Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: B2ot6FCnrx3JbkBC/AjW9pUps8/JmNtFo9qyZ/9+l50=
Subject key identifier: 43:D6:82:21:FF:A3:04:17:2F:FC:0E:42:B3:A0:CC:C6:60:99:1D:B1
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 019E1F10879C4C91A890DCB1C8D9C6F58117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 053F
Signing time: Wed 13 May 2026 02:00:37 +0000
Manifest this update: Wed 13 May 2026 02:00:37 +0000
Manifest next update: Thu 14 May 2026 02:00:37 +0000
Files and hashes: 1: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: j0voBrIkW+HBlyG4RfGlwOvLXNIF9/apo1MxCzLAPgY=)
2: WKAggwW4-2Bg4MeY0gX0Cx4LA4U.roa (hash: /G/TygfNsNBDAG6vbAPSrcTJMAI8N6hE5YMA8pkrvnA=)
3: rM0uTZNoLmKtjZkk_tSk7q-w9BI.roa (hash: dwD/35OeBK2EzCg4af00B6g6AoSl3HcpyQOtzC0IokY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:87:9c:4c:91:a8:90:dc:b1:c8:d9:c6:f5:81:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: May 13 02:00:37 2026 GMT
Not After : May 14 02:00:37 2026 GMT
Subject: CN=43d68221ffa304172ffc0e42b3a0ccc660991db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:12:03:10:be:b6:9a:a3:9b:a2:e9:b1:0b:
8b:1e:30:eb:f9:3f:30:83:f4:4d:99:23:88:12:8f:
fa:ff:3e:ec:cc:ae:31:fd:8b:45:25:3b:51:f3:df:
05:a4:b1:15:a5:00:ce:5c:93:79:1e:d3:9a:c6:a5:
da:81:a3:23:ab:e5:2f:fa:34:c8:8f:2f:c0:e2:52:
66:58:22:47:0a:cb:8a:7d:b1:7b:5b:80:fc:e9:d1:
8a:b1:62:c3:c4:48:fa:fd:5c:fd:6c:5e:07:0d:19:
ab:67:4a:4a:7f:a5:2a:36:4b:d5:4e:06:cf:fc:40:
d0:19:01:21:1b:a7:25:fb:71:cb:03:8f:e2:07:0b:
d6:e5:d6:f0:75:cf:05:5f:96:81:4c:77:2c:14:40:
39:76:2c:1e:43:35:0b:23:fc:04:c7:a3:33:e1:1c:
30:94:7d:c7:ae:20:3c:0b:d8:98:0d:26:2f:9f:dc:
1b:a5:65:bd:fa:8e:76:09:e0:47:0c:25:06:00:59:
98:d9:aa:18:fa:51:e6:84:24:77:84:a6:03:d5:c9:
b0:b7:af:f2:58:db:eb:68:f0:d5:02:ca:b2:01:43:
07:99:b4:0d:32:68:19:7f:f6:cb:48:97:65:c0:ee:
9e:78:9c:32:ee:fb:59:f3:c9:6f:22:a4:2a:62:36:
23:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D6:82:21:FF:A3:04:17:2F:FC:0E:42:B3:A0:CC:C6:60:99:1D:B1
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b4:1f:e1:d4:9b:37:b8:11:e0:fd:5d:fc:34:51:ef:9f:d5:
c7:fe:a5:80:1f:75:3f:fd:0f:85:8f:72:73:8e:27:a5:51:c6:
5a:a4:9e:87:1a:28:36:28:e8:d0:d6:4a:9c:49:57:f9:46:89:
4f:7b:bd:a6:92:38:0f:b6:c3:02:ea:44:82:15:db:43:3e:7e:
bd:61:20:6a:0b:cf:27:5a:7e:29:1a:84:1d:dd:b2:03:9b:d1:
e5:10:cd:49:79:35:3f:8b:6b:9f:a2:f3:b6:07:8f:3d:18:56:
84:52:f7:f3:31:7c:f9:c6:94:87:dd:43:7c:b5:55:2b:f0:86:
7a:d2:c7:b4:d7:3c:88:10:21:b1:7a:48:20:d5:38:23:98:7c:
28:e9:3a:b8:4f:db:37:4d:58:a5:fd:01:66:7a:fd:44:f3:8f:
e6:9d:3d:9b:c2:5e:4e:55:4a:5d:df:98:8a:50:c7:75:77:d1:
aa:63:d3:a5:83:91:4f:65:9a:a6:d4:8b:b8:f9:9f:e8:7e:19:
b6:b4:e4:81:eb:12:82:2b:00:db:e4:b7:47:25:a2:fa:df:58:
4b:dc:8f:7e:36:29:bc:13:d3:66:cf:0e:14:c0:3c:93:ee:f3:
d5:9f:03:e9:b4:0a:07:c7:27:11:10:c1:a1:0d:e2:15:b7:24:
85:18:d2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:59:47 2026 by rpki-client