Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: Aj+LrAwYz5i/enbUsuywG6Ltf++F7rn3uSvOVXkbu6w=
Subject key identifier: E4:7E:F0:B4:05:24:AA:ED:4F:73:07:24:E7:08:A1:BD:61:17:68:87
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 019F93C95BFA0D174907E890C05A5BA7B874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 0600
Signing time: Fri 24 Jul 2026 11:01:14 +0000
Manifest this update: Fri 24 Jul 2026 11:01:14 +0000
Manifest next update: Sat 25 Jul 2026 11:01:14 +0000
Files and hashes: 1: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: KAJHDarS3gYFpJOR7O1xUtFMkMeCGg0By7aiwZtET8E=)
2: WKAggwW4-2Bg4MeY0gX0Cx4LA4U.roa (hash: /G/TygfNsNBDAG6vbAPSrcTJMAI8N6hE5YMA8pkrvnA=)
3: rM0uTZNoLmKtjZkk_tSk7q-w9BI.roa (hash: dwD/35OeBK2EzCg4af00B6g6AoSl3HcpyQOtzC0IokY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:5b:fa:0d:17:49:07:e8:90:c0:5a:5b:a7:b8:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Jul 24 11:01:14 2026 GMT
Not After : Jul 25 11:01:14 2026 GMT
Subject: CN=e47ef0b40524aaed4f730724e708a1bd61176887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:90:00:ac:87:60:8f:0f:a5:4b:09:66:d0:36:
a6:bd:7a:98:05:16:c7:72:5f:24:14:4c:39:e7:bc:
ad:2e:6e:8c:76:4a:4d:fe:fb:81:1d:a6:da:c3:df:
e6:13:8a:c2:7c:ee:3a:d5:de:87:ea:19:03:60:a5:
b7:e3:4e:9c:83:9f:fb:1a:0d:a8:73:c9:91:b0:c6:
b6:f8:8c:4d:74:6d:d6:3f:18:32:7a:72:ea:d6:ff:
aa:4b:4b:72:20:05:a2:15:2d:a1:a6:e2:2a:c6:09:
36:29:18:ff:28:5e:6b:3b:6a:0e:a3:b6:4b:c8:a7:
5d:d7:46:5d:37:a9:20:29:92:e1:60:a9:c4:d8:c2:
17:79:12:10:95:fb:ac:8f:a6:11:0a:e9:50:11:9d:
a1:d5:ee:c8:9e:21:84:fa:63:23:11:52:1a:6c:63:
11:41:c8:80:7a:6f:8d:eb:a6:d1:62:fe:e3:5c:50:
94:d6:8c:7a:3b:23:c1:8c:cd:0d:e4:d8:80:50:ee:
59:43:7a:5b:e0:4f:8e:21:c3:9c:dd:9f:84:f4:bd:
7f:38:9a:89:bb:53:55:3f:13:b4:9a:ae:8b:3c:84:
7d:fe:21:6e:bb:e2:8e:2e:db:fe:e1:48:1a:b5:de:
a5:32:75:81:16:8f:9c:7b:5c:46:11:bf:79:f7:c8:
c1:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7E:F0:B4:05:24:AA:ED:4F:73:07:24:E7:08:A1:BD:61:17:68:87
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d1:6d:27:c6:b8:b1:6c:71:e9:3a:39:de:8e:9b:2b:16:f0:
bc:eb:ef:4f:79:e2:e4:3e:a2:7f:8d:66:0d:bc:e4:40:53:f3:
24:60:7e:ce:78:2c:a1:a2:a0:17:0c:7d:c9:32:24:0f:5b:1f:
bd:e3:29:2a:4b:dd:7b:9a:17:58:30:9b:08:53:56:38:30:ce:
c5:f6:83:48:36:a7:a4:33:a7:97:e7:4a:23:71:7a:f9:ad:ba:
43:55:1e:9d:81:e6:10:6e:0a:fe:6a:23:85:18:58:c9:08:a8:
de:4f:1f:0c:73:ee:a3:3e:16:83:5a:f9:30:57:22:a6:33:af:
40:81:2d:df:a8:13:00:7e:b4:9b:d3:cc:0c:40:c0:a8:3e:6b:
30:2d:f1:4a:9e:93:22:5e:fe:ab:45:28:01:77:d8:d2:46:9d:
f3:63:40:9b:7f:e3:ed:2d:75:5c:38:e0:69:0a:43:3e:8c:e8:
38:f6:36:4f:0d:53:4f:6f:da:1b:bf:15:67:f0:83:80:53:17:
08:d5:8e:e4:c4:96:49:d5:f1:ed:41:fb:7b:08:e9:d8:29:66:
7b:56:dc:8a:85:ab:dc:af:0f:4e:01:2f:33:50:d0:6f:3c:82:
83:ec:c1:a1:42:27:85:54:bc:49:cb:15:08:01:d6:17:e3:5f:
9e:92:00:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:20 2026 by rpki-client