Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
File: gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json)
Hash identifier: HXuyxjMLyj4eTLeMtUqtc/6KS5WYIHJW+Cbj96yG9n8=
Subject key identifier: 6E:83:6E:6D:3A:96:35:CF:69:24:AB:B8:06:99:BB:A5:CD:8A:90:E6
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial: 019E1F47B94826643EAD01FCE135B01CA443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
Manifest number: 1631
Signing time: Wed 13 May 2026 03:00:54 +0000
Manifest this update: Wed 13 May 2026 03:00:54 +0000
Manifest next update: Thu 14 May 2026 03:00:54 +0000
Files and hashes: 1: 7e4cKF3TuVRmJGKrCMROf7YbeTM.roa (hash: EI5hNOLcVf+LZoym/zm/8vnZenolnXToI8NdHBuqEzE=)
2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: JRDpFhAgXXPbnCVqmdB4Sn6p7MXIpCIQ4BIfYUNYFTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:b9:48:26:64:3e:ad:01:fc:e1:35:b0:1c:a4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
Validity
Not Before: May 13 03:00:54 2026 GMT
Not After : May 14 03:00:54 2026 GMT
Subject: CN=6e836e6d3a9635cf6924abb80699bba5cd8a90e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:02:15:dd:16:22:a7:4a:53:5a:80:bf:99:
df:12:cc:31:cb:09:69:40:5b:be:8f:cf:db:67:72:
44:e7:3f:df:09:9d:97:c4:0e:5e:68:d3:74:e9:6d:
49:2f:9a:8d:22:b3:b8:e3:01:2f:b8:33:51:29:95:
d1:a1:8c:f0:67:f4:fc:cf:b2:a1:48:7e:1a:60:37:
b1:76:98:c9:42:80:0b:33:93:01:de:e2:92:d9:d3:
34:d8:f4:34:42:fe:41:34:ce:a8:20:9c:25:f0:37:
c8:ba:e5:9f:8e:cd:00:29:97:c0:68:b2:af:e8:e9:
a0:75:3a:50:44:76:fe:f8:ab:3c:aa:16:09:c0:1e:
b8:28:8b:60:2d:45:1d:dd:9c:b8:27:3f:91:eb:c7:
d4:95:2c:a9:dc:70:f6:2f:f5:ca:98:b8:af:ca:e2:
da:c0:23:e9:da:8e:51:58:e4:01:55:69:a6:7b:1e:
77:c4:95:b3:32:b3:ee:8e:b1:b7:3d:28:27:01:6b:
c6:e1:bc:d2:ff:da:5f:23:27:b2:0d:af:e2:09:50:
82:da:3f:bd:9a:91:d1:d8:4c:71:06:91:0a:8c:df:
c0:2a:cf:a1:36:cc:78:94:24:bc:dd:90:6b:6e:fd:
25:0a:4c:4d:ef:c9:79:9a:99:39:f8:75:7c:5c:a6:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:83:6E:6D:3A:96:35:CF:69:24:AB:B8:06:99:BB:A5:CD:8A:90:E6
X509v3 Authority Key Identifier:
keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:53:1b:50:3d:2c:ff:09:73:31:7e:d9:48:c7:89:18:49:6e:
76:6f:9d:f7:35:2b:46:aa:c6:0e:9b:c2:af:b1:fc:e8:7c:fc:
50:c6:59:02:ac:27:2c:87:2c:6b:48:f5:41:ab:b0:4d:50:f6:
24:41:3d:60:a3:d6:2d:9e:f3:6b:18:00:c7:99:cc:87:a8:79:
ce:60:5e:a4:3a:e4:22:2d:b4:c4:72:f5:3b:f4:52:0d:b0:56:
0e:81:b7:e8:d6:b0:c8:dd:c2:f7:89:f8:a1:f8:35:7b:4c:ea:
d1:0a:c7:0d:c5:7e:cf:7c:19:04:c0:71:93:fe:24:c7:45:35:
89:2d:28:2e:e8:80:d1:15:c1:e1:03:4f:c1:e6:8d:37:c4:c1:
d9:2e:84:cc:7c:2b:7f:62:f4:6d:42:4c:8c:91:71:ae:ce:39:
2c:49:5c:58:fc:18:9c:d7:06:12:e4:07:09:75:a3:1b:4c:c6:
08:b8:ea:02:69:0e:51:5c:05:8f:ba:58:31:7d:94:ab:b1:2a:
55:67:9b:bf:76:ce:69:aa:47:80:76:3a:4f:73:71:07:a2:f6:
41:64:62:6a:c1:81:01:a5:3d:51:0d:31:c1:26:fd:1d:b0:1c:
39:8d:d2:f9:a7:10:98:e2:1e:8d:e3:16:47:60:d0:7c:7d:98:
1f:23:a0:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:44 2026 by rpki-client