Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: Cf+BdSWGZXb29waro/xfoxt41XlX/EkOhDluREZ8fLE=
Subject key identifier: FE:04:72:6C:F6:B2:0F:0B:8C:9F:2D:1B:E1:B7:21:3D:48:B6:6D:19
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 01A0F6448814026C18473615B2C0927F3D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 1A84
Signing time: Thu 01 Oct 2026 07:01:21 +0000
Manifest this update: Thu 01 Oct 2026 07:01:21 +0000
Manifest next update: Fri 02 Oct 2026 07:01:21 +0000
Files and hashes: 1: Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa (hash: 4BYNISLW+6a1Rm7fYvPimlxLy4jJM2Fwgwu5hoZNF4o=)
2: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: puwF5wregMunXwF6Al7GnzJ+T82G2YNsZeI9qt00zpI=)
3: JlkD4EYy4fdjW9cybX6Rmv1PhMI.roa (hash: pUW2Tt4TUNvQKWWScIb3hItHUaVoXgsVYQO1UFGRry8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:44:88:14:02:6c:18:47:36:15:b2:c0:92:7f:3d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Oct 1 07:01:21 2026 GMT
Not After : Oct 2 07:01:21 2026 GMT
Subject: CN=fe04726cf6b20f0b8c9f2d1be1b7213d48b66d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:33:ed:7a:22:c0:c6:ac:d4:dd:cd:f7:8d:47:
74:fd:ac:a3:c2:16:84:a8:5c:ea:16:ee:e7:39:38:
6e:07:a8:57:c2:db:3d:22:a0:1c:07:24:5d:8f:48:
4c:d7:82:6f:f3:1d:d5:c6:bb:a0:53:a7:5e:31:a6:
b3:49:2b:83:bb:f2:b3:72:88:fc:0f:52:85:fb:66:
25:d6:c5:39:81:ff:08:0d:3a:22:fe:6f:54:5a:28:
21:71:60:68:b0:c0:aa:8f:39:29:99:4e:5d:02:9b:
95:45:61:cd:1d:18:b5:8e:c9:6d:06:71:f2:b9:46:
d3:ef:89:d6:8d:5c:4a:20:fa:d9:bf:fb:83:0f:0b:
da:5e:04:d3:5f:71:f3:7d:da:0e:6f:e6:4d:8c:c1:
1b:dd:db:ba:db:a5:8a:1c:e3:6e:47:e1:70:78:75:
f0:7d:ab:86:1d:67:ff:ad:a8:d6:2d:40:5c:42:a4:
2d:0a:34:71:be:ad:bc:00:ca:d1:80:20:3e:c2:04:
1a:0a:99:8a:ec:6b:a1:43:48:f2:a3:bf:fb:00:53:
95:ec:00:54:15:fb:ce:53:54:18:9b:c1:ad:51:fb:
c8:6c:a5:6b:eb:e4:5f:87:a3:21:f7:cd:e0:2e:c6:
30:74:b9:fc:c3:76:7c:41:70:1e:02:9c:d5:fc:3d:
6f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:04:72:6C:F6:B2:0F:0B:8C:9F:2D:1B:E1:B7:21:3D:48:B6:6D:19
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:99:65:e7:60:07:51:6c:8d:65:00:0a:ed:f6:a1:93:2a:09:
73:84:d9:bc:cf:92:cc:1a:d6:1b:8d:59:92:98:78:b2:e5:c9:
51:af:2f:da:cd:51:b2:af:b8:86:0e:a2:c8:12:11:77:08:1f:
04:a3:04:56:9c:3d:c0:49:f3:71:4b:b6:f1:81:ec:ec:07:b8:
b4:52:56:e6:ce:1a:39:db:79:b8:e5:9a:c7:d7:16:02:6e:a0:
36:ed:75:1b:25:67:47:49:b4:3c:21:51:1d:86:f0:f4:f9:a6:
df:2b:60:71:f4:c0:37:e8:23:8c:b1:b3:27:3f:33:9f:5d:1b:
32:f5:42:05:6b:70:29:b2:97:e5:bf:aa:93:27:83:a0:be:c6:
cb:93:7c:c9:f9:f5:93:c5:b7:04:81:71:b8:03:b7:31:35:6b:
54:90:43:24:c0:0e:25:4d:75:62:43:44:cb:1a:62:d3:49:3a:
1b:12:b2:b0:c1:49:fb:5f:5c:41:76:5c:00:31:97:ca:4d:83:
6c:bb:cb:27:b6:a0:f1:ef:5b:b3:0d:e5:ad:60:5a:1d:18:f7:
63:c6:22:e6:1a:70:15:0d:f1:d6:92:1d:72:99:be:ba:0c:ae:
8a:fd:41:26:3a:81:ac:63:88:87:a8:80:83:af:d9:6e:bd:9b:
7c:f1:51:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 16:34:50 2026 by rpki-client