Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
File: GzApY06o7VRoG6hNFJkLALhk3bg.mft (raw, json)
Hash identifier: LVxL4yQV3GPxAAkagoJlJssVi8fUARUO+ipBvknECos=
Subject key identifier: 76:4E:B7:B5:EF:47:C0:3A:F3:44:24:B3:5C:83:5F:08:B3:3C:50:53
Authority key identifier: 1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
Certificate issuer: /CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Certificate serial: 019D2816D94F467110E25C851BB285F5431D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
Manifest number: 15BC
Signing time: Thu 26 Mar 2026 03:01:19 +0000
Manifest this update: Thu 26 Mar 2026 03:01:19 +0000
Manifest next update: Fri 27 Mar 2026 03:01:19 +0000
Files and hashes: 1: GzApY06o7VRoG6hNFJkLALhk3bg.crl (hash: pgi1IE4w+aw4kiQkvv8ng6x+orRwsJ74kro6EK4YjA4=)
2: UqEuoQpjxBtIURq4ob163Ouybdc.roa (hash: ev1UNGyTahVLyeoggfYIhIctJOvLu/cQr0+ArcEASVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:d9:4f:46:71:10:e2:5c:85:1b:b2:85:f5:43:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3029634ea8ed54681ba84d14990b00b864ddb8
Validity
Not Before: Mar 26 03:01:19 2026 GMT
Not After : Mar 27 03:01:19 2026 GMT
Subject: CN=764eb7b5ef47c03af34424b35c835f08b33c5053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:67:14:3c:45:93:46:56:9d:81:cd:1e:77:78:
de:f2:4e:b0:70:a7:a3:99:c8:95:5d:06:ce:f6:7b:
90:be:f6:eb:6b:df:bc:86:55:cf:93:c2:07:aa:00:
3b:72:f5:d1:d4:d4:4c:6c:ec:88:3d:09:08:b1:3b:
56:38:f2:67:c1:f2:d9:cb:a4:83:89:96:7b:54:75:
63:5e:71:4f:fc:25:08:a1:e9:ec:56:06:58:0c:3c:
39:09:84:56:75:ca:82:0c:6e:73:21:39:ae:9b:0d:
81:81:c9:46:f0:43:75:b0:96:48:cf:0f:66:f7:64:
b5:a1:40:08:ce:a2:71:bc:61:1c:e7:05:8c:1e:69:
98:f5:5e:37:e2:89:da:da:2c:86:87:e1:88:d7:38:
07:2b:ed:76:ee:b0:bb:a9:2e:c1:bb:32:70:11:fe:
a2:55:14:ac:f1:9e:2a:be:4d:5e:6a:5f:49:29:8e:
04:79:c7:e1:48:a8:8a:d4:36:15:7d:eb:31:3b:5d:
68:c7:d8:1d:1f:bf:7e:91:e3:0f:52:e1:8b:ed:35:
05:16:95:f0:f1:65:4c:62:5e:6e:ad:22:59:a7:83:
ac:d4:7e:d2:7c:c1:10:0f:6e:46:88:1c:fe:fb:28:
fe:be:3c:42:32:d8:e8:89:6d:4d:02:a4:d2:74:65:
d5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4E:B7:B5:EF:47:C0:3A:F3:44:24:B3:5C:83:5F:08:B3:3C:50:53
X509v3 Authority Key Identifier:
keyid:1B:30:29:63:4E:A8:ED:54:68:1B:A8:4D:14:99:0B:00:B8:64:DD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzApY06o7VRoG6hNFJkLALhk3bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a3bfe9-dc56-4c1f-97a7-6b31a7360f0f/1/GzApY06o7VRoG6hNFJkLALhk3bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:0c:8a:97:fa:3a:70:61:ee:4a:a8:ca:0d:45:d4:38:1b:3e:
aa:dc:39:8c:83:8f:b6:e6:0d:98:de:0f:64:8d:98:0a:61:42:
46:31:bb:30:3a:04:15:76:98:a5:e4:28:15:ad:36:8b:bf:6d:
4f:b6:d4:5a:b9:cb:b8:2b:b3:b4:99:78:83:97:8c:df:e2:bb:
5e:52:0f:bf:7e:6e:2c:2b:e3:13:5f:db:bb:0e:0b:b8:0e:f8:
d6:c6:e8:9e:0f:99:e5:d0:03:b6:20:0d:c6:ff:8a:9e:93:87:
fa:6f:af:f2:73:49:f9:8e:73:0e:3d:a0:dd:b6:e1:06:1b:30:
99:0f:fa:c1:0e:30:31:e4:a8:1b:c8:15:3c:13:7c:e6:58:e1:
00:91:8b:cd:35:39:5d:8b:47:61:09:0d:88:12:f3:46:3d:75:
60:59:54:c2:8b:45:35:de:89:99:3f:c6:ad:cb:80:20:96:8d:
94:e3:43:62:0e:54:a8:02:d6:84:af:0f:68:48:47:2c:6d:25:
3d:44:58:66:ed:c2:48:12:0b:ef:74:fe:32:50:76:73:9a:cb:
38:6d:32:91:ef:6d:71:47:d9:70:1d:34:01:28:e2:74:03:32:
38:39:bb:ae:9d:4c:9b:96:8b:46:84:c1:eb:0b:1b:6b:bc:64:
f2:4f:a2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:46:52 2026 by rpki-client