Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: 1pM9iA1UIdfo3fU+LKmUwofguDHoMoh+6M3xSVy3sMg=
Subject key identifier: B4:BF:49:9B:2C:A8:59:E1:1B:6E:1B:C7:F6:BD:AA:4D:F2:C3:07:90
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 019D28163BE7EE0598588508D06B5D4D11D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 04BF
Signing time: Thu 26 Mar 2026 03:00:38 +0000
Manifest this update: Thu 26 Mar 2026 03:00:38 +0000
Manifest next update: Fri 27 Mar 2026 03:00:38 +0000
Files and hashes: 1: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: 33kixkWD/xFW+XBrxh0Si6V2e5Pe6UM+INAU5I29YLA=)
2: gdwYYL9CsGDFTkAuG8S2liyK-r0.roa (hash: S6etNmQi4pEy1ZdQxxbNiQYv530X1B2bmlUtb5h29UQ=)
3: rM0uTZNoLmKtjZkk_tSk7q-w9BI.roa (hash: dwD/35OeBK2EzCg4af00B6g6AoSl3HcpyQOtzC0IokY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:3b:e7:ee:05:98:58:85:08:d0:6b:5d:4d:11:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Mar 26 03:00:38 2026 GMT
Not After : Mar 27 03:00:38 2026 GMT
Subject: CN=b4bf499b2ca859e11b6e1bc7f6bdaa4df2c30790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:34:b0:8e:da:1e:05:f0:a8:3c:35:35:c2:
ca:56:29:aa:55:f7:c1:73:2e:57:dd:06:10:c7:37:
70:c5:55:d2:1d:d2:b6:bf:90:25:bb:c4:6a:25:66:
60:ac:29:10:8c:ac:0b:27:85:b1:67:42:83:09:a4:
3a:b5:7a:81:f4:6b:6d:3d:7f:30:db:1b:bf:b9:0a:
49:a7:9d:d3:01:99:10:e0:ce:3e:46:43:59:e3:4a:
19:b7:0a:80:99:c2:34:bd:6d:bd:92:c3:c0:d2:55:
2a:90:d0:8f:21:4e:95:b1:ef:45:d4:07:1e:95:0e:
3b:6e:fd:fa:b9:a2:f0:c6:7e:22:a8:dd:22:ee:ff:
3c:a3:a0:36:8d:0a:dd:39:c5:c5:ce:b5:13:6d:ff:
05:c2:59:65:e4:71:9a:06:77:f5:da:d8:b1:bf:6f:
1b:26:50:29:35:90:da:b1:ba:c0:c5:ee:ff:55:28:
e2:af:70:af:13:3c:43:35:20:b1:fa:90:91:2b:93:
87:df:59:0f:50:dc:aa:9f:cb:4e:50:8b:45:cf:49:
8d:ca:40:ce:0e:6e:29:e5:c4:84:9d:80:68:a6:46:
c0:f1:0e:76:17:02:12:b9:87:4d:11:0c:7f:7f:b5:
22:1c:76:0a:e1:bb:20:f5:16:47:39:35:cf:7c:a2:
41:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:BF:49:9B:2C:A8:59:E1:1B:6E:1B:C7:F6:BD:AA:4D:F2:C3:07:90
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e2:12:f9:62:1c:31:e0:e6:d5:1f:d2:c4:72:a6:d0:3a:9b:
14:7c:8a:80:88:f3:78:06:a1:09:6c:74:c6:09:53:80:fd:66:
4f:a0:40:5c:92:07:d4:06:3b:a7:07:7d:59:4f:62:45:6b:53:
e8:55:f7:96:00:0d:11:7f:e3:af:c4:f7:bc:0d:77:28:83:12:
36:93:73:f5:57:29:6c:36:f6:8d:04:ec:b0:41:f1:1b:a4:f5:
60:45:45:d7:92:d6:ad:97:34:1b:71:5e:01:c3:5c:c6:eb:63:
a6:fa:72:e2:8f:6a:67:1b:01:a6:45:90:90:38:31:00:bf:14:
9e:06:ce:08:e0:24:39:c2:03:99:39:75:25:31:1f:b8:83:cd:
d7:b0:e0:e1:ea:47:eb:c1:39:84:49:1f:c0:9d:50:71:e6:38:
a0:7a:83:8a:c0:74:7a:b6:22:4d:32:e6:1e:e2:81:94:af:b3:
b6:cb:2d:93:8d:01:ae:66:80:3e:0c:42:d5:a4:7f:f2:d8:6a:
63:cd:e5:b4:d1:b5:f5:fa:fe:25:35:3a:7e:7f:06:9e:e4:fb:
af:ed:7c:51:52:4f:44:35:df:b1:12:6b:4e:65:d8:57:12:b3:
b3:7e:2c:76:a2:5d:4b:fd:9c:ea:5b:98:c0:9f:f3:f9:7a:8a:
f9:33:21:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:46 2026 by rpki-client