Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
File: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft (raw, json)
Hash identifier: LAE0XHombvBSS+WBx8EL6T/kNiMo265I9sdGj+AUqHI=
Subject key identifier: D9:92:02:08:44:B6:31:C1:88:61:B8:C2:E7:3B:27:5B:13:95:5D:E1
Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
Certificate issuer: /CN=199b3f908ce6e1764617731b624539421d13c94d
Certificate serial: 019E1D902F39BC9E76B596DB0DA4262E919C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
Manifest number: 01A8
Signing time: Tue 12 May 2026 19:00:49 +0000
Manifest this update: Tue 12 May 2026 19:00:49 +0000
Manifest next update: Wed 13 May 2026 19:00:49 +0000
Files and hashes: 1: 9HbfhKUnZ7haZ03pPm7cMB8XKU8.roa (hash: ImuG4if+Hc6PIgHVLJaf1cQyzFqgiLjKr6z/klhg4eU=)
2: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl (hash: pMAzB5PxeottfD6WpNRkU1+qQBYECOflT5loseeK7tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:2f:39:bc:9e:76:b5:96:db:0d:a4:26:2e:91:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d
Validity
Not Before: May 12 19:00:49 2026 GMT
Not After : May 13 19:00:49 2026 GMT
Subject: CN=d992020844b631c18861b8c2e73b275b13955de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:48:95:2c:47:64:c9:f8:79:6a:4f:d3:4a:48:
2e:03:ac:b7:9d:28:6c:04:73:fa:fd:27:09:a7:11:
1b:e0:ee:f3:9c:3a:44:bc:42:31:f0:e0:b3:97:bd:
51:b0:e9:ac:d5:5f:f6:65:40:6f:94:dd:74:3b:15:
22:27:e6:7e:80:82:77:1a:80:a4:39:da:05:12:5e:
44:67:6f:f4:17:7e:c4:98:e7:ff:fd:7f:5d:29:0c:
b2:2b:7a:96:11:92:ba:f2:49:10:f1:59:07:d9:35:
82:ad:1e:3c:8f:a5:ff:f4:c1:ad:df:57:de:1f:8c:
f7:cb:ee:d3:f7:4a:63:03:1f:d1:64:22:d4:c4:db:
be:c3:e1:3b:d5:73:97:ca:88:39:44:f9:80:a7:e8:
e2:f6:21:5c:30:10:d7:85:13:5e:c8:50:dd:36:cc:
30:33:5f:90:34:bc:ce:96:b2:f9:4e:27:49:5e:fa:
f8:cc:9a:f9:52:1b:93:e5:bd:e1:05:da:0a:4e:0c:
d8:45:90:b0:1f:dc:f0:28:b6:d3:39:f8:88:1d:d2:
92:58:6d:50:2e:54:15:d1:c1:b8:5e:bb:04:c1:db:
0d:5a:2d:16:03:49:16:a5:bc:00:46:60:89:3a:f2:
86:d4:36:aa:7c:44:60:3c:7c:12:08:27:23:ae:c2:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:92:02:08:44:B6:31:C1:88:61:B8:C2:E7:3B:27:5B:13:95:5D:E1
X509v3 Authority Key Identifier:
keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b8:9a:38:20:cf:e8:3e:cf:9d:5f:f3:66:9c:f7:f4:99:da:
19:0b:06:63:bf:b3:b0:c2:63:6a:66:20:5a:2b:0f:17:3c:f5:
02:fe:c8:21:67:90:64:59:8b:f7:1b:56:77:95:ca:07:5e:dc:
58:b4:fd:13:6f:b3:e7:f9:be:8f:c0:e1:fd:48:24:dd:b5:ff:
e5:a6:98:f5:38:15:12:7d:cf:44:fd:67:33:74:96:e7:58:4a:
89:da:fe:bf:c1:4a:c4:8a:c5:cd:fd:b7:26:31:84:c1:96:f7:
2b:b1:5b:33:b1:8c:a9:d4:70:08:18:04:d0:e3:10:1c:58:ba:
75:10:8a:a7:22:a4:77:d1:34:db:ab:33:1d:ff:f1:8b:df:58:
52:08:82:a0:9f:18:c9:c7:ee:12:38:f5:3d:91:01:3f:aa:12:
29:6b:3e:21:7d:cb:78:f6:89:63:66:d5:58:ec:a4:8d:81:ef:
d3:c3:94:52:5a:93:15:7b:5e:61:89:76:df:a1:0f:3b:8a:78:
1c:c6:50:c8:f6:a5:8a:2c:cf:bd:32:15:69:91:eb:a4:11:58:
4a:93:80:d4:6d:c4:22:5b:de:ff:96:25:63:15:db:49:a2:c8:
70:c9:c3:d0:33:3b:bd:1f:49:ff:8e:4b:27:2e:4c:61:64:25:
04:ea:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:29:32 2026 by rpki-client