Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
File: gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft (raw, json)
Hash identifier: Qp7DV/18Gp5Wz/Wwp2PoaVn5mU5vCkqD4LbVEub8/GI=
Subject key identifier: 90:70:06:CC:C5:6B:07:57:22:2A:31:64:E3:E5:28:80:F9:B9:5A:E9
Authority key identifier: 83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
Certificate issuer: /CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Certificate serial: 019D27A9126476A8B5797F501DAB814D3CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
Manifest number: 058D
Signing time: Thu 26 Mar 2026 01:01:24 +0000
Manifest this update: Thu 26 Mar 2026 01:01:24 +0000
Manifest next update: Fri 27 Mar 2026 01:01:24 +0000
Files and hashes: 1: fZAzCiUywNplLCNiRhDfKrlfG_w.roa (hash: 3BGp9D7RFRPhwzgCFhMEEth9zMM9VYj+/fIdqEAt+6g=)
2: gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl (hash: Vd10QGyZej6bpOCutB5P6QpmpRBgBDwg5MD2f7P5/nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:12:64:76:a8:b5:79:7f:50:1d:ab:81:4d:3c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e535db7e1b715ae34e9f1ddbd843692f6fefa
Validity
Not Before: Mar 26 01:01:24 2026 GMT
Not After : Mar 27 01:01:24 2026 GMT
Subject: CN=907006ccc56b0757222a3164e3e52880f9b95ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:36:95:08:6b:14:0b:f6:44:8f:27:54:17:
94:85:2d:f2:cf:ad:0e:70:ff:7b:d1:e9:f9:42:60:
db:d8:1d:fd:e3:38:75:3d:40:14:5e:6b:7f:92:19:
a0:5f:a6:49:60:ad:37:55:31:da:55:7c:b4:90:14:
62:3b:53:bd:7f:0e:13:f8:bb:13:e8:46:d1:54:9f:
0a:f9:4f:ea:0e:c2:7a:38:5e:0d:90:f9:55:ba:c0:
a1:ac:60:b9:bc:75:6d:e8:70:95:58:8f:19:f0:0f:
f0:96:6a:a4:0b:b0:86:78:be:e0:92:3c:67:65:34:
50:4f:6f:2f:7c:62:5c:fd:ed:ef:8c:b5:f5:33:b3:
03:a3:08:d9:48:33:ba:0f:44:43:d5:f8:2e:64:d1:
ad:35:07:d2:0d:9c:7f:48:a3:65:5f:66:f6:3c:f6:
6f:b4:fe:50:b6:79:90:a5:9f:07:85:19:92:d7:72:
64:2d:42:e7:0d:7f:53:1c:9a:e3:f5:47:06:4f:70:
5a:c4:52:12:5e:ff:05:0b:4a:b9:05:ae:b7:fd:bb:
57:4a:94:6c:07:85:93:4b:23:5c:eb:2e:d7:ef:19:
b8:0a:3a:c3:cb:eb:ff:9c:76:1d:cb:bc:3e:f2:7a:
4c:c3:7d:9a:3c:a4:7f:ce:ca:a8:20:0f:6f:23:c4:
7e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:70:06:CC:C5:6B:07:57:22:2A:31:64:E3:E5:28:80:F9:B9:5A:E9
X509v3 Authority Key Identifier:
keyid:83:3E:53:5D:B7:E1:B7:15:AE:34:E9:F1:DD:BD:84:36:92:F6:FE:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz5TXbfhtxWuNOnx3b2ENpL2_vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6bdac7-62d4-4033-b9ad-31034c356fa3/1/gz5TXbfhtxWuNOnx3b2ENpL2_vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:1a:20:14:34:72:9d:ca:db:ef:42:63:dd:35:21:b7:38:5b:
39:a6:1a:64:72:b9:e2:ec:27:bf:af:5b:af:f8:f0:98:87:66:
aa:33:e8:bf:8e:f1:67:74:1a:e6:3b:7c:55:5b:8b:5b:2b:a7:
26:b0:45:4f:e2:bf:73:77:cc:ff:a9:60:7d:ca:18:44:8e:be:
4d:80:4a:b3:6e:77:61:98:20:7c:0e:e2:22:ab:a7:34:47:d7:
0b:b3:dd:82:df:0d:11:b9:8a:84:8f:22:5e:62:64:74:df:62:
45:58:af:78:a1:9a:ef:ef:2c:af:e3:1e:54:56:8b:55:cc:68:
21:94:84:c1:e0:e0:bb:74:a8:6f:c7:f7:8a:9b:b5:30:16:df:
99:a1:d0:36:6d:56:6f:d4:fc:71:ce:a8:4b:17:15:26:5b:7c:
2f:b2:a1:e3:44:e3:42:1a:5b:e0:c9:ce:dd:cb:ad:4e:b1:41:
ff:9b:f8:80:e0:80:ad:fb:86:d5:31:14:7e:6a:a9:cc:8a:e5:
40:10:47:7b:80:b0:1a:a1:a4:7c:77:ec:f1:53:fc:f6:87:4f:
8a:fa:27:51:11:6e:2e:49:24:88:d1:bb:6e:20:18:5e:b5:66:
86:f1:b2:44:39:09:43:26:76:7f:61:e8:f9:be:70:54:2e:07:
df:56:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:35:07 2026 by rpki-client