Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: 8txiwXQ9+MmldNWsD0v04zWVc/q9l35xSzuTmeKmw7A=
Subject key identifier: 21:F0:5C:4F:43:D4:C7:5E:B5:EA:03:E4:66:4A:4A:A3:07:07:70:D4
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 019D3978011DA94E50DD479536C638146E49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 1754
Signing time: Sun 29 Mar 2026 12:00:58 +0000
Manifest this update: Sun 29 Mar 2026 12:00:58 +0000
Manifest next update: Mon 30 Mar 2026 12:00:58 +0000
Files and hashes: 1: QDfTLxIL9bTs2IJHGbG9J1JYEvI.roa (hash: gdEjWQnWjf/YDqv1eeE481wpqiSUZPqETZ8kJJFiZJE=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: /TCj7QiQglw+szwS9+ygAAujDsB4iULn0t4T1QgDbKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:01:1d:a9:4e:50:dd:47:95:36:c6:38:14:6e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Mar 29 12:00:58 2026 GMT
Not After : Mar 30 12:00:58 2026 GMT
Subject: CN=21f05c4f43d4c75eb5ea03e4664a4aa3070770d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a8:9c:56:9f:0d:ae:5d:d6:b5:0b:ca:d8:da:
0e:91:10:87:2f:f4:fc:67:49:9b:da:a1:4c:23:6d:
4e:8d:29:da:2d:98:bc:ad:17:76:58:fd:3f:d1:8b:
db:bc:24:30:92:dc:f8:3d:64:af:38:0e:26:b5:89:
d6:64:f8:ae:dc:38:aa:81:1e:e6:7e:91:01:00:80:
3c:fb:77:a2:32:5b:32:fa:58:73:5a:b2:12:6b:24:
e1:1f:a2:3f:91:3e:c4:e5:03:e7:52:11:fe:bb:13:
c0:1a:63:72:b2:04:c0:34:13:56:62:fb:fd:b3:dc:
dd:ea:de:4e:03:30:a9:72:74:66:1f:27:da:e4:bc:
29:4d:94:28:c9:66:7b:ce:2d:e8:78:ff:dc:d0:7a:
78:e2:07:fa:4c:73:8a:73:77:92:61:9f:db:8f:8f:
7c:6c:56:ce:e0:3e:64:93:0b:fe:15:00:b5:fc:84:
14:1c:43:3a:05:a6:c2:0f:ec:a0:15:81:b8:7d:8f:
4f:2d:3b:64:7d:18:8e:2f:a7:97:32:01:c5:47:43:
14:9c:ab:3a:45:8a:9a:90:54:11:05:40:ab:7c:be:
17:2e:ea:5e:bd:56:8d:1a:9b:dc:85:21:5e:d7:02:
1a:ec:ca:dd:6b:91:aa:d9:bc:09:7c:8e:f7:52:80:
4c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F0:5C:4F:43:D4:C7:5E:B5:EA:03:E4:66:4A:4A:A3:07:07:70:D4
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:68:b6:a4:a9:eb:a8:fa:86:ce:95:86:d2:f3:5a:0c:75:4e:
7c:7f:be:1f:4b:3e:c3:14:3a:38:55:27:05:72:9d:74:8f:27:
d9:8c:4c:d0:d5:2e:cb:31:b7:65:34:e4:cc:b6:65:8e:b9:7c:
9a:c7:74:9a:e2:3e:54:0a:9e:13:5c:1e:22:c7:84:fd:e9:5f:
54:b2:16:84:07:98:1e:66:58:5a:41:c3:4a:98:71:31:80:70:
b4:60:b3:c4:07:69:5a:5e:32:b7:7e:0c:00:44:4f:ac:ed:45:
4c:73:05:70:e0:be:5e:c2:84:1d:f6:4b:86:7b:c2:e9:c0:db:
74:48:bd:45:bd:d0:db:41:77:4e:cb:42:4a:bf:02:31:fd:1e:
60:fe:67:57:9a:8d:ef:9b:1a:06:3a:1c:05:e0:5b:bd:a0:61:
fd:82:4f:7e:e5:50:7e:3e:c0:6f:d9:7a:20:9a:a2:8f:2a:c9:
53:ef:05:d0:64:65:4a:a3:bc:90:3a:6b:8a:f5:ee:52:8d:b1:
7a:4b:f0:ab:96:29:c0:6d:be:80:32:39:c8:79:b0:7e:7c:68:
39:52:01:9e:3a:a0:ea:31:a6:2f:ce:05:1c:d3:60:7f:4b:d7:
9e:db:94:8a:f0:a7:a2:c0:1c:48:1a:23:45:f5:d4:6c:82:73:
d7:61:4e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:06 2026 by rpki-client