Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
File: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft (raw, json)
Hash identifier: KLAvMf+01Ok9qWQoFeLURc5d0EuHamvPAU+0TkClnIY=
Subject key identifier: BF:BF:2D:19:F9:46:D3:33:05:B7:91:5D:F6:73:A0:1F:AF:86:E9:54
Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
Certificate issuer: /CN=199b3f908ce6e1764617731b624539421d13c94d
Certificate serial: 01A06D95C6B5AA661A31B0CB4A3A0D59299C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
Manifest number: 02DF
Signing time: Fri 04 Sep 2026 18:02:07 +0000
Manifest this update: Fri 04 Sep 2026 18:02:07 +0000
Manifest next update: Sat 05 Sep 2026 18:02:07 +0000
Files and hashes: 1: 9HbfhKUnZ7haZ03pPm7cMB8XKU8.roa (hash: ImuG4if+Hc6PIgHVLJaf1cQyzFqgiLjKr6z/klhg4eU=)
2: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl (hash: KQerlHrSZkUp6AsKaTWiIakalFfLt4tWCt4EvmVcCtw=)
3: JJnkIZ86azq7jvZ91HGssrxnuZE.asa (hash: ftGt54l4QvaK8JWs6Qw0CopKYLzIITxVmjy16p978zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:c6:b5:aa:66:1a:31:b0:cb:4a:3a:0d:59:29:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d
Validity
Not Before: Sep 4 18:02:07 2026 GMT
Not After : Sep 5 18:02:07 2026 GMT
Subject: CN=bfbf2d19f946d33305b7915df673a01faf86e954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:66:ef:61:18:f2:7c:82:ac:62:13:07:a2:d0:
85:6d:a9:7c:d5:75:89:b4:c8:e1:a2:f6:36:b1:e2:
68:a5:f6:36:14:80:29:d7:54:15:61:10:2c:2f:bf:
b4:76:31:83:b5:99:5c:5a:50:84:05:7e:40:6a:53:
8c:0c:42:a9:ee:d7:99:c7:39:82:ab:05:99:83:71:
66:3f:da:04:85:5e:59:8d:30:df:e3:2b:52:c6:a1:
d6:f5:4e:63:ec:c5:b2:99:49:ad:f6:fe:59:69:1f:
43:3d:27:22:f5:8c:3f:ba:33:a8:a9:7e:16:4a:15:
1d:86:ed:b6:49:c1:89:a4:3b:40:a6:fe:82:90:49:
0f:a5:64:80:c2:86:a3:e0:bd:81:0c:50:02:96:d4:
b1:bf:db:b6:7f:5f:6f:24:0d:08:d0:0b:ad:01:1d:
4b:2b:05:74:f2:10:dc:ff:41:80:29:70:71:09:89:
94:66:cd:a8:79:da:21:d7:44:9a:a3:dc:48:d2:28:
13:33:e5:7e:af:6f:38:c4:5a:f5:cf:7e:c4:73:67:
e8:49:5e:45:a3:bf:19:aa:03:73:34:8e:7d:f5:b1:
98:52:99:29:8d:5c:4e:88:dc:4d:56:36:93:f4:fa:
9d:21:8a:85:a0:a6:92:5c:a5:4a:0d:be:51:42:73:
8a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BF:2D:19:F9:46:D3:33:05:B7:91:5D:F6:73:A0:1F:AF:86:E9:54
X509v3 Authority Key Identifier:
keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:d9:53:f0:fd:fa:67:da:81:74:a9:57:d6:29:ec:66:8e:2e:
e2:a8:d8:48:5e:2a:73:bc:d3:5c:27:38:2b:69:cc:a6:e8:94:
09:33:a5:2b:ec:44:7b:9a:3a:0b:7a:a0:48:ec:0f:6f:a0:a2:
ae:f3:0b:a8:12:46:cb:0c:94:4e:1f:c4:2c:05:ad:9e:00:35:
4e:e5:c6:90:79:8c:c4:31:f0:8a:e7:d5:28:bf:d5:75:fa:5b:
4b:76:6a:74:4e:43:47:e6:4b:79:2c:17:4d:02:24:59:c5:58:
bf:86:70:ec:21:fe:d8:1f:68:83:25:79:7f:d7:21:75:a5:d5:
6c:bd:55:a2:cd:1f:68:39:5f:52:e7:01:85:30:f3:d2:a6:e4:
c2:74:2e:ab:61:09:80:6d:0a:8d:33:ff:7d:49:01:05:7d:80:
88:21:a3:3e:ee:8a:7b:3a:d3:09:b7:95:77:10:95:04:90:19:
fe:59:aa:89:85:0a:d1:4e:df:3e:92:21:71:be:07:e5:68:6c:
35:ee:0e:41:78:c4:88:cb:83:1c:bf:aa:74:a3:3f:29:f1:0e:
19:be:97:82:f7:41:e8:ea:dd:d6:dc:d7:91:33:10:2b:2c:ac:
31:97:9e:be:38:9f:a1:84:0c:e1:04:63:b6:5d:4c:84:58:ef:
13:eb:5c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:53:36 2026 by rpki-client