Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
File: gZypPRPsITWRKJWUxBdjrAcEbFQ.mft (raw, json)
Hash identifier: OIdZpLQK56TVdyFNV2jnCBdg7bn/SAMPhyPd3H5sZsA=
Subject key identifier: 6C:BA:31:B2:DE:37:16:F4:E5:43:C5:69:AC:65:EB:58:14:98:14:04
Authority key identifier: 81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
Certificate issuer: /CN=819ca93d13ec213591289594c41763ac07046c54
Certificate serial: 019D2695F9C96AFE8586401A4D933F20CE80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
Manifest number: 033B
Signing time: Wed 25 Mar 2026 20:00:55 +0000
Manifest this update: Wed 25 Mar 2026 20:00:55 +0000
Manifest next update: Thu 26 Mar 2026 20:00:55 +0000
Files and hashes: 1: XNNDjNoOu_LuV45c4vtNYBjjTPg.roa (hash: P6Hg46pm5YZnREJ4HE6uOmX9gYMa63KvRqf51l0pf9U=)
2: gZypPRPsITWRKJWUxBdjrAcEbFQ.crl (hash: ohB0diB5126FqKsBU3x3Nvdg88bZqMvfwKqz4kT9kkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f9:c9:6a:fe:85:86:40:1a:4d:93:3f:20:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819ca93d13ec213591289594c41763ac07046c54
Validity
Not Before: Mar 25 20:00:55 2026 GMT
Not After : Mar 26 20:00:55 2026 GMT
Subject: CN=6cba31b2de3716f4e543c569ac65eb5814981404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:84:a3:0b:46:cb:b6:44:91:8e:a7:d5:a2:77:
99:a2:bc:49:d8:ed:75:97:9e:f3:a5:fa:4f:83:95:
ad:8e:77:ce:bb:c0:33:3b:0f:07:f5:3a:3c:2f:23:
e2:20:3b:4c:dc:73:31:e0:a4:8f:37:46:0b:ef:c9:
51:9a:84:5f:b4:a5:ec:86:c9:93:b5:7c:b6:a7:a3:
70:6d:ac:13:32:1a:a2:38:dd:4c:ae:84:da:25:5e:
64:d2:dc:68:03:32:c1:da:36:c9:23:c0:7b:0c:0d:
f4:fc:83:4c:e2:8c:2c:56:89:34:29:2b:5a:a2:ef:
9f:f6:c5:4d:ee:4c:82:fc:2d:3d:85:c3:6f:4e:39:
c3:5f:9d:4e:15:f4:90:be:a5:8a:81:7d:44:1f:9b:
39:a8:e8:a1:27:45:a8:74:ad:bd:96:ee:01:15:86:
4e:a0:1f:a7:2e:37:ea:83:bb:ea:78:ac:25:22:8b:
b3:f4:84:52:5a:cf:09:a4:18:9d:6d:1c:69:78:b9:
e3:83:24:86:73:88:64:82:f0:50:04:13:e1:71:6e:
10:35:ef:7d:c1:31:95:44:d0:ad:07:2a:84:da:ce:
81:36:cd:9d:d2:44:22:48:7c:51:d5:c0:83:69:46:
1a:9b:e9:f5:bd:c1:40:61:25:0a:ce:a4:0e:49:b1:
8c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BA:31:B2:DE:37:16:F4:E5:43:C5:69:AC:65:EB:58:14:98:14:04
X509v3 Authority Key Identifier:
keyid:81:9C:A9:3D:13:EC:21:35:91:28:95:94:C4:17:63:AC:07:04:6C:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZypPRPsITWRKJWUxBdjrAcEbFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5f95be-6267-47bb-9a29-b00d03f1b7a4/1/gZypPRPsITWRKJWUxBdjrAcEbFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:15:6e:75:bb:ee:1b:17:40:d1:0e:55:d0:b2:35:59:f5:2d:
82:15:61:98:4c:dd:43:89:af:d4:52:1c:c8:17:c2:fa:17:d7:
a2:93:4f:77:ac:c6:88:48:47:4e:00:f3:96:8d:40:25:ce:da:
00:fb:22:14:2e:dd:0d:d7:df:b0:fb:99:ff:a5:27:28:9e:c5:
c7:72:52:46:67:3b:9d:a5:70:9f:a0:c0:a0:5d:8d:18:bc:23:
8a:7c:d1:17:1f:2b:2d:21:3b:f7:ae:57:dd:da:0f:77:07:63:
a6:99:a7:87:fe:f0:29:20:e8:a8:03:38:d8:83:9d:89:d2:c1:
f2:0e:50:cd:78:65:53:32:e4:dd:27:d4:24:0f:57:09:57:28:
94:4a:65:d1:79:e9:a2:fc:46:5c:68:80:82:95:77:03:ea:89:
a1:dc:3a:a9:79:5d:44:51:4a:5e:62:62:d6:a4:8e:a7:8c:c2:
2c:ce:dd:4b:62:8f:46:84:50:38:31:b3:1b:82:da:06:41:00:
87:be:b6:ae:cb:d0:ff:79:35:c0:12:37:0f:db:82:34:38:c1:
92:b3:a9:f0:43:4d:e5:17:04:ba:ed:51:82:19:76:09:8a:ab:
08:4b:d6:2f:4d:f9:c7:a1:57:75:cc:31:6d:a2:93:39:62:0a:
9f:6c:54:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:39 2026 by rpki-client