Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
File: GZdiXDlfuGf12AjVNZehHOfzxMs.mft (raw, json)
Hash identifier: 4woIGDd/O4kylHKGN/kFXBPaImkdmWICMMXU+II3WMw=
Subject key identifier: BD:1D:9C:41:35:39:D6:78:A4:50:E4:DE:BF:9F:F5:F0:EC:8C:98:7D
Authority key identifier: 19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
Certificate issuer: /CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Certificate serial: 01A120C079A5139B3420ED84A504EC940F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
Manifest number: 1A96
Signing time: Fri 09 Oct 2026 13:00:47 +0000
Manifest this update: Fri 09 Oct 2026 13:00:47 +0000
Manifest next update: Sat 10 Oct 2026 13:00:47 +0000
Files and hashes: 1: 9PJJMzY2oUycU8l8cSSelJBMcWc.roa (hash: oL+z5SaUyU8viR3KBSssNRDGEAldy3Dx3YEcED4SCvw=)
2: GZdiXDlfuGf12AjVNZehHOfzxMs.crl (hash: kee2omb8DiUEYId+k60ySjkGVzbuYjZhiqtihnffPJk=)
3: sPW3SqhXQFkvyEdUczVqCrMoZZM.roa (hash: PP/JgUlM59r8wR9R5R4QZCwoOfZzBFE/FyC4nN3GGNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:c0:79:a5:13:9b:34:20:ed:84:a5:04:ec:94:0f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1997625c395fb867f5d808d53597a11ce7f3c4cb
Validity
Not Before: Oct 9 13:00:47 2026 GMT
Not After : Oct 10 13:00:47 2026 GMT
Subject: CN=bd1d9c413539d678a450e4debf9ff5f0ec8c987d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:29:40:3b:4e:96:e9:21:f4:6f:29:3c:37:24:
1a:0b:3f:10:30:07:c7:80:0d:73:b4:e0:5f:e5:60:
66:47:a5:d4:8f:92:f4:e5:6c:68:80:8c:81:72:ac:
a2:f1:e3:30:ce:3f:85:3d:c8:d7:0d:50:6a:27:ff:
f4:7a:ad:4a:c4:15:ab:60:77:5c:d9:4e:2e:6c:5f:
1f:7b:62:91:23:d4:45:18:51:d0:04:6d:db:d6:3e:
f4:5a:42:7b:aa:2f:20:d1:3f:23:54:52:05:71:5e:
0d:10:a4:ab:91:66:8f:ba:fb:74:88:25:69:5d:6a:
d3:1b:91:1f:40:71:ee:7e:f9:03:fb:a2:5f:ec:ed:
fa:1f:e9:5f:a4:e6:45:52:37:f1:65:d0:68:53:b3:
1c:c5:55:dd:b2:9e:ac:3a:8a:3f:c7:8c:2b:08:89:
bc:0a:de:12:98:00:a7:b0:19:f1:9b:4f:75:e6:4d:
e7:5f:ed:40:70:ee:db:c3:4c:ab:1a:7f:77:35:17:
43:3f:d6:83:1c:21:0a:9a:2a:20:b6:2c:18:75:db:
59:85:8e:4f:36:cf:61:21:01:02:81:4e:4f:55:66:
b6:c0:8b:08:9d:50:bb:f2:7a:2c:e8:f0:53:d6:b7:
a6:7c:37:2d:48:d4:1c:d4:19:fa:20:e7:d5:c5:df:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:1D:9C:41:35:39:D6:78:A4:50:E4:DE:BF:9F:F5:F0:EC:8C:98:7D
X509v3 Authority Key Identifier:
keyid:19:97:62:5C:39:5F:B8:67:F5:D8:08:D5:35:97:A1:1C:E7:F3:C4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZdiXDlfuGf12AjVNZehHOfzxMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16e812-27c6-405d-a4c5-a7f7b9809007/1/GZdiXDlfuGf12AjVNZehHOfzxMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:70:b2:75:49:69:02:f3:30:ff:6e:2a:b8:6c:1c:36:d8:66:
0f:97:45:25:66:95:f0:20:b0:7a:3b:04:bd:16:3e:aa:e6:20:
f8:8b:81:d3:8d:eb:02:2e:6d:30:ca:52:ff:9e:9e:7b:f9:0d:
50:06:27:cd:0c:c8:9c:e8:b2:65:c8:be:b5:42:5d:30:a6:26:
f2:0d:14:d2:c9:ca:df:c1:3b:fc:15:c1:a4:e9:9f:58:24:4c:
ec:60:b2:71:31:2b:aa:c0:3f:f3:1f:94:91:cc:c5:be:8f:49:
dc:5d:63:28:c9:28:73:22:af:31:62:08:9d:55:d7:3e:43:9e:
a4:fc:45:21:fd:47:42:b9:45:01:19:f2:d2:fe:73:5b:12:31:
47:3e:fd:41:14:9d:90:78:f9:5a:cc:b9:0b:cb:2d:79:e5:f2:
61:2e:03:db:92:2f:3a:bd:bc:ef:57:24:f5:ed:dc:18:37:cb:
c9:ee:fc:d3:6a:0a:b1:9a:8d:ab:be:16:c7:0d:78:59:be:75:
c5:58:7f:0b:d0:1d:5c:b2:f8:a9:8e:9b:f5:f2:75:eb:01:72:
be:2b:cc:55:58:6c:88:2e:5c:85:15:c3:b3:b5:fc:62:b9:29:
de:a1:a2:f4:00:4c:be:e4:94:66:cf:8e:c6:ef:6b:04:39:85:
da:73:d6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:37:21 2026 by rpki-client