Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
File: GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json)
Hash identifier: 50NBJrzLEY+SMQAa6OOkqSvtTcc5WJ/sDqtmyNQIKcA=
Subject key identifier: 65:32:7E:12:A0:83:70:93:CB:F7:9C:30:5B:48:01:42:54:47:BB:FA
Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Certificate issuer: /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Certificate serial: 019E9BBCA8D68C6AB9BA2D9AAFA036848015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
Manifest number: 1948
Signing time: Sat 06 Jun 2026 07:01:32 +0000
Manifest this update: Sat 06 Jun 2026 07:01:32 +0000
Manifest next update: Sun 07 Jun 2026 07:01:32 +0000
Files and hashes: 1: 9PJJMzY2oUycU8l8cSSelJBMcWc.roa (hash: oL+z5SaUyU8viR3KBSssNRDGEAldy3Dx3YEcED4SCvw=)
2: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: rzDh/I1G6tlrADOZmxgoksZT4zCHSjkD+6GvwomWTDU=)
3: sPW3SqhXQFkvyEdUczVqCrMoZZM.roa (hash: PP/JgUlM59r8wR9R5R4QZCwoOfZzBFE/FyC4nN3GGNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:bc:a8:d6:8c:6a:b9:ba:2d:9a:af:a0:36:84:80:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Validity
Not Before: Jun 6 07:01:32 2026 GMT
Not After : Jun 7 07:01:32 2026 GMT
Subject: CN=65327e12a0837093cbf79c305b4801425447bbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:2f:d3:21:71:de:2b:38:bf:40:19:5b:dd:
67:0f:3d:08:94:59:54:8d:1d:84:d7:74:23:de:7b:
f0:54:1f:79:51:ca:64:96:e1:b2:64:cf:29:3b:fa:
65:9c:ec:45:40:ad:8c:72:cc:e5:43:24:f4:ee:c9:
03:28:ca:7e:ce:d1:b7:9d:57:9a:97:7e:de:ee:10:
f5:da:a9:9d:2a:09:b5:fd:af:db:78:d5:4c:25:cf:
bc:12:cc:41:b6:86:ce:32:c6:0a:60:07:b3:89:82:
85:1c:a9:98:99:c0:de:d7:da:ae:3b:f2:73:22:8e:
f1:63:d4:c3:e1:02:20:cf:64:7e:8d:52:35:b1:95:
7b:50:59:d0:63:47:b8:36:0e:79:ca:a9:0e:7c:2a:
a2:f0:fa:55:8f:f1:19:45:37:c5:13:4a:18:aa:a8:
4f:62:44:00:0b:4f:fd:91:93:3d:3b:eb:52:ab:45:
b7:26:b2:e5:cc:a5:08:7e:c1:c2:68:f8:2d:24:c5:
c5:79:b0:84:bd:58:be:21:1a:09:ba:1f:36:66:40:
1a:6e:75:46:eb:27:8a:d1:5a:0a:82:1d:b1:8c:32:
1b:46:d2:ff:87:5e:10:ff:64:07:f9:d0:00:63:cd:
58:5e:44:cc:48:94:7d:50:a0:04:97:9f:d6:c5:75:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:32:7E:12:A0:83:70:93:CB:F7:9C:30:5B:48:01:42:54:47:BB:FA
X509v3 Authority Key Identifier:
keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:80:1e:82:13:93:cb:25:3b:90:0c:d0:86:0d:71:87:86:33:
96:26:cc:2d:f5:77:03:26:47:72:ba:ad:b9:c5:e2:46:b7:fe:
e0:f4:54:2f:27:ed:c0:85:92:1b:e0:ec:16:06:87:f2:30:83:
1d:eb:e4:57:02:5b:db:5b:c0:d3:65:65:b6:20:88:58:13:9f:
38:52:90:a5:4f:41:b1:d1:1d:9c:3e:26:d1:97:5f:b8:d7:a1:
01:58:68:84:41:86:31:1e:2b:4b:1d:3e:32:63:54:da:c3:b9:
6c:7e:de:8b:8b:e6:02:d8:24:2c:4f:0f:90:ba:4b:e7:db:15:
04:dc:dc:20:15:22:79:bf:69:bb:1a:87:36:bd:2f:23:17:73:
49:7d:40:01:7d:e1:b6:d4:27:19:9e:39:89:4f:31:6c:e5:58:
60:21:65:2e:7d:ca:9a:5a:a0:17:f5:f6:23:91:2c:75:3e:f4:
a7:c9:29:19:cf:23:7a:91:08:ab:a1:b4:f2:52:24:ea:a9:bc:
57:74:c5:bc:d9:06:11:34:6b:59:6a:85:1e:7e:53:08:f8:74:
1e:5f:f8:b0:57:c6:fb:f8:1c:12:5f:71:37:b1:cb:27:a9:ec:
22:64:08:72:af:80:88:75:34:76:9e:98:91:80:92:93:4b:b5:
9a:61:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:24:17 2026 by rpki-client