Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: pZcjDFu4iaWbA5oN1Z1A8exIkqy0UR12e3DZxnHa+f0=
Subject key identifier: 4D:6F:2A:25:F0:85:43:B1:51:A0:46:E4:F6:BE:53:6D:2A:C9:C8:D6
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 01A18C0A3BFF3D39256B80B6ABD4A2C4D3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 1991
Signing time: Fri 30 Oct 2026 09:00:43 +0000
Manifest this update: Fri 30 Oct 2026 09:00:43 +0000
Manifest next update: Sat 31 Oct 2026 09:00:43 +0000
Files and hashes: 1: QDfTLxIL9bTs2IJHGbG9J1JYEvI.roa (hash: gdEjWQnWjf/YDqv1eeE481wpqiSUZPqETZ8kJJFiZJE=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: 4EGRNP7GbcP1jvkT5JN804IBKGSznlc5/SThzCx9w94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:0a:3b:ff:3d:39:25:6b:80:b6:ab:d4:a2:c4:d3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Oct 30 09:00:43 2026 GMT
Not After : Oct 31 09:00:43 2026 GMT
Subject: CN=4d6f2a25f08543b151a046e4f6be536d2ac9c8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:40:75:23:13:99:5a:76:0b:c8:ba:89:67:
a9:85:d9:ca:aa:db:38:5d:19:36:30:3e:93:c1:1b:
7b:20:17:94:d4:dc:01:fc:d6:cf:ed:a0:76:8e:1c:
92:8c:53:84:af:ae:fa:6a:1a:bd:10:28:e5:2e:d0:
d6:22:e8:52:e2:f5:14:70:f0:0f:fc:e9:b2:3e:4d:
55:1a:b2:bf:bf:a9:b6:35:c8:7f:db:40:6a:4f:db:
c5:dd:e3:31:ae:8a:9b:e4:4f:92:a7:f8:b4:1c:24:
47:26:bb:3f:25:35:e2:ee:fa:2e:8d:64:8f:32:83:
5b:2b:14:ba:72:56:f8:0f:d2:5a:6c:45:49:ad:d9:
01:2b:ed:59:14:3f:f0:a3:c6:37:8f:42:2d:e7:ff:
4d:ed:2f:0e:e8:30:a0:81:3b:e1:aa:38:db:cf:eb:
ff:4d:5c:e7:f2:11:d0:7c:44:54:85:5d:f6:02:2c:
75:c1:b3:da:68:eb:b0:40:16:3f:7d:70:e2:79:bc:
a6:2c:21:34:0e:6c:22:82:89:e8:35:83:86:cc:e0:
1a:72:ed:e0:e6:a8:45:6e:09:78:d9:c1:3f:d9:41:
71:a3:9a:25:60:b0:d7:3e:37:7a:ec:20:73:ca:99:
51:23:43:5c:1b:02:a1:29:c8:8f:01:39:d8:c8:ec:
e7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:6F:2A:25:F0:85:43:B1:51:A0:46:E4:F6:BE:53:6D:2A:C9:C8:D6
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:57:5b:65:42:c8:21:ae:54:ae:60:fb:b1:dd:63:2f:03:24:
ae:84:8c:17:41:a2:62:91:8a:92:ed:d7:dd:bc:3b:08:a4:59:
d8:f9:46:97:5a:a8:c2:85:30:59:5b:d1:49:f1:c0:d0:e0:22:
a1:a4:59:20:41:2a:06:cd:8c:ad:b7:3c:8a:33:31:d1:29:2d:
b1:23:a3:ec:bc:75:9f:6b:d8:22:48:3c:c4:4e:1e:7b:94:a1:
c6:17:4c:f6:0c:60:5e:63:aa:b4:bb:f8:6a:c4:8e:95:fb:99:
95:f3:f7:ba:e9:88:a9:8e:cb:55:7d:a2:9a:e2:ce:6a:87:75:
38:50:e1:75:8e:0d:24:6b:e2:d6:c7:ae:49:4f:75:32:95:66:
3a:6d:88:83:d4:20:84:d5:58:dd:db:83:86:77:07:53:57:d3:
61:e6:b5:31:9b:41:33:db:78:60:ff:6e:ea:df:cf:55:ae:dd:
eb:d2:3f:72:f0:40:58:92:be:6e:2d:28:8e:9b:cc:d8:00:9e:
b9:10:c3:14:c8:78:9f:58:b4:21:68:0e:b2:ae:12:1c:d9:b6:
90:cf:26:88:52:e5:76:3f:35:df:f6:b1:fe:ad:16:6d:ca:f2:
96:9d:68:99:88:13:ed:71:5d:16:b4:97:4f:7e:a8:d5:af:c1:
d5:41:3f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:07:33 2026 by rpki-client