Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
File: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft (raw, json)
Hash identifier: iEVnhQh+eByEwplyWCc0XJJzBuKXLJ7wv4ailbgnKqo=
Subject key identifier: F9:8C:E5:F2:F2:30:54:E6:EF:F2:98:C3:15:FD:3E:BD:9D:12:38:77
Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
Certificate issuer: /CN=199b3f908ce6e1764617731b624539421d13c94d
Certificate serial: 01A0D012A3C493E319CBF51AE83E978E48D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
Manifest number: 0312
Signing time: Wed 23 Sep 2026 21:01:17 +0000
Manifest this update: Wed 23 Sep 2026 21:01:17 +0000
Manifest next update: Thu 24 Sep 2026 21:01:17 +0000
Files and hashes: 1: 9HbfhKUnZ7haZ03pPm7cMB8XKU8.roa (hash: ImuG4if+Hc6PIgHVLJaf1cQyzFqgiLjKr6z/klhg4eU=)
2: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl (hash: +M1XdK3/orN9S9M7fy47Ep774jJJdJPesFeChVoe7h8=)
3: JJnkIZ86azq7jvZ91HGssrxnuZE.asa (hash: ftGt54l4QvaK8JWs6Qw0CopKYLzIITxVmjy16p978zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:a3:c4:93:e3:19:cb:f5:1a:e8:3e:97:8e:48:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d
Validity
Not Before: Sep 23 21:01:17 2026 GMT
Not After : Sep 24 21:01:17 2026 GMT
Subject: CN=f98ce5f2f23054e6eff298c315fd3ebd9d123877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ca:b7:db:5c:f9:60:d3:41:cf:db:e0:84:3e:
e2:8c:42:23:82:c5:28:84:15:1f:a8:4b:d6:d1:f3:
c8:09:c6:d1:45:69:e8:3f:d8:68:a2:33:d4:72:7f:
39:43:17:25:91:23:9c:fb:53:a7:5e:db:cc:e8:9c:
65:7c:c8:8a:a4:54:73:a0:fa:fb:c7:f0:f7:76:3f:
5a:cd:76:fc:6f:e0:d7:ec:45:55:a9:1d:c0:34:59:
dd:3f:95:f3:36:77:d2:c9:98:e5:02:14:e3:1a:13:
47:7a:f9:68:98:4e:0f:fc:cd:8e:8e:d0:5a:4c:4c:
bb:c1:be:3b:17:85:1d:8b:9a:e6:f7:eb:eb:84:0a:
4d:32:5c:59:ec:fc:e5:68:d0:92:fb:6e:7e:2d:61:
18:b4:0e:33:e7:f6:71:de:11:37:60:38:1e:bb:c2:
56:80:57:76:25:dc:45:a7:5e:24:2f:71:87:cf:72:
11:28:8c:ae:d9:f3:f7:99:08:3c:cf:9c:72:75:8e:
24:b0:5c:f6:75:ed:20:4f:9d:d0:2f:0d:d5:26:fb:
2d:69:f1:59:22:92:bb:d0:7a:78:9b:95:be:40:73:
57:7c:f8:e8:4c:27:77:7f:26:47:c4:58:fc:90:53:
9f:dd:1b:e6:8c:09:80:51:4e:a8:64:36:0f:c0:7e:
00:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8C:E5:F2:F2:30:54:E6:EF:F2:98:C3:15:FD:3E:BD:9D:12:38:77
X509v3 Authority Key Identifier:
keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:ae:5d:22:e3:62:80:70:4d:63:04:bb:58:bc:11:b7:b9:58:
99:18:f2:f7:f8:dc:5c:b8:0d:1c:ef:a3:37:c4:56:e6:d9:fb:
cc:00:bd:f4:dd:bc:a3:e3:ad:0c:67:75:6b:f4:ce:3d:e1:2a:
9d:c7:f9:c8:7b:3c:7c:76:98:7d:1c:f6:55:fe:ec:87:49:33:
d2:2f:98:d4:72:83:2d:30:ad:67:fa:95:1e:f2:94:e4:8f:bb:
42:70:4e:70:bb:46:1f:81:c6:a9:e7:02:c3:73:85:55:ec:9b:
07:06:63:19:63:7d:65:2f:41:13:ae:1c:57:88:4f:09:88:3e:
02:db:85:5b:cd:6a:d4:9c:27:f3:07:8b:9e:37:9f:15:1d:c4:
09:b9:ec:5a:e9:74:b5:35:0e:80:3d:e3:93:00:2e:72:38:76:
94:c6:17:ed:26:1d:84:aa:c5:d7:3e:77:7e:3e:95:a8:69:75:
e1:43:66:05:fa:50:bc:59:48:62:9c:db:a4:fd:38:85:75:d1:
ee:dd:1b:d2:97:df:d3:7f:ca:ce:09:26:3d:b4:3a:b9:08:37:
d5:12:e5:79:03:c7:d5:11:28:56:78:64:5f:f8:dc:f7:24:23:
85:01:c3:8d:1c:57:db:f1:6c:2d:31:a1:a6:ef:cf:b8:e2:fe:
58:a1:96:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:06:44 2026 by rpki-client