Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
File: gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json)
Hash identifier: XhOsmGr6P1dbYVQD469H4TJcgZmaB30AZidkr0we6is=
Subject key identifier: 7A:73:C1:9D:64:FF:B4:8F:BD:AD:95:7F:E5:99:45:C2:5B:15:37:34
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial: 01A0F18C25C49C4A244A5F2B65873EFF4101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
Manifest number: 17A7
Signing time: Wed 30 Sep 2026 09:01:28 +0000
Manifest this update: Wed 30 Sep 2026 09:01:28 +0000
Manifest next update: Thu 01 Oct 2026 09:01:28 +0000
Files and hashes: 1: 7e4cKF3TuVRmJGKrCMROf7YbeTM.roa (hash: EI5hNOLcVf+LZoym/zm/8vnZenolnXToI8NdHBuqEzE=)
2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: h5Ml+s5UQs4BV3OASTOlAEks2EUQJm1lCRwXDyHCG/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8c:25:c4:9c:4a:24:4a:5f:2b:65:87:3e:ff:41:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
Validity
Not Before: Sep 30 09:01:28 2026 GMT
Not After : Oct 1 09:01:28 2026 GMT
Subject: CN=7a73c19d64ffb48fbdad957fe59945c25b153734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:36:58:b5:40:b3:37:89:55:f8:90:09:a7:83:
a2:72:12:fd:ee:85:55:8d:b9:7f:cd:fc:24:d7:d0:
81:a9:58:64:70:6c:7f:23:3a:70:43:f0:61:59:71:
8c:f3:58:9f:48:ec:35:a2:ea:a5:9a:74:60:20:b5:
ea:c1:be:b5:49:85:a2:f8:5e:9d:2c:96:ff:21:1c:
9a:90:c1:ca:bb:76:f6:b4:cc:4d:11:05:a6:57:70:
a1:93:3a:78:c4:de:1d:9c:c3:26:db:82:e5:d1:6f:
3b:5f:42:2b:17:19:1c:7a:e8:2c:95:ea:a2:95:36:
64:3e:19:c2:32:7c:6f:c1:da:fe:80:33:7a:8d:98:
60:6e:90:2f:7d:50:1d:ba:d0:ca:c3:a2:67:7a:25:
95:14:f1:bc:2e:d5:93:33:9d:b1:ef:61:86:5c:b2:
26:74:72:bd:36:98:4f:2f:3f:7a:96:83:93:d4:fe:
da:42:28:e6:8a:fb:eb:04:1b:fe:9b:71:59:cc:23:
8f:95:04:4b:7a:25:0e:31:81:4d:3c:ae:5e:c1:63:
ab:6a:89:b2:e3:cf:db:c0:a3:4c:0a:df:07:b2:a3:
9b:7a:d6:f0:a0:91:eb:44:ea:d5:77:b0:05:62:2c:
93:aa:46:f0:34:46:7f:70:58:27:c6:4e:9f:c9:60:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:73:C1:9D:64:FF:B4:8F:BD:AD:95:7F:E5:99:45:C2:5B:15:37:34
X509v3 Authority Key Identifier:
keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:02:48:ee:b9:54:94:a4:ee:d3:d8:6c:e0:2f:3e:36:92:fb:
72:0f:a0:ff:67:f3:35:5d:cd:52:36:c2:d2:f3:5f:d0:42:72:
fc:26:25:e6:62:f4:97:69:d5:51:61:9f:7c:56:2c:cc:01:1a:
bd:f2:10:b3:df:2d:18:7f:4a:ec:7b:75:84:83:c3:59:6f:a4:
74:e1:1c:4b:8a:1f:e8:06:aa:66:c4:cb:f0:39:93:82:98:e8:
e2:e7:8a:17:21:c1:7f:86:b7:c1:86:fd:01:12:b8:21:5b:9f:
c9:62:5a:88:90:61:a2:b2:d0:a9:69:76:52:0c:db:7c:f9:4b:
a6:c6:f1:91:a1:e6:53:63:5a:09:3d:3c:a5:8c:98:4c:2d:89:
92:77:8b:33:20:89:72:5f:2a:f1:9b:fb:e4:53:40:f7:54:1d:
fb:eb:bd:84:1d:38:78:56:78:6f:18:f3:d0:e8:89:31:6a:95:
34:77:32:59:48:e7:b5:b6:1a:87:53:07:74:31:70:20:f7:9d:
f6:fb:b3:81:2f:25:aa:00:b5:95:b7:db:d9:ae:fe:c9:87:c1:
46:57:bf:a3:dc:67:6b:9b:31:da:9a:bf:6e:96:f5:a9:47:76:
dd:08:17:1d:83:91:e6:70:b2:6d:95:fb:2b:e0:cf:26:a5:77:
ad:07:7a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:06:47 2026 by rpki-client