq4/v4xYkBhn2j3+Es=
Subject key identifier: 86:1C:7E:6B:03:FD:9E:82:33:6F:3C:57:7A:01:2A:E1:34:4E:A2:FD
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 019E30A96A3CA561CD0872FD066567152B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 17D4
Signing time: Sat 16 May 2026 12:01:09 +0000
Manifest this update: Sat 16 May 2026 12:01:09 +0000
Manifest next update: Sun 17 May 2026 12:01:09 +0000
Files and hashes: 1: QDfTLxIL9bTs2IJHGbG9J1JYEvI.roa (hash: gdEjWQnWjf/YDqv1eeE481wpqiSUZPqETZ8kJJFiZJE=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: t3cToXCmY69vN0LhQGvH/Ukbf1u+nPJd54cl3GqEHZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:6a:3c:a5:61:cd:08:72:fd:06:65:67:15:2b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: May 16 12:01:09 2026 GMT
Not After : May 17 12:01:09 2026 GMT
Subject: CN=861c7e6b03fd9e82336f3c577a012ae1344ea2fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:2a:73:6d:b9:4f:4b:6a:ea:45:03:ec:24:45:
19:88:22:78:c3:ad:d7:31:82:fc:5e:f5:71:7d:70:
4f:f2:92:d9:39:96:33:7d:18:cb:3d:d6:e0:18:eb:
88:7e:db:0c:44:7e:d1:2d:57:af:c0:21:ad:97:b5:
a4:18:6f:5e:13:c2:a6:fe:d7:2a:1c:2f:17:90:86:
58:5a:d3:40:02:97:4b:79:ce:36:71:77:0f:29:a4:
93:d4:38:91:06:36:be:42:58:37:a7:d7:77:af:c7:
31:f9:ae:d6:d6:2c:8f:00:5f:f1:dd:bb:a3:c8:01:
de:04:97:03:da:83:8d:f4:7b:db:8b:b3:17:f3:86:
2f:fb:78:d2:a9:ad:19:66:af:24:de:a8:c3:ed:c3:
99:e3:33:c4:76:2b:bb:bb:96:81:44:dc:13:fb:ce:
44:83:57:02:07:37:e3:61:cf:72:be:74:3e:b5:f7:
47:d2:21:b6:30:39:b3:84:5a:b6:2a:6a:c1:3d:81:
44:65:e0:f2:58:fc:74:f7:24:9c:5f:90:b4:7a:ca:
ed:64:58:f4:9e:ee:5c:bb:37:cf:e0:c8:61:e9:17:
3b:24:bf:a0:2a:81:92:cd:0a:8f:4c:2c:4d:2a:b4:
10:28:4c:66:49:ba:50:74:e8:8e:b5:1f:3b:c1:65:
79:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1C:7E:6B:03:FD:9E:82:33:6F:3C:57:7A:01:2A:E1:34:4E:A2:FD
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0e:67:1f:de:9d:ab:60:5f:75:80:10:f1:b5:94:99:03:f2:
86:18:c2:c5:34:22:b1:2a:3c:86:30:49:e8:c3:f8:c7:70:c4:
b4:9f:80:b4:04:30:43:77:07:03:78:d0:e9:9a:86:4c:92:46:
01:82:65:82:0f:dc:81:57:b2:21:11:32:7d:3f:b4:35:e1:31:
b3:64:71:1e:98:bc:7e:ae:06:26:a8:d0:f7:8a:2a:0a:c1:ed:
55:30:34:ae:60:d5:0b:41:18:f5:23:d7:42:9a:80:69:7a:b6:
55:38:b4:2b:64:38:5b:c1:8a:e1:0c:50:28:79:7c:7c:54:8b:
4f:a3:c4:ea:b9:7f:69:6d:f1:23:42:32:00:c2:33:e9:44:8c:
b5:73:94:5c:6b:42:16:76:da:8b:bc:7c:7b:74:7b:3f:1e:2e:
50:9f:9c:f9:07:43:8d:4f:de:76:82:f7:85:95:f5:4c:e5:ba:
f6:44:fd:5d:ee:11:70:c5:7d:ec:d6:31:26:48:b0:34:12:da:
0a:e2:7e:ed:35:37:c7:73:b5:0a:62:62:f7:6a:eb:66:b9:c2:
3c:91:21:84:ed:73:3f:0e:6f:69:c6:a5:1f:f9:04:07:2f:fa:
8b:10:12:87:5b:cf:36:18:80:cb:bc:71:69:b4:2a:4e:28:8b:
db:b8:56:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqWo8pWHNCHL9BmVnFSs4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxOTkwMWI2NGZlMjI2NTZiOGYyZGIyNjBiNDUzZjI3OTM1
MmI3ZDAwHhcNMjYwNTE2MTIwMTA5WhcNMjYwNTE3MTIwMTA5WjAzMTEwLwYDVQQD
Eyg4NjFjN2U2YjAzZmQ5ZTgyMzM2ZjNjNTc3YTAxMmFlMTM0NGVhMmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSpzbblPS2rqRQPsJEUZiCJ4w63X
MYL8XvVxfXBP8pLZOZYzfRjLPdbgGOuIftsMRH7RLVevwCGtl7WkGG9eE8Km/tcq
HC8XkIZYWtNAApdLec42cXcPKaST1DiRBja+Qlg3p9d3r8cx+a7W1iyPAF/x3buj
yAHeBJcD2oON9Hvbi7MX84Yv+3jSqa0ZZq8k3qjD7cOZ4zPEdiu7u5aBRNwT+85E
g1cCBzfjYc9yvnQ+tfdH0iG2MDmzhFq2KmrBPYFEZeDyWPx09yScX5C0esrtZFj0
nu5cuzfP4Mhh6Rc7JL+gKoGSzQqPTCxNKrQQKExmSbpQdOiOtR87wWV5LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYcfmsD/Z6CM288V3oBKuE0TqL9MB8GA1UdIwQY
MBaAFIGZAbZP4iZWuPLbJgtFPyeTUrfQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMt
NjNkZDI3NTMwMGJjLzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yMjdlNmItMDJlNC00MTA4LThiMzMtNjNkZDI3NTMwMGJj
LzEvZ1prQnRrX2lKbGE0OHRzbUMwVV9KNU5TdDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVA5nH96d
q2BfdYAQ8bWUmQPyhhjCxTQisSo8hjBJ6MP4x3DEtJ+AtAQwQ3cHA3jQ6ZqGTJJG
AYJlgg/cgVeyIREyfT+0NeExs2RxHpi8fq4GJqjQ94oqCsHtVTA0rmDVC0EY9SPX
QpqAaXq2VTi0K2Q4W8GK4QxQKHl8fFSLT6PE6rl/aW3xI0IyAMIz6USMtXOUXGtC
Fnbai7x8e3R7Px4uUJ+c+QdDjU/edoL3hZX1TOW69kT9Xe4RcMV97NYxJkiwNBLa
CuJ+7TU3x3O1CmJi92rrZrnCPJEhhO1zPw5vacalH/kEBy/6ixASh1vPNhiAy7xx
abQqTiiL27hW/w==
-----END CERTIFICATE-----
Generated at Sat May 16 22:01:44 2026 by rpki-client