Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
File: GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json)
Hash identifier: xH/bZDTIaylWos2Jc/N4bTPGQHiA0n4lDCuwAFfd1nc=
Subject key identifier: 98:02:C4:F4:36:46:94:74:76:AD:44:DE:15:DC:F7:C6:F4:D2:6C:43
Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
Certificate issuer: /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Certificate serial: 019D37F78E4EF18FC655FCE11FF4AE045EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
Manifest number: 0698
Signing time: Sun 29 Mar 2026 05:01:03 +0000
Manifest this update: Sun 29 Mar 2026 05:01:03 +0000
Manifest next update: Mon 30 Mar 2026 05:01:03 +0000
Files and hashes: 1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: sxqTTvJhpdRgq5Ax2uNp+JfeJv9VfOWNeMD0w6GLta8=)
2: rkyTFWOAnwX3F8qqO766n2upPq4.roa (hash: Lqt7F3+mbWjOVp+tT8JH700oKwS5LDilWe3XGrT0PWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:8e:4e:f1:8f:c6:55:fc:e1:1f:f4:ae:04:5e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Validity
Not Before: Mar 29 05:01:03 2026 GMT
Not After : Mar 30 05:01:03 2026 GMT
Subject: CN=9802c4f43646947476ad44de15dcf7c6f4d26c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:b4:a8:b3:66:96:b9:46:c8:6f:3e:7f:aa:
6d:67:9b:5d:26:45:e4:3f:be:1c:b3:97:7a:6a:22:
8d:51:f2:6e:e1:07:de:12:dd:39:43:96:67:69:9b:
4f:a4:86:35:fa:07:32:c7:cb:2e:9c:bc:a5:84:7a:
89:64:06:ee:20:f9:63:64:53:f5:72:cb:69:d8:9e:
27:7d:30:a9:7c:34:19:ed:bc:da:58:13:33:e7:9e:
f2:16:93:e2:35:28:ef:41:77:95:5a:ec:b5:31:f6:
fc:b4:83:bf:dd:e7:d1:58:0e:2f:1a:d9:19:6c:c7:
0f:49:64:1c:b7:c9:f3:06:82:d6:63:84:b0:e6:8a:
3d:cb:aa:10:5a:14:66:95:ee:a5:bc:8d:21:05:40:
c9:cb:13:e4:d4:20:b3:ee:a1:b6:2b:c7:96:51:a3:
72:5d:02:bf:77:95:fa:b8:03:23:04:c7:8c:ae:04:
0c:fe:6d:27:1e:56:bd:83:de:b4:43:2e:8d:bc:9b:
ad:fc:1d:d2:97:d6:24:14:b8:ce:45:bc:d2:10:4a:
82:99:26:7e:c4:c1:63:e8:16:2b:fa:b3:2a:4f:4d:
b4:d5:10:c3:77:e9:71:02:5a:75:9f:7b:4e:27:33:
7c:96:21:2b:e3:55:1e:c0:8d:bd:8d:8a:bf:e5:37:
fc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:02:C4:F4:36:46:94:74:76:AD:44:DE:15:DC:F7:C6:F4:D2:6C:43
X509v3 Authority Key Identifier:
keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:2e:17:26:a7:15:78:99:e9:03:13:5a:3e:6a:06:a3:18:62:
0b:4c:fa:21:28:86:00:65:74:c2:07:97:01:92:17:b9:5f:57:
af:ed:cd:6a:80:48:8b:7d:a5:6b:6c:67:22:08:35:99:99:c9:
a8:15:03:0d:37:34:51:ce:a9:6c:9a:eb:91:38:fb:56:f1:f7:
a7:b7:61:79:a1:50:b8:af:db:19:ef:9b:bf:76:98:0f:ae:37:
31:f2:f3:49:f5:6e:89:bf:ce:fc:51:77:99:be:7f:fb:75:f9:
b4:52:2c:06:59:b0:9f:68:89:30:5f:11:9d:90:22:a4:0c:f4:
11:7f:8a:a4:02:34:f5:fe:49:02:a5:37:fc:1d:7b:64:8d:2c:
5a:5d:4e:73:d2:61:6e:32:e7:e5:da:f5:22:c1:ac:6b:fe:ce:
ba:91:3f:7b:5b:21:2f:09:cf:7d:da:f0:fd:6a:b5:f5:e6:6d:
a5:59:ab:b9:70:84:2a:ec:50:05:7c:14:5c:e5:9d:ea:13:3d:
1b:0b:9c:bc:21:e4:4a:fc:28:7f:cb:9c:85:ed:13:8d:7f:93:
39:4e:3c:6c:81:ee:39:39:ea:07:fe:e6:25:17:8b:2f:b4:34:
2b:98:dd:d4:f1:9a:e2:15:ec:66:e8:b6:02:b8:bd:1b:b8:ad:
bb:b4:8b:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03945O8Y/GVfzhH/SuBF7sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMzY4ZmJmNWJiZDZkMzJmM2RkZGMyNGVjMjA0MDM4YzQ5
YjA1NTAwHhcNMjYwMzI5MDUwMTAzWhcNMjYwMzMwMDUwMTAzWjAzMTEwLwYDVQQD
Eyg5ODAyYzRmNDM2NDY5NDc0NzZhZDQ0ZGUxNWRjZjdjNmY0ZDI2YzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaa0qLNmlrlGyG8+f6ptZ5tdJkXk
P74cs5d6aiKNUfJu4QfeEt05Q5ZnaZtPpIY1+gcyx8sunLylhHqJZAbuIPljZFP1
cstp2J4nfTCpfDQZ7bzaWBMz557yFpPiNSjvQXeVWuy1Mfb8tIO/3efRWA4vGtkZ
bMcPSWQct8nzBoLWY4Sw5oo9y6oQWhRmle6lvI0hBUDJyxPk1CCz7qG2K8eWUaNy
XQK/d5X6uAMjBMeMrgQM/m0nHla9g960Qy6NvJut/B3Sl9YkFLjORbzSEEqCmSZ+
xMFj6BYr+rMqT0201RDDd+lxAlp1n3tOJzN8liEr41UewI29jYq/5Tf8CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgCxPQ2RpR0dq1E3hXc98b00mxDMB8GA1UdIwQY
MBaAFBs2j79bvW0y893cJOwgQDjEmwVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8yY2JmODgtNThkOS00MjRlLThmOGYt
ZmQ0NjA0ZDdlN2FmLzEvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8yY2JmODgtNThkOS00MjRlLThmOGYtZmQ0NjA0ZDdlN2Fm
LzEvR3phUHYxdTliVEx6M2R3azdDQkFPTVNiQlZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIC4XJqcV
eJnpAxNaPmoGoxhiC0z6ISiGAGV0wgeXAZIXuV9Xr+3NaoBIi32la2xnIgg1mZnJ
qBUDDTc0Uc6pbJrrkTj7VvH3p7dheaFQuK/bGe+bv3aYD643MfLzSfVuib/O/FF3
mb5/+3X5tFIsBlmwn2iJMF8RnZAipAz0EX+KpAI09f5JAqU3/B17ZI0sWl1Oc9Jh
bjLn5dr1IsGsa/7OupE/e1shLwnPfdrw/Wq19eZtpVmruXCEKuxQBXwUXOWd6hM9
GwucvCHkSvwof8uche0TjX+TOU48bIHuOTnqB/7mJReLL7Q0K5jd1PGa4hXsZui2
Ari9G7itu7SLkQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:07 2026 by rpki-client