Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
File: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft (raw, json)
Hash identifier: 84N/gyJsPv1qIynV1efoL2rt8nVJ0NidqTXg5bFNRQM=
Subject key identifier: D4:FB:86:8B:EC:08:B3:ED:2E:C8:15:94:49:0D:A2:2C:33:62:23:C1
Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
Certificate issuer: /CN=199b3f908ce6e1764617731b624539421d13c94d
Certificate serial: 019D37C053A7C01FAF0098B28AD37D1181B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
Manifest number: 0131
Signing time: Sun 29 Mar 2026 04:00:44 +0000
Manifest this update: Sun 29 Mar 2026 04:00:44 +0000
Manifest next update: Mon 30 Mar 2026 04:00:44 +0000
Files and hashes: 1: 9HbfhKUnZ7haZ03pPm7cMB8XKU8.roa (hash: ImuG4if+Hc6PIgHVLJaf1cQyzFqgiLjKr6z/klhg4eU=)
2: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl (hash: Pn12hdG+gFhlrUZVhsAHkkO+Yh7d8TNtu2ugm7RNQBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:53:a7:c0:1f:af:00:98:b2:8a:d3:7d:11:81:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d
Validity
Not Before: Mar 29 04:00:44 2026 GMT
Not After : Mar 30 04:00:44 2026 GMT
Subject: CN=d4fb868bec08b3ed2ec81594490da22c336223c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:99:51:e9:42:17:de:e6:c3:78:e7:f4:6f:4d:
c0:9e:e0:2c:9f:1d:b6:88:04:b9:2d:31:2e:8f:96:
80:f8:17:e4:ea:f5:c4:14:08:d3:8e:30:fa:7d:4c:
02:3e:63:d6:2d:19:db:23:4d:23:20:92:2b:da:97:
ab:9a:5f:ae:92:78:7f:4a:b7:6d:e8:cb:d4:77:00:
59:13:bc:48:59:0b:62:b8:d9:71:fa:d2:95:52:dc:
dc:31:8d:82:1f:65:fa:73:1f:a9:81:24:c5:ca:c8:
3c:75:0b:33:bb:e9:71:40:a6:f8:69:a8:53:86:8e:
25:fa:c1:13:f3:86:23:32:ba:04:4f:a6:86:11:c9:
a7:fd:47:ad:f5:bf:c0:45:91:21:3c:d5:4c:66:ee:
0a:e9:a2:37:fb:a0:90:fc:83:17:a0:de:8d:32:b3:
df:e4:3f:5a:71:9a:4e:78:d1:b3:bc:ba:9b:f1:2b:
7e:9c:5d:37:4c:e6:86:88:0c:91:46:d2:5e:e6:c4:
fc:97:d5:3c:cc:f4:bb:bc:f8:f4:71:f0:ba:ca:b4:
85:f0:dc:35:a2:cd:a7:9f:e1:a6:99:26:86:44:fd:
d6:a5:43:8d:5c:72:7d:b0:bf:be:9a:9d:02:7f:92:
16:1b:ce:0c:47:da:e0:8a:45:0a:ee:68:84:ed:87:
03:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FB:86:8B:EC:08:B3:ED:2E:C8:15:94:49:0D:A2:2C:33:62:23:C1
X509v3 Authority Key Identifier:
keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5e:b4:36:22:15:d6:48:a3:dc:1a:fd:e4:58:47:cf:ec:2c:
af:bd:82:be:3d:37:62:9c:80:91:31:d1:ef:40:62:1d:13:94:
1f:45:fd:5c:2b:e6:49:1b:29:a3:a6:be:f5:cb:98:c5:d5:99:
02:07:4c:16:ad:ee:be:35:b6:4c:6b:73:02:54:1b:04:2e:ba:
81:14:06:e7:89:71:bf:82:79:ca:05:18:37:c6:eb:ab:20:3d:
37:38:6a:7e:bf:b4:a7:f4:a7:e7:dd:08:a9:ed:7f:4b:ca:0c:
1c:a8:5a:ca:cf:7d:4d:fa:79:2e:59:3b:8a:06:2f:57:bc:49:
7b:ab:67:52:b9:14:b3:7f:d1:86:60:9e:e9:8d:5c:a9:ac:82:
4f:2f:cf:e3:ae:23:e4:7c:5e:12:4b:00:2f:3a:25:7c:cd:da:
1c:d9:9e:89:f0:ba:2f:9c:ee:29:89:8d:16:1e:8b:98:db:02:
80:13:8c:fe:2d:72:95:46:c2:c1:ce:45:3b:4a:9f:60:a8:49:
c6:db:1e:ee:14:61:21:7e:9d:5f:3a:81:6f:70:8b:db:f7:ec:
53:48:1c:03:f6:8b:67:d2:2e:2d:e1:6d:bd:36:33:00:b5:06:
06:e4:ad:14:d5:14:67:c3:15:d3:0d:bf:21:53:a6:df:e1:c9:
33:cc:76:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:51 2026 by rpki-client