Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
File: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft (raw, json)
Hash identifier: xtXOMQFhO2zVjOweJYm7VF9EUGwa91oq0cHl+UtfbXc=
Subject key identifier: 29:88:A4:17:AB:96:58:96:6B:A6:5B:80:8E:43:2F:21:1B:A7:36:9D
Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
Certificate issuer: /CN=199b3f908ce6e1764617731b624539421d13c94d
Certificate serial: 019F85D744FDD0D3D53D8ACC60BCF3160B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
Manifest number: 0263
Signing time: Tue 21 Jul 2026 18:01:45 +0000
Manifest this update: Tue 21 Jul 2026 18:01:45 +0000
Manifest next update: Wed 22 Jul 2026 18:01:45 +0000
Files and hashes: 1: 9HbfhKUnZ7haZ03pPm7cMB8XKU8.roa (hash: ImuG4if+Hc6PIgHVLJaf1cQyzFqgiLjKr6z/klhg4eU=)
2: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl (hash: H6RvzvhTcujAUm3yd30lH5AZO4GUaIf4THRfnP/otu0=)
3: NZTX6pH1QPom42qBqPZVw2bPTws.asa (hash: zWqNcvUJB80CiSud3BuDS4Ml/QCupqFbVTVc3lLQxuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d7:44:fd:d0:d3:d5:3d:8a:cc:60:bc:f3:16:0b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d
Validity
Not Before: Jul 21 18:01:45 2026 GMT
Not After : Jul 22 18:01:45 2026 GMT
Subject: CN=2988a417ab9658966ba65b808e432f211ba7369d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c2:bc:b5:5c:c0:07:d7:f6:c4:6a:ae:13:4c:
fa:ca:e5:e6:66:ae:34:c1:d8:3c:f6:0d:89:5d:a3:
35:de:b5:b8:02:d0:04:33:d7:0b:a7:ef:5f:ae:96:
58:b5:31:cb:36:f8:5a:6f:1c:17:72:11:7d:7b:9a:
a9:1b:f4:36:18:33:88:cc:7f:77:60:a5:83:1e:01:
45:91:64:02:59:3c:47:22:bc:71:9f:d5:c0:c2:54:
c3:ac:e4:b3:b0:48:bc:11:95:52:b3:d4:4c:88:c8:
9c:7b:38:0e:ef:f6:ff:5c:f3:ed:da:f2:1b:0e:67:
c7:ff:50:d7:52:bf:3b:db:fb:5e:6c:53:06:5f:4a:
62:72:f4:75:3b:2f:c4:1c:86:81:1d:3a:1b:a8:4a:
da:c0:f2:a2:05:1d:64:ca:fb:8e:4a:0b:3e:c4:84:
ec:fc:81:c8:14:9c:8b:77:d1:6e:61:dd:66:e6:f9:
de:9c:a5:06:f7:d1:c9:1f:41:5d:eb:fa:92:8f:bc:
7a:f7:65:76:f6:e6:bf:ec:b5:e7:c8:ab:c8:52:d9:
61:be:63:57:d8:63:fa:50:20:a1:20:fe:0b:f7:32:
cd:85:54:54:9d:7f:bc:85:0d:71:54:73:97:c8:12:
19:86:9e:29:eb:95:3c:b0:62:8b:da:83:ea:1e:86:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:88:A4:17:AB:96:58:96:6B:A6:5B:80:8E:43:2F:21:1B:A7:36:9D
X509v3 Authority Key Identifier:
keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:8e:ba:0b:26:ea:ab:8e:d3:05:17:e4:07:a8:f0:70:bf:02:
0e:ce:80:d0:ef:d3:2a:7f:54:20:0f:11:8a:fd:9e:1b:34:65:
c3:8f:fa:55:24:eb:06:b5:0c:b9:da:49:a0:63:ac:35:2d:a6:
31:d5:c7:43:80:4f:8d:2b:01:8a:62:bf:85:b1:a3:2e:74:81:
45:ed:04:1d:fc:82:75:f9:de:06:97:ba:54:76:62:ea:21:e3:
1d:6e:bf:a4:f5:f1:93:4e:82:bb:1f:f2:75:f8:f5:aa:df:1d:
bd:b6:63:fb:76:37:2e:c9:04:cb:0b:f9:01:87:98:32:f0:d7:
cf:1b:9c:9e:0b:52:79:cc:19:08:3d:ed:ef:25:8e:01:fc:29:
32:dc:66:20:d7:de:97:9a:08:b0:99:7d:49:c2:3e:3f:c5:f5:
b6:ac:f1:f5:3f:84:9b:99:07:2c:cd:d7:4a:a9:b8:99:02:2e:
55:cb:05:a5:2b:ae:63:97:e8:b3:a4:1e:9a:b5:00:e8:a2:9c:
70:a0:5f:4c:9a:36:9b:a3:30:b9:7a:ea:cb:a5:85:37:59:8f:
5d:10:f2:b8:ca:62:71:a5:ec:b4:f5:74:27:03:ab:42:d8:62:
ac:82:34:e3:f0:ce:91:3c:2f:7b:0a:ba:f1:67:15:1f:21:13:
60:5a:2b:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+F10T90NPVPYrMYLzzFgtqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OWIzZjkwOGNlNmUxNzY0NjE3NzMxYjYyNDUzOTQyMWQx
M2M5NGQwHhcNMjYwNzIxMTgwMTQ1WhcNMjYwNzIyMTgwMTQ1WjAzMTEwLwYDVQQD
EygyOTg4YTQxN2FiOTY1ODk2NmJhNjViODA4ZTQzMmYyMTFiYTczNjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMK8tVzAB9f2xGquE0z6yuXmZq40
wdg89g2JXaM13rW4AtAEM9cLp+9frpZYtTHLNvhabxwXchF9e5qpG/Q2GDOIzH93
YKWDHgFFkWQCWTxHIrxxn9XAwlTDrOSzsEi8EZVSs9RMiMicezgO7/b/XPPt2vIb
DmfH/1DXUr872/tebFMGX0picvR1Oy/EHIaBHTobqErawPKiBR1kyvuOSgs+xITs
/IHIFJyLd9FuYd1m5vnenKUG99HJH0Fd6/qSj7x692V29ua/7LXnyKvIUtlhvmNX
2GP6UCChIP4L9zLNhVRUnX+8hQ1xVHOXyBIZhp4p65U8sGKL2oPqHoZCywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCmIpBerlliWa6ZbgI5DLyEbpzadMB8GA1UdIwQY
MBaAFBmbP5CM5uF2RhdzG2JFOUIdE8lNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8wZTg3MTUtZDg3ZS00Y2U1LTk0ODIt
MmU5N2FiYTBmYjJjLzEvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8wZTg3MTUtZDg3ZS00Y2U1LTk0ODItMmU5N2FiYTBmYjJj
LzEvR1pzX2tJem00WFpHRjNNYllrVTVRaDBUeVUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0o66Cybq
q47TBRfkB6jwcL8CDs6A0O/TKn9UIA8Riv2eGzRlw4/6VSTrBrUMudpJoGOsNS2m
MdXHQ4BPjSsBimK/hbGjLnSBRe0EHfyCdfneBpe6VHZi6iHjHW6/pPXxk06Cux/y
dfj1qt8dvbZj+3Y3LskEywv5AYeYMvDXzxucngtSecwZCD3t7yWOAfwpMtxmINfe
l5oIsJl9ScI+P8X1tqzx9T+Em5kHLM3XSqm4mQIuVcsFpSuuY5fos6QemrUA6KKc
cKBfTJo2m6MwuXrqy6WFN1mPXRDyuMpicaXstPV0JwOrQthirII04/DOkTwvewq6
8WcVHyETYForHQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:55 2026 by rpki-client