Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
File: gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json)
Hash identifier: J98WzpYQgAsi8djyUSbrN4Liaez+GB+wyRadx23s8TE=
Subject key identifier: 3D:A1:C9:DD:82:26:85:8D:B5:06:64:B7:32:88:FF:8F:ED:F9:62:30
Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8
Certificate serial: 019D2816C029332647DF880662AF9E4591CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
Manifest number: 15B1
Signing time: Thu 26 Mar 2026 03:01:12 +0000
Manifest this update: Thu 26 Mar 2026 03:01:12 +0000
Manifest next update: Fri 27 Mar 2026 03:01:12 +0000
Files and hashes: 1: 7e4cKF3TuVRmJGKrCMROf7YbeTM.roa (hash: EI5hNOLcVf+LZoym/zm/8vnZenolnXToI8NdHBuqEzE=)
2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: pV0HepRRxqvJDkzQJMzpm4cHbxSSUZKW8xjAT/xG2AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c0:29:33:26:47:df:88:06:62:af:9e:45:91:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8
Validity
Not Before: Mar 26 03:01:12 2026 GMT
Not After : Mar 27 03:01:12 2026 GMT
Subject: CN=3da1c9dd8226858db50664b73288ff8fedf96230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c3:af:76:25:56:e9:e7:d8:1b:bf:60:a8:40:
d5:88:1f:84:51:31:0f:c4:e2:85:85:9b:c3:9e:64:
17:20:b7:e7:19:2b:45:cb:0a:32:b7:15:67:57:09:
92:e6:a3:c3:c0:52:54:34:71:ae:f0:15:2c:c6:b2:
1b:15:21:c7:25:10:28:c8:f1:91:0e:3f:4c:9c:f6:
c0:c7:7b:15:92:cb:5e:43:eb:7f:3b:bd:0a:c6:2e:
b6:29:9c:cd:c7:db:9a:5b:e0:50:bc:ea:2a:ed:79:
f4:3f:96:be:97:2e:3d:5e:09:b3:65:7a:c4:48:6f:
26:0a:d0:ba:74:ab:02:0d:d6:f9:b7:90:42:45:f7:
14:4f:15:57:6a:95:8a:95:73:1f:0f:2e:8d:d4:d4:
13:e5:62:69:58:ba:9a:11:bb:c8:0d:d6:aa:c1:07:
89:93:dc:92:92:5e:b9:9d:63:c7:22:b0:a6:73:b9:
fe:94:a6:78:71:29:50:fa:40:98:33:11:29:8a:6b:
84:64:88:ea:ec:c7:62:39:93:7a:f1:1a:f1:7b:bf:
46:80:41:22:51:84:ec:82:9b:b4:9c:ac:68:45:43:
35:d4:a5:d2:99:6b:1f:43:1f:1b:12:0e:80:d2:69:
0c:7d:1c:a8:e4:15:9a:71:c0:71:1e:86:78:7a:c1:
ad:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A1:C9:DD:82:26:85:8D:B5:06:64:B7:32:88:FF:8F:ED:F9:62:30
X509v3 Authority Key Identifier:
keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:4e:9a:e6:64:dc:c8:61:3e:e9:76:a0:1a:d1:72:0a:2d:05:
4d:8c:15:dc:4f:7e:70:3f:23:16:70:94:ad:78:25:42:ca:df:
b5:7f:aa:cf:65:27:70:8c:f9:4c:d9:bb:ba:77:5f:5d:df:cb:
65:f8:0e:2a:fd:5c:ba:53:22:b4:d2:a0:50:25:5d:fb:f6:85:
86:a2:89:4a:20:29:de:5a:a4:23:8c:52:6b:42:7e:3f:7e:b7:
87:d8:a7:c1:df:0c:c0:4d:f3:7d:5d:25:0a:f5:85:44:1d:40:
43:40:b0:a7:1c:bd:2c:0b:ce:b8:ff:c4:e5:c4:78:d5:52:52:
7e:59:1a:aa:5d:a3:50:e3:4a:43:af:d5:5c:db:51:63:9f:04:
3a:f3:54:57:56:c8:d9:9c:f4:fa:ad:da:f7:54:34:4b:8a:49:
b8:a3:00:60:62:26:5f:0b:67:b7:d5:f4:17:a1:c8:f6:29:4d:
45:ae:41:79:9e:59:76:e1:03:62:b9:2a:6d:43:a1:05:42:cb:
b6:03:0e:68:3f:c9:bb:a2:63:d1:08:23:04:2e:ae:1a:51:ae:
9b:ef:67:03:df:79:a5:46:ed:b3:09:a7:aa:62:19:75:f1:46:
b6:b7:b7:7c:2e:5a:09:cf:30:d4:7d:1b:4f:77:e4:6b:55:6d:
3e:b5:65:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:17:15 2026 by rpki-client