Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json)
Hash identifier: 5vw7FbLumMsrmQaDgd+pw/1SPKLy9NdnaNexumwMCYA=
Subject key identifier: A8:F2:D9:25:FE:12:92:4C:29:86:B1:98:6B:A7:02:24:68:EC:10:78
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 019D39AEBF63AD878B5DD79F212F7DBD4194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
Manifest number: 0DE8
Signing time: Sun 29 Mar 2026 13:00:46 +0000
Manifest this update: Sun 29 Mar 2026 13:00:46 +0000
Manifest next update: Mon 30 Mar 2026 13:00:46 +0000
Files and hashes: 1: WbAwRdYrJR5wFAa2q_hyf2XEajA.roa (hash: fVhxKKPzH41Q65WrATxm9iiVCPSBedSsGy5vx1QfADc=)
2: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: PKYSaBGYNzwrAXtXx0bM61PNf9/UHptA8HNyiuV4q9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:bf:63:ad:87:8b:5d:d7:9f:21:2f:7d:bd:41:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Mar 29 13:00:46 2026 GMT
Not After : Mar 30 13:00:46 2026 GMT
Subject: CN=a8f2d925fe12924c2986b1986ba7022468ec1078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:6d:ae:65:94:8a:b5:22:95:2c:9c:22:2d:
ac:c5:15:1c:82:8f:ed:36:2f:ae:a4:6c:3e:b6:b0:
b6:58:d4:ca:f9:1c:c2:16:df:a8:27:e1:0c:65:f7:
43:b0:64:ef:da:cd:b0:88:7d:75:d9:d1:27:81:04:
3d:18:8d:09:69:52:97:93:dd:7b:e0:92:05:8e:f1:
0f:9f:2b:7b:49:4f:c5:c2:5e:48:4f:b5:21:73:6e:
0f:df:3b:3e:e4:91:b0:46:47:b8:cf:fd:33:8f:a6:
9c:ed:6d:2e:f6:ce:a0:e6:ab:4c:a6:e1:37:04:a5:
6a:36:7c:86:34:96:60:85:28:a8:ce:34:2d:ca:1d:
0f:3f:2b:ea:ef:ed:39:52:3c:5e:f9:f4:26:88:87:
35:c4:ac:e4:c3:07:79:39:ca:74:b0:a3:07:37:4d:
6d:b8:3b:5f:61:d0:ae:11:6e:d5:d4:85:3e:1f:f9:
a6:6f:d2:5f:6c:e9:66:1b:f2:02:41:00:c2:9a:ee:
d5:93:64:c2:27:9c:c4:9d:ab:b1:06:ec:9d:6e:7a:
f8:1c:1c:8a:0b:3f:bd:95:84:e8:cb:53:a0:83:6d:
66:eb:a3:23:01:98:9f:51:1d:80:19:f1:f2:bd:37:
2c:7d:76:e1:85:c4:cc:ea:33:eb:5a:50:99:e6:5a:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F2:D9:25:FE:12:92:4C:29:86:B1:98:6B:A7:02:24:68:EC:10:78
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:51:8d:13:7c:36:d6:93:dc:5a:fd:c1:e3:48:97:97:86:ac:
42:35:38:06:f6:d0:a9:2a:9a:e4:c3:d5:43:ec:6f:07:bd:cc:
c3:74:45:89:1e:7d:0c:8a:79:b4:07:67:a5:c4:3f:23:99:ee:
db:1a:89:e8:51:9a:a9:4f:29:4b:1f:4c:e7:e2:dd:81:45:09:
f7:92:70:95:54:90:0f:91:c9:86:f3:2c:ac:d2:de:e8:05:e1:
d7:38:1b:ae:6a:0d:e6:c7:c0:2a:6c:ac:77:42:f1:2b:72:55:
d5:68:27:9c:0b:ed:f7:94:29:da:da:c5:22:ca:0a:a2:33:16:
5a:ec:7a:f1:91:bc:1e:0c:ac:ad:d9:01:d6:a0:b1:00:85:ac:
de:72:83:0c:e2:1a:8d:f3:2f:17:44:33:10:51:5d:27:72:ea:
3c:5b:49:1e:65:96:42:47:38:92:46:78:07:b1:53:43:99:f8:
54:44:4f:2b:18:f8:c6:69:06:e9:86:7e:8c:97:3e:91:7c:c0:
4d:ca:09:67:21:64:b1:56:40:06:f7:6b:87:cd:8d:77:f3:3f:
1c:7c:f2:a0:2d:53:f0:08:b7:3b:66:35:d7:c0:78:49:39:32:
e8:4f:9e:bb:59:e9:a3:dd:4a:0b:8e:e3:56:7e:31:27:2c:7c:
c0:2f:b3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:32 2026 by rpki-client