Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: 3LT4ERTENIM9kykJhkYdZ9Z7Gx1Vy8WjyQmnvCx2F4E=
Subject key identifier: D8:A4:8E:33:54:33:FE:FA:4C:B4:4F:47:8A:54:DC:B7:29:01:55:1F
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 019F92ED319AB3A75109019A37177B6FAA2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 07:00:46 +0000
Manifest this update: Fri 24 Jul 2026 07:00:46 +0000
Manifest next update: Sat 25 Jul 2026 07:00:46 +0000
Files and hashes: 1: Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa (hash: 4BYNISLW+6a1Rm7fYvPimlxLy4jJM2Fwgwu5hoZNF4o=)
2: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: WKndoJbtVLE7s7Jni0QzmN0QTAB2ZcLzmNCo0jRdWwU=)
3: JlkD4EYy4fdjW9cybX6Rmv1PhMI.roa (hash: pUW2Tt4TUNvQKWWScIb3hItHUaVoXgsVYQO1UFGRry8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:31:9a:b3:a7:51:09:01:9a:37:17:7b:6f:aa:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Jul 24 07:00:46 2026 GMT
Not After : Jul 25 07:00:46 2026 GMT
Subject: CN=d8a48e335433fefa4cb44f478a54dcb72901551f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:48:8f:19:f3:b2:a3:0f:c7:16:0d:ce:91:
44:44:e5:93:84:b8:97:92:45:84:52:dd:33:2c:4d:
f5:65:87:e2:7d:86:01:26:2b:b9:9c:9c:62:71:17:
47:1a:84:44:7d:2d:2f:fd:a3:87:f8:ac:85:c3:45:
31:29:4d:4d:88:65:cc:87:21:da:62:06:45:51:e2:
65:06:f4:28:ee:16:4a:ba:1e:8e:ad:e9:b7:2e:9c:
e7:84:95:30:ab:63:a8:b6:8b:29:b1:19:f0:15:d2:
47:e2:aa:1d:4a:f6:67:81:de:1a:c7:fd:07:d0:ce:
99:99:48:07:0a:46:61:e5:76:b2:d1:42:f5:59:d2:
ad:69:ef:20:f7:c1:84:06:0c:c6:94:43:ab:2b:6a:
73:27:95:75:7e:6e:67:da:17:e3:cb:37:eb:e1:1f:
fb:de:77:50:9e:a5:f1:a3:7e:15:f0:d8:f0:e9:02:
1d:e5:cc:2c:9b:79:86:60:13:52:32:b0:22:7c:a5:
fa:dd:5c:e5:15:d1:79:1c:3b:cd:e1:b6:17:1c:4c:
46:5e:28:76:13:23:d2:1b:e4:1a:b5:5d:04:7c:17:
89:c6:72:10:b7:55:89:e3:4b:ce:3c:b2:7c:d9:e6:
e9:ae:9d:f3:55:9f:c1:e5:22:3c:21:70:9c:2d:e9:
0c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A4:8E:33:54:33:FE:FA:4C:B4:4F:47:8A:54:DC:B7:29:01:55:1F
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:19:27:81:e0:f8:e0:b2:55:f5:e0:65:32:f2:50:6c:8d:32:
a5:c2:2d:41:a1:76:0c:ce:f5:94:36:01:86:62:fe:03:9e:45:
0a:f3:ad:c1:46:d5:1e:f5:4a:fb:68:c2:ab:01:19:52:7c:5f:
fb:36:bd:a1:fe:c2:c1:b2:a2:a9:9a:c7:6a:4a:a1:a6:c9:2e:
3a:e8:b6:e9:0b:7e:36:d4:20:f5:cd:c8:6f:19:f4:ee:e5:cd:
0d:78:4d:30:20:38:89:34:18:57:5f:46:ab:78:0f:d7:4d:39:
2a:46:e6:4b:f5:b2:15:1e:bf:f1:fa:8b:e8:a0:49:05:d4:29:
d5:f0:3b:ea:52:5a:59:61:2e:a0:33:56:98:e2:cc:d5:ab:57:
ba:91:b5:0d:b5:9e:2e:90:68:90:36:78:a2:fd:c0:8d:24:b5:
bb:ed:84:6d:8d:44:70:b3:39:a0:13:4f:d5:1d:28:2e:dc:7a:
b9:27:34:1f:16:8f:ab:98:48:09:b5:84:50:61:e5:89:d1:a5:
30:5e:b0:11:9b:9d:d3:9e:9f:a0:fe:db:7f:16:c0:c7:a7:b2:
98:3d:90:8d:da:2e:ea:37:fe:c0:a1:eb:f1:d2:28:49:e0:d9:
fb:02:ac:58:97:a3:00:43:7d:a9:2d:c9:5a:8d:ad:06:95:6a:
e8:c9:1b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:31:44 2026 by rpki-client