Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
File: gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft (raw, json)
Hash identifier: TP9LZWuM8znRtANtErL9Jx1FDL5SIDCprGep8RV42Og=
Subject key identifier: 57:04:D3:58:76:94:E9:62:8E:F1:C4:0C:D6:2B:F9:95:A7:81:FD:E2
Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
Certificate issuer: /CN=833a0b5594339aefe8b558e3729290b42bb1a974
Certificate serial: 019D382E34CFAB9B9854870BC8E588AF0072
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
Manifest number: 1208
Signing time: Sun 29 Mar 2026 06:00:45 +0000
Manifest this update: Sun 29 Mar 2026 06:00:45 +0000
Manifest next update: Mon 30 Mar 2026 06:00:45 +0000
Files and hashes: 1: OJQiev2wZVG1ocXpX4-0xyIDLu8.roa (hash: P2/t8LDWw8ZhLGGXRvorDGL2cHxIBux66GV2OQKjLoE=)
2: gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl (hash: a5y/wAb6TVliBOqrLqeKTDszWBpNn5LQWnffXRvk+yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:34:cf:ab:9b:98:54:87:0b:c8:e5:88:af:00:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974
Validity
Not Before: Mar 29 06:00:45 2026 GMT
Not After : Mar 30 06:00:45 2026 GMT
Subject: CN=5704d3587694e9628ef1c40cd62bf995a781fde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8c:8e:6f:7e:dc:28:ea:7c:73:40:0a:56:87:
53:f4:a7:78:d9:28:f8:44:27:77:52:5f:85:cc:4a:
26:b7:84:4d:40:d4:38:b4:74:37:ff:31:e3:94:47:
59:f5:82:26:30:82:2a:b0:66:f4:d8:1f:9f:1b:db:
ba:64:c1:1c:af:58:bc:18:04:a1:13:59:f4:8f:e8:
46:2d:3e:25:b2:3b:c2:69:59:41:5d:05:9a:90:83:
2a:2e:12:9a:a7:dc:72:66:72:d0:08:73:d5:cc:93:
c8:7b:47:7a:27:c4:e0:9a:e1:20:15:48:a6:a9:50:
48:df:63:92:0d:a5:b3:f7:45:06:4a:2b:e7:5a:16:
9c:62:4d:9c:92:0f:f7:84:ba:24:e0:55:cd:4c:ab:
52:dc:95:54:98:15:86:0d:d5:23:ba:e6:71:64:0d:
da:ab:07:3b:e7:9d:c6:e8:2d:5c:ee:f9:54:3b:75:
85:72:06:de:cf:84:cd:3e:a3:5a:c6:84:59:d4:4d:
6a:64:01:da:38:89:5d:b9:19:5b:ab:88:ad:ce:6f:
52:7e:87:0d:25:54:48:cb:ad:7e:49:ca:65:4d:c2:
fe:ae:33:cf:ee:42:62:92:1e:42:ed:a7:dd:3e:8c:
05:d4:d4:a6:ab:87:d3:9b:cf:0a:6a:fd:19:af:f0:
ad:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:04:D3:58:76:94:E9:62:8E:F1:C4:0C:D6:2B:F9:95:A7:81:FD:E2
X509v3 Authority Key Identifier:
keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:0c:20:5e:3a:29:de:ad:58:b2:01:32:5a:44:54:39:95:e0:
79:ec:50:33:13:1e:13:1e:cf:2c:3b:8a:16:5d:94:ab:b6:74:
8f:f4:08:8b:a5:b1:dd:1f:51:2d:a6:a9:d8:34:58:f4:36:4d:
27:aa:a3:f6:69:c7:50:33:79:51:38:6c:59:f4:5f:5f:35:8a:
58:24:72:77:85:62:85:a8:c5:90:45:af:84:06:a0:30:77:32:
75:95:f6:c0:f8:74:43:df:06:bb:3a:cb:80:e3:a0:07:9f:f9:
7c:d2:2b:82:fd:8c:6d:55:58:74:d5:d5:93:6e:1f:e9:a5:2c:
ab:80:7b:fe:78:75:69:39:21:62:22:3a:1a:96:ac:a3:a9:17:
53:e2:26:91:0f:11:34:26:74:f5:77:b0:9c:91:77:9a:e5:0f:
8e:a1:f7:f1:a9:2d:c8:b7:12:24:df:59:b1:71:cd:9d:cb:e5:
b2:9d:56:e3:bc:f4:6c:17:60:9f:0b:c3:07:42:8c:cc:21:2d:
c9:f1:6a:8f:0b:39:d8:eb:a0:7a:0e:c6:ca:50:e5:70:91:5f:
18:18:1e:1b:8b:d7:41:1d:a3:86:e2:be:b8:1e:0c:0c:4c:79:
e5:a7:b1:d4:d8:a7:b3:f7:19:c1:04:76:fe:ab:a5:8c:be:19:
a8:79:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:13:06 2026 by rpki-client