Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
File: gzeZ58jZKoXOlQjBvho_OAlQlZE.mft (raw, json)
Hash identifier: XlwYHXUFDmWQYdC/XvJxjCTnv2M99Pc0ZYmFfQPt8ag=
Subject key identifier: C2:16:42:61:8E:C1:C8:F7:16:B3:3D:58:17:4B:3E:DC:FD:1C:28:D3
Authority key identifier: 83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91
Certificate issuer: /CN=833799e7c8d92a85ce9508c1be1a3f3809509591
Certificate serial: 01A08A1F2A39D59462467020E591DE5CD5E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
Manifest number: 130C
Signing time: Thu 10 Sep 2026 07:01:33 +0000
Manifest this update: Thu 10 Sep 2026 07:01:33 +0000
Manifest next update: Fri 11 Sep 2026 07:01:33 +0000
Files and hashes: 1: gzeZ58jZKoXOlQjBvho_OAlQlZE.crl (hash: Gt0Q4Ueb66MQaDaJpXkQGS05wf+GmGVDNS4nqKruUcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:1f:2a:39:d5:94:62:46:70:20:e5:91:de:5c:d5:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833799e7c8d92a85ce9508c1be1a3f3809509591
Validity
Not Before: Sep 10 07:01:33 2026 GMT
Not After : Sep 11 07:01:33 2026 GMT
Subject: CN=c21642618ec1c8f716b33d58174b3edcfd1c28d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:48:91:1d:91:1e:58:a1:1d:4f:83:0b:3e:b8:
11:b5:c7:c4:18:42:0c:22:ef:9e:bc:35:80:ed:6f:
0c:fc:00:a9:4f:32:da:82:a1:f5:9d:b8:db:b9:08:
43:43:7e:e0:45:2d:79:24:07:68:0a:41:c5:e8:29:
af:8e:ce:45:80:ef:f6:5d:ce:f8:cc:0f:7d:f3:e0:
e5:22:3e:2a:5c:ac:88:7b:c0:13:30:08:6e:3f:2d:
fe:3f:9b:f3:18:96:4b:d4:94:a6:3f:af:7e:27:e8:
a4:9b:aa:dd:93:43:49:5e:11:5e:ae:fe:91:57:62:
16:a7:8f:4c:25:c6:ee:c2:8b:15:6e:0c:99:fa:91:
52:dd:03:08:57:3e:1a:58:ed:86:f4:e8:20:2c:08:
44:47:c8:51:83:6d:24:7c:5e:3a:2e:91:47:ac:d7:
a2:be:a5:35:7b:43:26:57:e3:46:c9:db:05:a1:e3:
df:ef:96:bd:ee:c6:70:1e:98:23:28:63:5b:c2:73:
55:19:e0:59:a3:21:26:76:56:7d:16:b4:09:86:bc:
62:20:f2:a1:81:29:62:1d:1f:23:ca:8c:79:f1:04:
a4:dc:0e:0f:6e:ca:a7:51:8d:d2:a4:9b:10:bc:87:
a4:ca:82:f1:9c:73:ef:ef:f7:42:c2:30:bb:51:10:
b5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:16:42:61:8E:C1:C8:F7:16:B3:3D:58:17:4B:3E:DC:FD:1C:28:D3
X509v3 Authority Key Identifier:
keyid:83:37:99:E7:C8:D9:2A:85:CE:95:08:C1:BE:1A:3F:38:09:50:95:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzeZ58jZKoXOlQjBvho_OAlQlZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7121f1-6c62-4780-b1e2-3fa4676a0dce/1/gzeZ58jZKoXOlQjBvho_OAlQlZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:9a:c4:c5:9c:1d:bf:25:4b:df:d2:73:2e:e7:ee:c6:eb:69:
14:76:33:09:a8:04:8b:7a:6a:3f:34:f4:82:03:db:9b:be:e0:
a3:cd:3d:75:11:01:dd:a8:c1:ba:de:5a:11:45:af:f7:7d:5b:
37:b9:c1:e4:c2:a0:f1:17:7e:90:4d:ae:5a:63:d3:e5:f6:4d:
74:1f:b8:23:72:cd:c5:71:a5:65:de:0c:38:9d:16:37:75:6c:
65:bd:f8:c8:30:34:e6:94:ad:e6:d0:69:f9:c7:35:92:52:66:
85:56:19:69:a5:33:26:01:c5:67:ae:55:a8:5e:c3:64:96:0a:
ee:9e:17:99:e5:48:a8:fe:a2:c9:90:1c:02:32:c6:25:f3:c3:
7b:c7:16:8d:e3:74:4f:33:83:71:23:9f:5d:12:3d:fe:4e:d9:
70:6f:68:be:b5:c8:45:e9:20:99:3c:44:3d:c6:85:d1:ab:58:
62:af:71:38:9c:ed:30:0f:70:8c:03:30:c1:0a:eb:6c:ca:0b:
52:af:cc:cf:7a:ed:e7:4a:07:bb:45:d3:d9:51:80:7b:88:59:
3e:a6:d5:ad:81:ed:c5:a1:1c:66:74:9e:cf:0e:f0:35:71:5e:
0a:db:bc:bf:57:df:9f:b8:46:17:9c:e1:73:21:95:96:4a:65:
c4:a8:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:49:25 2026 by rpki-client