Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json)
Hash identifier: j96L6H7H85OHfhf8C01G7tJ51keXe3cIlsWvaOwlEBc=
Subject key identifier: 99:43:91:09:19:8E:A4:ED:C6:3E:13:92:7A:9E:90:D5:24:98:77:98
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 019D284D2BF30289BB64167898ABD1D3DFF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
Manifest number: 0DDF
Signing time: Thu 26 Mar 2026 04:00:39 +0000
Manifest this update: Thu 26 Mar 2026 04:00:39 +0000
Manifest next update: Fri 27 Mar 2026 04:00:39 +0000
Files and hashes: 1: WbAwRdYrJR5wFAa2q_hyf2XEajA.roa (hash: fVhxKKPzH41Q65WrATxm9iiVCPSBedSsGy5vx1QfADc=)
2: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: DCWk22EttuvmnvhJZarXaT102lttz/7Ia2tlxTI7Xuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:2b:f3:02:89:bb:64:16:78:98:ab:d1:d3:df:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Mar 26 04:00:39 2026 GMT
Not After : Mar 27 04:00:39 2026 GMT
Subject: CN=99439109198ea4edc63e13927a9e90d524987798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:84:9a:50:e6:17:09:61:72:72:83:1b:b8:4a:
1c:eb:af:1b:69:e0:34:85:c1:cc:61:e0:28:9a:6f:
db:08:03:7a:25:57:83:70:af:b6:b5:d1:2a:f7:2c:
38:db:0c:dd:17:45:4c:33:13:95:31:cf:f6:b4:a5:
f6:f2:56:6a:29:3a:8e:15:38:26:44:10:6d:25:8f:
2d:f0:a0:e1:c1:b6:ed:78:22:8b:0e:7d:a8:de:43:
37:8d:53:4c:58:d4:a4:74:26:35:92:9c:61:69:63:
b1:e7:d0:f8:0f:7e:ba:b2:02:3d:96:0b:78:17:ff:
c2:b5:d1:13:7d:b5:78:2c:3f:fb:1c:eb:ff:40:4b:
1a:c2:53:b6:9f:63:58:94:59:8b:07:6e:7c:68:e2:
24:ee:5a:65:ee:d2:4b:a2:af:29:e1:64:5f:4b:21:
c4:46:bf:32:48:21:ed:b6:9d:40:8e:63:e4:c3:10:
48:43:9d:b6:57:31:38:a8:0c:09:f8:d0:82:f4:d9:
89:fa:d3:70:23:a6:e3:8c:8d:33:7b:e9:d8:c2:5a:
7b:59:90:3b:7f:c5:a1:58:06:55:d4:5b:85:22:e5:
3b:de:7a:70:04:93:00:c9:a7:ee:07:b9:92:e5:c6:
c5:34:e6:8b:76:18:63:9b:8e:b8:eb:fe:18:d3:34:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:43:91:09:19:8E:A4:ED:C6:3E:13:92:7A:9E:90:D5:24:98:77:98
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a4:1e:0c:68:4a:d5:c9:45:bd:51:47:a0:d3:b8:b6:89:fe:
2f:83:20:87:de:c4:81:84:ac:50:38:d1:03:1a:55:4e:7b:fd:
a5:e7:de:15:7a:71:e8:fb:23:f2:c3:2e:67:c7:71:c6:2e:8b:
8b:e5:c9:f5:f0:50:17:5d:97:87:d1:10:35:7c:b3:44:0e:7f:
0c:a7:f7:3e:fb:bc:07:a0:a3:90:0e:b8:80:89:23:d0:58:35:
2e:01:f0:44:c7:fb:fb:3b:7a:95:0a:01:56:15:c7:85:e5:44:
4c:d8:cf:95:9c:55:fe:b3:ce:e5:3d:0c:04:84:57:b0:93:e1:
0a:bd:d2:f6:e3:cf:fe:ab:b0:0a:a0:e3:0f:b9:34:4a:92:73:
4a:8c:98:22:95:a0:be:e9:91:5b:03:87:a8:10:87:c7:27:34:
50:30:bc:75:db:bf:e0:f2:e0:2d:fa:d3:ab:c9:b9:8f:c7:97:
af:46:53:d0:b6:80:0a:c6:3e:26:e2:cf:e9:c7:e8:96:db:56:
05:22:4f:43:25:90:d1:10:9a:ab:54:02:61:b2:40:88:cf:52:
fe:46:90:c4:cf:eb:15:ac:87:00:5e:60:82:7f:1f:48:bd:d3:
e6:b7:1d:22:12:6b:83:86:9f:45:54:69:05:4a:16:cc:9e:84:
93:8a:3c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:33:08 2026 by rpki-client