Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
File: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft (raw, json)
Hash identifier: HO3H3lANC+KwdOvCV5Lk7cQIRPi/EctwW6f40tJbumE=
Subject key identifier: 6D:75:81:82:41:F0:DC:74:9C:11:9D:2F:0B:35:7D:03:B4:D5:8A:26
Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
Certificate issuer: /CN=199b3f908ce6e1764617731b624539421d13c94d
Certificate serial: 019D284E4AA752BDF549248E92494ACCA2A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
Manifest number: 0129
Signing time: Thu 26 Mar 2026 04:01:52 +0000
Manifest this update: Thu 26 Mar 2026 04:01:52 +0000
Manifest next update: Fri 27 Mar 2026 04:01:52 +0000
Files and hashes: 1: 9HbfhKUnZ7haZ03pPm7cMB8XKU8.roa (hash: ImuG4if+Hc6PIgHVLJaf1cQyzFqgiLjKr6z/klhg4eU=)
2: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl (hash: NLGLl79YdwZM2FBbLtSY7F9W4oCozOo3C+XMWRU9CrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:4a:a7:52:bd:f5:49:24:8e:92:49:4a:cc:a2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d
Validity
Not Before: Mar 26 04:01:52 2026 GMT
Not After : Mar 27 04:01:52 2026 GMT
Subject: CN=6d75818241f0dc749c119d2f0b357d03b4d58a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:10:aa:b8:1a:40:ff:bd:9c:85:7e:a8:c3:
21:fe:3f:93:42:a6:d0:f0:51:e1:65:6a:fd:c2:90:
ac:e0:53:ae:99:61:00:e7:21:88:dd:b5:1b:f1:1d:
07:16:e7:34:15:60:42:90:34:9b:a2:02:a8:6b:33:
ce:38:f9:b7:65:e3:b2:b3:13:e3:a7:be:c6:ac:5d:
0b:f2:e1:73:8a:39:4e:c7:b3:dc:ac:b8:48:62:ed:
b8:2f:82:e4:20:ab:8d:24:61:86:ba:5d:28:e8:9d:
fe:ec:06:a1:ca:6d:9d:3d:d8:05:9a:3b:47:6a:e0:
9d:1a:66:a5:72:ec:8a:ce:52:f6:60:67:2e:59:08:
b8:a5:85:44:25:74:3f:df:76:7f:75:94:45:d5:e4:
dc:c6:bc:f0:fe:fa:14:a5:18:70:66:76:03:b4:1c:
1c:66:17:97:6d:54:aa:f2:4a:7d:40:84:c8:f7:8c:
a8:69:09:3b:2f:b8:74:33:e4:8d:0f:37:82:ea:4c:
0a:09:dc:42:3d:de:d9:81:aa:3c:77:b2:20:c8:55:
85:4d:8f:c4:fd:82:e8:33:e5:c9:ae:56:85:bc:5e:
e5:b0:cc:bb:9c:0a:70:60:fe:43:e1:8d:4a:03:55:
b8:8e:f4:f7:67:e5:cc:20:d3:ed:d3:14:09:5c:77:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:75:81:82:41:F0:DC:74:9C:11:9D:2F:0B:35:7D:03:B4:D5:8A:26
X509v3 Authority Key Identifier:
keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:8a:b8:4a:d0:18:94:7f:03:87:44:2b:cc:47:da:74:5a:4f:
14:2e:d8:c1:34:d2:15:56:0b:21:9d:19:8a:fe:92:39:11:4e:
ab:47:17:88:e9:b3:93:ed:61:64:c3:b7:85:09:f1:a9:fd:94:
38:65:8d:e2:a1:85:93:b8:87:3e:93:ff:59:65:d0:61:53:12:
75:16:3d:d9:c1:c2:b1:8a:93:56:e3:a6:cc:de:44:3b:23:db:
2c:7b:d9:13:2b:34:70:ef:95:1c:9f:5c:46:ca:28:bd:b2:d5:
dd:75:6d:a3:66:2a:7c:46:53:d8:b2:67:77:0b:5a:b4:b1:af:
2b:c5:c6:90:95:d7:1e:8d:4c:da:88:87:a3:6b:0d:99:31:94:
8f:19:d7:70:ef:d5:0b:92:fa:23:dc:95:d5:f0:11:e7:f2:bb:
1c:c6:e8:0a:a4:5e:d6:75:21:1f:0a:ec:69:2b:3b:e2:54:d7:
13:cd:4c:90:ef:fa:b2:0d:28:95:1e:7c:dd:83:eb:96:ac:67:
b0:55:bf:66:ca:37:9e:c3:ea:6d:2e:40:75:87:6c:42:9f:6a:
d6:1d:ab:8a:64:c8:88:37:61:98:91:b7:8e:34:5f:5b:a4:63:
a4:42:aa:2b:90:79:f3:91:b8:49:c5:5e:7a:c0:51:fe:83:36:
1e:19:7a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:03 2026 by rpki-client