Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
File: GZCLY2kUj088UPFnED96BHjFKUI.mft (raw, json)
Hash identifier: ED6trY9AdXatABzaWxWYUIf7qQyBWlX/ls5SYqXfsTg=
Subject key identifier: 43:EA:30:91:D6:40:F7:CE:48:FF:47:36:A1:94:9A:52:89:E8:2E:5A
Authority key identifier: 19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
Certificate issuer: /CN=19908b6369148f4f3c50f167103f7a0478c52942
Certificate serial: 019D37C0B36291A595EB57208006B7831B25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 04:01:08 +0000
Manifest this update: Sun 29 Mar 2026 04:01:08 +0000
Manifest next update: Mon 30 Mar 2026 04:01:08 +0000
Files and hashes: 1: E2QGn3eEc4YgUK3AVvYhsuz-J_8.roa (hash: wMdtrfklBtkfMKlhkTQEZGLh+FduG0xroz4RyYIx+Jg=)
2: GZCLY2kUj088UPFnED96BHjFKUI.crl (hash: ui7DUeKElD86n7aGje10AQGwyHVDgeZ9osSj9YnklOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:b3:62:91:a5:95:eb:57:20:80:06:b7:83:1b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19908b6369148f4f3c50f167103f7a0478c52942
Validity
Not Before: Mar 29 04:01:08 2026 GMT
Not After : Mar 30 04:01:08 2026 GMT
Subject: CN=43ea3091d640f7ce48ff4736a1949a5289e82e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:71:4a:79:6f:5c:d6:78:0c:2b:8d:cb:72:67:
0c:18:e4:7e:27:09:5a:b1:02:e0:03:21:a7:aa:26:
84:e8:88:59:ec:f3:6b:e9:a7:91:02:c3:16:d5:b3:
4e:36:f1:9a:ee:f5:bd:88:68:fc:74:12:e1:6b:ca:
3b:a5:14:4f:0e:42:7a:1f:45:9c:a5:63:6b:9d:79:
5a:05:79:01:12:34:fa:68:3c:44:87:2c:f6:c0:99:
6c:fc:b6:60:ac:0d:c8:2b:3b:4b:e9:a3:a7:ef:24:
b1:55:56:75:19:32:71:d4:cf:f6:19:95:af:dd:2d:
73:83:ca:1d:2e:22:89:17:03:5e:25:6e:8e:90:42:
20:a1:b8:4e:05:63:1e:9c:7b:eb:d0:14:39:6b:98:
ed:62:9d:7a:24:b9:36:b2:21:14:ed:08:bc:cf:13:
1d:25:81:95:f8:bb:0b:c4:7b:8a:0c:48:1e:da:82:
45:22:fe:85:6d:0f:73:cc:2d:e5:02:1c:26:ae:1d:
9e:6d:0c:ac:52:f4:8e:1f:a8:ca:6b:1d:fe:96:d9:
97:ca:a5:ee:1e:b9:0d:9c:4d:7e:86:41:50:09:5e:
ec:71:06:9b:2c:ba:2e:6c:6a:6c:77:84:86:d3:1d:
4b:35:6a:79:81:1c:c9:c1:07:36:82:24:7c:46:7e:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EA:30:91:D6:40:F7:CE:48:FF:47:36:A1:94:9A:52:89:E8:2E:5A
X509v3 Authority Key Identifier:
keyid:19:90:8B:63:69:14:8F:4F:3C:50:F1:67:10:3F:7A:04:78:C5:29:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZCLY2kUj088UPFnED96BHjFKUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/e70295-6c2e-48fb-8fc9-1260a6f3a393/1/GZCLY2kUj088UPFnED96BHjFKUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:48:e8:19:9a:ca:a9:1f:22:d1:e4:74:9b:da:e1:39:d3:42:
10:15:e2:d7:bf:f1:ac:c8:46:51:8f:e9:4b:9f:03:01:8a:a7:
54:7d:9f:3c:e8:47:4c:6a:87:96:49:92:71:de:66:6c:f2:12:
6e:43:21:50:8d:3b:fa:a4:b7:85:0a:a2:a5:1e:0d:5d:e9:c4:
20:58:fb:84:b8:dc:cf:de:de:c6:ba:21:a7:f3:1a:bf:66:89:
43:b1:73:5a:91:76:28:16:5b:a4:34:20:c3:64:56:4f:98:0b:
8f:d9:d3:80:92:ca:95:64:dc:ef:f1:64:c6:88:a9:9c:a9:c9:
53:6d:07:a2:91:33:a9:03:b1:b3:e3:e7:1c:35:f3:fd:3f:dc:
5d:a2:6d:c7:fc:fc:e0:5a:4b:b5:2b:3a:68:89:7e:ee:55:06:
5d:a9:a0:93:fe:42:78:5b:85:35:28:1c:4a:ef:00:d9:9c:34:
86:b3:de:95:fa:7f:51:90:d6:19:4b:1e:10:fc:a6:ce:c8:05:
90:84:f7:28:88:45:91:f0:f9:0c:57:73:02:98:d9:99:65:fc:
e7:8a:60:63:cd:b1:ce:b2:14:59:49:ff:c3:56:95:f8:fa:b0:
8e:cf:34:8a:34:20:64:14:2a:1d:b1:69:46:1d:20:bd:e6:72:
91:ea:7b:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wLNikaWV61cggAa3gxslMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OTA4YjYzNjkxNDhmNGYzYzUwZjE2NzEwM2Y3YTA0Nzhj
NTI5NDIwHhcNMjYwMzI5MDQwMTA4WhcNMjYwMzMwMDQwMTA4WjAzMTEwLwYDVQQD
Eyg0M2VhMzA5MWQ2NDBmN2NlNDhmZjQ3MzZhMTk0OWE1Mjg5ZTgyZTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HFKeW9c1ngMK43LcmcMGOR+Jwla
sQLgAyGnqiaE6IhZ7PNr6aeRAsMW1bNONvGa7vW9iGj8dBLha8o7pRRPDkJ6H0Wc
pWNrnXlaBXkBEjT6aDxEhyz2wJls/LZgrA3IKztL6aOn7ySxVVZ1GTJx1M/2GZWv
3S1zg8odLiKJFwNeJW6OkEIgobhOBWMenHvr0BQ5a5jtYp16JLk2siEU7Qi8zxMd
JYGV+LsLxHuKDEge2oJFIv6FbQ9zzC3lAhwmrh2ebQysUvSOH6jKax3+ltmXyqXu
HrkNnE1+hkFQCV7scQabLLoubGpsd4SG0x1LNWp5gRzJwQc2giR8Rn6ADwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEPqMJHWQPfOSP9HNqGUmlKJ6C5aMB8GA1UdIwQY
MBaAFBmQi2NpFI9PPFDxZxA/egR4xSlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9lNzAyOTUtNmMyZS00OGZiLThmYzkt
MTI2MGE2ZjNhMzkzLzEvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9lNzAyOTUtNmMyZS00OGZiLThmYzktMTI2MGE2ZjNhMzkz
LzEvR1pDTFkya1VqMDg4VVBGbkVEOTZCSGpGS1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEjoGZrK
qR8i0eR0m9rhOdNCEBXi17/xrMhGUY/pS58DAYqnVH2fPOhHTGqHlkmScd5mbPIS
bkMhUI07+qS3hQqipR4NXenEIFj7hLjcz97exrohp/Mav2aJQ7FzWpF2KBZbpDQg
w2RWT5gLj9nTgJLKlWTc7/FkxoipnKnJU20HopEzqQOxs+PnHDXz/T/cXaJtx/z8
4FpLtSs6aIl+7lUGXamgk/5CeFuFNSgcSu8A2Zw0hrPelfp/UZDWGUseEPymzsgF
kIT3KIhFkfD5DFdzApjZmWX854pgY82xzrIUWUn/w1aV+Pqwjs80ijQgZBQqHbFp
Rh0gveZykep7Wg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:35 2026 by rpki-client