Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
File: GzApY06o7VRoG6hNFJkLALhk3bg.mft (raw, json)
Hash identifier: 0LwJARYp4AXo6LVUiYEmtw8AHUd+VzgMybXzhZdw/xA=
Subject key identifier: C6:86:F0:C6:46:14:C1:45:99:61:D7:EB:A9:2A:15:33:BD:50:2E:D6
Authority key identifier: 1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
Certificate issuer: /CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Certificate serial: 019F93FF85D2D0D484BBCD012EC07E831A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
Manifest number: 16FD
Signing time: Fri 24 Jul 2026 12:00:24 +0000
Manifest this update: Fri 24 Jul 2026 12:00:24 +0000
Manifest next update: Sat 25 Jul 2026 12:00:24 +0000
Files and hashes: 1: GzApY06o7VRoG6hNFJkLALhk3bg.crl (hash: YyfvdsE/dTR/y8oH+HfoGNWS9OA2i8pxMj9RfJTxy1w=)
2: UqEuoQpjxBtIURq4ob163Ouybdc.roa (hash: ev1UNGyTahVLyeoggfYIhIctJOvLu/cQr0+ArcEASVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:85:d2:d0:d4:84:bb:cd:01:2e:c0:7e:83:1a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Validity
Not Before: Jul 24 12:00:24 2026 GMT
Not After : Jul 25 12:00:24 2026 GMT
Subject: CN=c686f0c64614c1459961d7eba92a1533bd502ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fb:cb:de:0f:db:c6:48:9d:20:0c:be:97:9e:
58:c5:ea:f2:0f:d9:f1:9c:27:e7:33:71:27:7f:00:
8c:fd:99:59:91:02:b1:8d:89:8e:e1:ae:2e:1b:92:
16:b2:08:df:a8:fb:52:7c:4c:ef:c5:96:9b:69:17:
9a:50:3e:bf:0e:18:e6:39:7b:60:23:b2:7d:11:e2:
93:da:f0:03:80:f8:a6:c7:84:3f:b7:37:26:05:90:
c4:50:7a:47:f1:86:6b:6b:0a:55:5f:39:a6:05:43:
aa:ae:3c:66:1c:10:5c:7f:b0:41:a2:52:db:90:35:
84:49:fd:8c:61:44:29:bc:15:0a:e4:6a:07:86:a4:
d9:82:5c:80:21:5c:9c:b1:6d:a5:9e:50:d8:1a:3a:
c2:f1:25:d1:83:97:27:14:9d:61:d7:9f:98:42:dd:
32:00:79:1b:f3:df:f7:ca:0e:f0:3f:cd:cb:d5:4f:
9b:25:96:e3:75:74:a9:44:b3:79:8a:9c:f6:5e:e1:
81:fd:cc:de:7a:98:d2:9d:9f:7d:b0:a9:6c:b2:63:
be:19:a4:cb:84:6f:03:18:fc:4d:92:bc:11:67:50:
6b:aa:35:19:d0:1d:ff:e7:19:97:6b:c6:c7:27:f0:
d3:64:ed:87:5b:32:c2:cd:0a:96:03:62:5e:f8:ae:
b5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:86:F0:C6:46:14:C1:45:99:61:D7:EB:A9:2A:15:33:BD:50:2E:D6
X509v3 Authority Key Identifier:
keyid:1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:56:3a:8f:c4:f7:70:c1:94:76:91:f4:f6:f2:f0:71:da:db:
be:be:28:ea:f1:24:63:d5:c2:d7:0f:3d:d0:fa:47:b3:82:79:
14:d4:6e:ab:5d:6f:0e:b1:87:31:24:b6:bd:35:9d:41:f9:71:
5f:a3:57:ed:fc:b0:61:1c:1e:cd:f6:72:1b:1b:00:f2:95:a3:
96:c1:0b:5f:c1:c9:dd:a3:cc:84:a4:9b:1e:ec:da:73:52:a8:
47:2b:bc:02:34:1e:ab:14:b9:09:d0:91:e9:db:89:5b:b0:ae:
5b:15:46:b8:cf:93:07:6d:b7:69:6e:8d:39:d2:4f:e8:0b:30:
55:2e:61:4d:79:70:b7:a8:da:38:e1:53:fc:47:87:4a:21:7b:
5a:8f:da:4d:7e:63:17:4d:8e:de:3f:05:9a:c2:22:ef:fc:82:
6d:39:4e:f8:aa:e1:07:40:c9:29:ea:84:3a:d2:2a:77:64:58:
53:4d:fa:d6:4a:b1:ba:0f:37:9d:9d:ad:58:da:b7:06:79:cb:
2a:17:d9:2e:63:d7:01:d9:cf:e1:cf:9f:22:7d:79:44:26:14:
fb:6b:65:63:8a:59:77:3f:a4:56:51:fd:00:d9:a0:df:e5:4d:
f3:1b:0a:47:45:12:5c:c1:c0:1b:33:ab:e2:9e:22:2c:c3:04:
09:78:73:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:31 2026 by rpki-client