Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json)
Hash identifier: 1jfsQrx1Riz8D3wO98RvHC2lUw/lJhc/XVneXl31pyU=
Subject key identifier: F0:DF:41:C1:4D:17:C0:5B:46:97:9A:61:00:C0:10:06:6E:89:4E:1D
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 019D265FCBE100C9E97F01B26E069EFECF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 19:01:45 +0000
Manifest this update: Wed 25 Mar 2026 19:01:45 +0000
Manifest next update: Thu 26 Mar 2026 19:01:45 +0000
Files and hashes: 1: GUI2iyS6cXbhnTIBOOmswbrKBR4.roa (hash: BhZ7NYLsNrafw61nMLVYDa+lwZAq7nN5BNqq/DyfVgw=)
2: Ry4GJllYI5DHvB5rPooA3w1oNc0.roa (hash: PYYgRq8HSZWN2KMVkiANk0IFKEKURPi6wZnpn5G5E7U=)
3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: vbhfx9oA5wuNdOgmIxz+1ExELreyJUugfkLpx7q4VZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:cb:e1:00:c9:e9:7f:01:b2:6e:06:9e:fe:cf:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Mar 25 19:01:45 2026 GMT
Not After : Mar 26 19:01:45 2026 GMT
Subject: CN=f0df41c14d17c05b46979a6100c010066e894e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:e9:04:d4:1a:4c:5c:36:5b:63:06:b7:9b:
a1:40:6b:e1:c9:46:83:06:08:8b:5e:32:85:96:67:
f6:83:07:eb:21:ec:be:59:f2:2b:ed:af:22:8f:05:
c8:da:98:ff:77:b5:7b:40:3f:68:55:1b:64:83:e8:
68:11:5a:27:d9:f8:08:7d:5a:2a:ec:4b:e3:f0:c9:
d2:42:7f:2d:35:4a:8a:55:08:6c:de:ec:66:5f:9a:
52:04:46:ec:38:dc:3e:c1:db:55:8d:50:75:8c:96:
99:8c:0a:38:12:6b:05:dc:bd:0d:06:a4:a5:0c:4b:
89:0f:65:55:54:10:2b:fe:f4:e9:9e:fd:da:66:87:
ef:2b:11:62:5c:8e:39:df:db:8d:2e:44:bf:a9:ac:
49:8f:7a:9d:60:da:85:2a:11:fc:b6:59:99:a9:1f:
b5:e2:87:b1:cc:56:fa:ff:3a:ec:04:5d:11:9f:31:
6d:d4:c4:d9:82:e2:e2:a9:70:29:2a:3e:54:66:a5:
36:9d:51:d1:cd:66:42:73:2d:81:f6:1c:16:fc:1d:
79:3b:61:0b:65:66:91:68:ed:aa:e5:4a:ee:69:52:
d1:3d:e1:88:07:9f:e2:fc:2e:65:78:7b:7b:a2:1b:
7d:8f:27:7e:7c:b6:93:9c:f4:6d:b5:d8:74:4a:fa:
4b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DF:41:C1:4D:17:C0:5B:46:97:9A:61:00:C0:10:06:6E:89:4E:1D
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ef:df:3d:27:b1:df:74:d8:a9:ac:dc:39:44:d1:f1:40:2e:
2d:dc:15:eb:3a:58:65:a8:73:80:c8:59:2d:15:00:d5:7e:06:
83:b7:2f:bb:d5:91:00:99:47:32:9c:e4:8a:6b:9e:cb:1b:20:
3f:76:84:b3:2b:7c:8d:b2:93:97:4a:45:3e:50:7e:b2:b1:6a:
d2:57:df:77:3d:fa:28:a6:00:95:77:70:e3:d3:04:09:da:b8:
25:ea:73:72:10:b3:3a:77:df:89:4d:a7:4e:46:cd:39:c3:13:
16:45:bb:83:02:33:c2:17:22:60:dd:dd:a4:af:74:cc:93:38:
95:b4:86:2f:22:2b:02:74:86:1a:70:0d:e3:f1:c8:ad:bd:df:
cc:f0:d9:73:91:9f:dd:ef:0d:3f:eb:33:c8:41:c8:63:07:ef:
31:f8:14:b7:73:d9:59:e1:93:03:be:f4:81:10:6a:40:e4:f6:
80:1b:aa:7c:cf:f1:ab:27:4d:dc:53:3e:c6:63:3f:10:30:6b:
db:c5:eb:fd:7a:20:6d:34:f6:ae:7d:47:83:ea:d3:c8:6c:2b:
5f:f5:a2:0f:55:f2:cf:bc:17:64:8b:c7:ec:cc:b1:e4:7e:a1:
59:d1:66:66:5e:a5:f8:aa:d9:71:a5:76:41:89:52:8e:92:df:
20:88:be:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:17 2026 by rpki-client