Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
File: GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft (raw, json)
Hash identifier: Fh4Feua5issi5k2d+F+3XSUMVJpNV5RKucyz4Qvf+fk=
Subject key identifier: 72:B4:F9:CB:B0:A9:50:58:7E:52:01:E3:5D:7E:95:76:CC:55:70:E1
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 019D28169F09F5DD696D7DA14741BAF19ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
Manifest number: 0946
Signing time: Thu 26 Mar 2026 03:01:04 +0000
Manifest this update: Thu 26 Mar 2026 03:01:04 +0000
Manifest next update: Fri 27 Mar 2026 03:01:04 +0000
Files and hashes: 1: GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl (hash: X2Rj6vuZtWE5TtnP5MRUwu4kLcNaSeNjCFrhs51NdhU=)
2: TsOc3ubRn91JAdgQ5aLAsWxpMqE.roa (hash: tbfSoTjpCJFJ4FddOzyLpgPxxaJetU74fFW5NiMSulQ=)
3: hN7XUM5Glyrot6zaK4scGwI3uPQ.roa (hash: NvKjw+roiIXWY/ok1kEl36Mdnj7pgwk3grKasFBC3AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9f:09:f5:dd:69:6d:7d:a1:47:41:ba:f1:9a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Mar 26 03:01:04 2026 GMT
Not After : Mar 27 03:01:04 2026 GMT
Subject: CN=72b4f9cbb0a950587e5201e35d7e9576cc5570e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:66:fa:fc:cf:32:0e:9b:bd:77:ef:29:2c:
11:c5:84:19:54:9d:b7:f7:37:c6:f8:02:5e:38:b3:
ef:68:bd:03:6f:9c:94:ab:f5:d1:33:62:b6:0b:2e:
28:ce:cc:b1:d6:4a:3f:7d:25:98:3a:93:af:5f:96:
0c:19:b6:3d:d4:eb:0b:9b:3b:a6:55:95:68:70:fd:
37:f2:0b:6a:55:1f:b5:73:56:8d:63:bf:db:42:04:
eb:a9:ec:ce:ec:b9:bc:09:82:73:fc:16:68:fa:12:
74:a7:d2:34:fd:d3:6d:16:f4:58:14:39:2a:61:93:
d3:62:42:45:e7:e0:aa:e5:49:76:61:41:ab:7c:c4:
21:bc:0d:5f:1f:c2:2f:98:21:77:dd:02:41:e0:0c:
34:3e:95:33:19:2d:dc:63:a0:14:3f:9f:fd:da:74:
5c:72:56:4f:c6:4d:58:1c:b5:71:88:4e:4a:5f:77:
ac:3b:9a:76:99:be:e3:6f:59:77:37:59:59:2a:d1:
61:34:a0:f5:3f:90:51:f5:59:ed:5a:1d:06:fd:55:
9c:48:3e:4e:41:46:2f:82:e3:e5:4f:73:a3:e9:82:
3f:84:db:ec:19:08:e4:30:09:f4:6d:23:ae:b9:6c:
86:89:d0:41:cd:86:7f:62:92:40:91:31:e3:9a:be:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B4:F9:CB:B0:A9:50:58:7E:52:01:E3:5D:7E:95:76:CC:55:70:E1
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f8:83:86:70:d2:fe:e8:9e:14:c9:88:5d:02:3f:d6:84:69:
0a:65:e9:4d:a2:23:a6:87:5f:7a:eb:e0:7d:69:43:cd:74:e2:
f6:ea:a7:10:33:13:12:3c:42:97:2e:2c:4f:3e:de:4c:8b:6c:
15:46:74:33:ca:fe:e7:cb:0f:4d:d2:df:36:d1:c1:bb:6f:99:
bf:47:6e:66:20:a6:9a:03:09:a9:6d:74:04:8c:c4:e8:59:d6:
07:5c:4a:85:54:6a:f6:c8:ac:de:a2:b3:e4:1c:25:18:64:61:
ef:6e:6b:87:f0:cf:a8:0a:7d:a9:5c:cc:b3:fd:89:a3:74:f8:
b4:8c:b1:dd:fd:18:4a:25:34:d3:c5:4b:99:22:45:e9:b6:ef:
32:0f:dc:be:3b:45:69:4a:45:1d:99:38:9e:84:f3:2b:cc:02:
52:14:e2:a1:b3:20:39:2d:f3:0a:45:c5:a7:93:71:ec:41:5d:
9b:11:e6:77:a7:12:f3:1d:22:bf:c5:e3:16:48:0a:a9:c2:21:
a5:01:c2:d9:33:d3:a1:c9:b0:44:c7:c3:49:a7:75:0c:8d:ee:
2a:ad:bd:9f:20:8f:f0:b7:cd:fc:d6:5b:83:91:5e:ae:68:69:
80:fd:ef:c9:3d:06:b4:14:7b:f1:80:21:85:18:00:8d:00:17:
dc:87:bc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:31:05 2026 by rpki-client