Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
File: GbZo5W_iW9bcU4AO4XdQYezAkgY.mft (raw, json)
Hash identifier: yjmDVAVph3ml5OEPfDdEHOh8doljIWaOyicdUz614qE=
Subject key identifier: 9E:86:A8:2B:56:C9:42:41:EE:06:36:D6:29:7D:76:C9:05:81:B0:B9
Authority key identifier: 19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
Certificate issuer: /CN=19b668e56fe25bd6dc53800ee1775061ecc09206
Certificate serial: 019D2704256DCE5320333EB038E8BF1B2D89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
Manifest number: 02D9
Signing time: Wed 25 Mar 2026 22:01:16 +0000
Manifest this update: Wed 25 Mar 2026 22:01:16 +0000
Manifest next update: Thu 26 Mar 2026 22:01:16 +0000
Files and hashes: 1: GbZo5W_iW9bcU4AO4XdQYezAkgY.crl (hash: RS6H3j0xgtBVNw/XQr3JgtkIkDoP8ETLYbHwvQMd2yI=)
2: GgjQWM36uV4GSfSXLOJQsW5-Vp0.roa (hash: Y6tX+ihKuOoeM7vLjJWs//R30Rb5hG9YG5XHFzO8vfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:25:6d:ce:53:20:33:3e:b0:38:e8:bf:1b:2d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b668e56fe25bd6dc53800ee1775061ecc09206
Validity
Not Before: Mar 25 22:01:16 2026 GMT
Not After : Mar 26 22:01:16 2026 GMT
Subject: CN=9e86a82b56c94241ee0636d6297d76c90581b0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c1:9d:f2:8a:9a:cb:5f:c9:8a:3e:12:1e:af:
5c:8e:2d:70:73:0c:87:8b:9b:dd:3e:6e:96:92:69:
d3:f3:52:f0:b6:59:d5:46:20:f4:4d:95:98:fe:47:
d7:d0:65:8f:7b:64:2e:68:58:3e:22:7b:b3:13:94:
10:98:ad:32:f0:c5:62:7e:3f:6a:39:12:25:55:5f:
64:d9:1c:af:08:34:2b:6a:51:21:2b:ba:ad:a8:47:
d9:23:bd:e7:14:85:69:aa:46:1e:65:8c:49:89:58:
54:f6:e1:0a:e2:94:34:8e:c8:a0:39:75:6f:0c:38:
5c:e9:fc:fc:9b:e7:83:aa:48:36:ee:40:10:a8:1b:
f1:32:c7:e3:b7:91:c8:80:3f:ec:c4:b2:e3:f2:86:
2b:c0:8f:84:6d:0c:00:eb:d5:51:4a:7a:57:82:cc:
19:4c:ec:c1:b9:58:2f:63:8b:a1:4a:e7:7a:da:76:
50:13:1a:c0:38:eb:62:19:2c:e1:a7:9a:35:fa:67:
2d:f1:d9:94:dd:01:d4:a4:65:c4:95:60:3e:ca:fd:
90:07:07:f8:97:04:79:9d:ad:48:71:23:4a:b3:52:
32:f0:d7:e2:2d:85:9b:62:28:72:ba:e8:cd:74:59:
2a:b3:43:5c:e4:49:64:e7:9a:f3:73:68:78:76:97:
9e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:86:A8:2B:56:C9:42:41:EE:06:36:D6:29:7D:76:C9:05:81:B0:B9
X509v3 Authority Key Identifier:
keyid:19:B6:68:E5:6F:E2:5B:D6:DC:53:80:0E:E1:77:50:61:EC:C0:92:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbZo5W_iW9bcU4AO4XdQYezAkgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/d70d46-265a-4092-8331-ef5f093f5395/1/GbZo5W_iW9bcU4AO4XdQYezAkgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:18:33:56:6c:10:68:d0:91:81:73:b0:64:b1:a6:94:57:90:
82:04:a0:1d:12:92:50:91:ea:51:92:1e:3c:a1:57:ae:c1:a7:
14:fd:bc:3e:71:27:73:f3:de:2b:23:54:b8:e0:05:49:76:7a:
de:5e:c7:5f:7a:f7:19:d9:53:04:16:af:72:96:76:4e:a3:f4:
51:0d:73:d6:9e:f9:a7:5d:32:2b:30:bf:6f:bb:4e:21:a0:35:
60:6c:6f:e7:ba:74:bc:cb:16:0f:e5:ef:f0:a5:28:ee:85:e0:
6d:9f:7d:aa:3f:c6:ed:80:b9:f5:5d:76:c5:64:19:5f:4e:af:
e2:64:c2:cc:29:2f:68:1a:73:cd:da:1d:b6:3d:71:6a:d8:2b:
3e:44:4f:cf:9c:48:46:ab:ea:63:23:ca:b8:12:9e:84:a5:85:
85:27:d7:cd:25:8a:d2:c0:98:3e:d3:17:6f:83:6b:e0:02:48:
68:8d:a4:7c:3c:fd:02:4a:cc:85:f6:ca:09:30:72:ab:2b:04:
ea:7b:f5:5c:48:ce:73:f7:f7:0a:8b:8e:fc:33:de:38:a1:7e:
ba:82:39:95:04:21:c9:b5:b3:8a:39:22:9b:72:e6:0d:0a:89:
67:c0:5d:fb:23:25:38:aa:d3:a5:a5:18:df:5a:21:94:46:6b:
c7:64:34:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nBCVtzlMgMz6wOOi/Gy2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjY2OGU1NmZlMjViZDZkYzUzODAwZWUxNzc1MDYxZWNj
MDkyMDYwHhcNMjYwMzI1MjIwMTE2WhcNMjYwMzI2MjIwMTE2WjAzMTEwLwYDVQQD
Eyg5ZTg2YTgyYjU2Yzk0MjQxZWUwNjM2ZDYyOTdkNzZjOTA1ODFiMGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8Gd8oqay1/Jij4SHq9cji1wcwyH
i5vdPm6WkmnT81LwtlnVRiD0TZWY/kfX0GWPe2QuaFg+InuzE5QQmK0y8MVifj9q
ORIlVV9k2RyvCDQralEhK7qtqEfZI73nFIVpqkYeZYxJiVhU9uEK4pQ0jsigOXVv
DDhc6fz8m+eDqkg27kAQqBvxMsfjt5HIgD/sxLLj8oYrwI+EbQwA69VRSnpXgswZ
TOzBuVgvY4uhSud62nZQExrAOOtiGSzhp5o1+mct8dmU3QHUpGXElWA+yv2QBwf4
lwR5na1IcSNKs1Iy8NfiLYWbYihyuujNdFkqs0Nc5Elk55rzc2h4dpeeSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6GqCtWyUJB7gY21il9dskFgbC5MB8GA1UdIwQY
MBaAFBm2aOVv4lvW3FOADuF3UGHswJIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JabzVXX2lXOWJjVTRBTzRYZFFZZXpBa2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kNzBkNDYtMjY1YS00MDkyLTgzMzEt
ZWY1ZjA5M2Y1Mzk1LzEvR2JabzVXX2lXOWJjVTRBTzRYZFFZZXpBa2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9kNzBkNDYtMjY1YS00MDkyLTgzMzEtZWY1ZjA5M2Y1Mzk1
LzEvR2JabzVXX2lXOWJjVTRBTzRYZFFZZXpBa2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBgzVmwQ
aNCRgXOwZLGmlFeQggSgHRKSUJHqUZIePKFXrsGnFP28PnEnc/PeKyNUuOAFSXZ6
3l7HX3r3GdlTBBavcpZ2TqP0UQ1z1p75p10yKzC/b7tOIaA1YGxv57p0vMsWD+Xv
8KUo7oXgbZ99qj/G7YC59V12xWQZX06v4mTCzCkvaBpzzdodtj1xatgrPkRPz5xI
RqvqYyPKuBKehKWFhSfXzSWK0sCYPtMXb4Nr4AJIaI2kfDz9AkrMhfbKCTByqysE
6nv1XEjOc/f3CouO/DPeOKF+uoI5lQQhybWzijkim3LmDQqJZ8Bd+yMlOKrTpaUY
31ohlEZrx2Q0jQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:22:07 2026 by rpki-client