Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
File: gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft (raw, json)
Hash identifier: lQeyAys1jdTfJoKqhBlNXIuTeHuYLxyn4Bs/8U4+KJk=
Subject key identifier: 11:68:0E:B5:AB:3F:6B:30:43:A0:51:B6:DC:12:60:64:8B:74:50:DE
Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
Certificate issuer: /CN=833a0b5594339aefe8b558e3729290b42bb1a974
Certificate serial: 01A1A5CAB3D315382FEAA83637C7EC0EC93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
Manifest number: 1453
Signing time: Wed 04 Nov 2026 09:01:27 +0000
Manifest this update: Wed 04 Nov 2026 09:01:27 +0000
Manifest next update: Thu 05 Nov 2026 09:01:27 +0000
Files and hashes: 1: OJQiev2wZVG1ocXpX4-0xyIDLu8.roa (hash: P2/t8LDWw8ZhLGGXRvorDGL2cHxIBux66GV2OQKjLoE=)
2: gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl (hash: 1QT5puj1CyDB117Y0j7QNYYuIWbx68Qx30LvnDl4mMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a5:ca:b3:d3:15:38:2f:ea:a8:36:37:c7:ec:0e:c9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974
Validity
Not Before: Nov 4 09:01:27 2026 GMT
Not After : Nov 5 09:01:27 2026 GMT
Subject: CN=11680eb5ab3f6b3043a051b6dc1260648b7450de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:3f:95:50:12:d1:85:4e:a1:ca:a6:9f:33:
ce:86:d6:27:54:c1:94:a3:8f:4a:ea:08:b6:fc:b3:
4a:f8:2e:f6:6e:0a:4a:e1:b7:66:03:56:61:fd:ce:
fd:61:91:f0:90:32:90:d5:6e:13:15:89:86:67:35:
c0:7c:ae:f1:c2:3c:db:1d:5f:c9:7b:93:6e:23:ec:
41:65:c3:2d:92:65:3f:0b:73:4b:d0:7c:7e:3b:57:
26:b1:d8:a1:98:f3:06:8a:7f:e0:28:0e:1b:96:4b:
93:c8:b0:cb:cd:a5:a4:d8:41:c1:b3:b7:f7:52:a1:
e4:fe:8d:69:85:e0:8f:e7:fe:99:96:8d:d5:74:e5:
60:33:d9:c1:2d:3a:a3:dc:54:c3:30:da:e8:a3:df:
c1:66:84:88:ee:0c:d6:ac:b1:2d:61:cf:6c:02:c0:
4b:37:74:0b:0a:50:8d:a1:f8:30:2b:42:a9:0c:d2:
02:6e:43:06:59:97:a0:72:e8:f9:c4:8b:99:6e:ed:
c2:ac:e5:94:31:7a:47:17:43:41:82:f4:1a:aa:af:
62:79:d3:24:de:b0:8e:8d:3f:8e:a1:94:69:b4:57:
70:05:30:58:57:33:ae:7a:d5:7f:ae:a5:7d:b0:1f:
94:33:c4:12:d7:50:a3:5e:b3:07:99:69:ad:86:e5:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:68:0E:B5:AB:3F:6B:30:43:A0:51:B6:DC:12:60:64:8B:74:50:DE
X509v3 Authority Key Identifier:
keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:00:f2:f0:4f:64:b6:27:af:e0:04:5c:8f:ed:79:a2:21:82:
34:ff:e1:68:eb:f5:e4:38:f0:24:a3:4e:7d:f1:48:bf:80:16:
ee:aa:e5:ec:3f:d3:21:d5:14:04:49:a3:80:db:b6:3f:10:44:
b7:60:43:d2:b8:52:a6:cb:5d:db:5a:40:cd:1f:37:b0:88:74:
bf:41:58:e1:53:53:f2:99:aa:b8:0c:c7:ce:75:f2:d7:4f:09:
de:43:27:c8:43:54:a4:cf:bb:bf:f3:bb:43:34:24:b3:f1:9c:
99:85:04:de:f6:8b:c9:b3:d4:6d:48:8b:cb:a4:28:d6:6d:eb:
72:ca:1e:5d:bd:19:2e:46:03:b1:5f:81:9c:e5:4e:ec:80:eb:
0f:11:cb:d8:8e:ac:e7:1a:3f:99:13:f0:74:89:c4:34:8f:c6:
73:84:92:6d:c1:12:56:05:67:03:f3:d6:26:c1:b2:37:de:1d:
4a:e8:39:db:f2:40:e9:1d:f8:60:42:36:fb:84:7c:16:79:64:
a7:02:6f:26:46:8b:63:14:75:21:c8:d6:3a:4c:df:cb:94:b4:
53:a1:3d:ba:4d:d8:da:fc:98:97:48:c4:7a:bf:b9:0c:3a:8b:
1d:90:1a:b6:d4:6f:7c:46:05:45:e6:f6:dc:73:46:f8:00:f9:
f3:c0:9a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:14:17 2026 by rpki-client