Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
File: gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft (raw, json)
Hash identifier: gYhfu/UFE/nrplXlKlGWy9cOdKTpLjjwnTqV+tE25ew=
Subject key identifier: B6:59:87:3C:08:9E:42:3D:73:8A:F9:35:F3:4B:3F:FA:C0:10:40:20
Authority key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
Certificate issuer: /CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Certificate serial: 019D9C99DC1B811154FAB7F612714C7CACFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
Manifest number: 1225
Signing time: Fri 17 Apr 2026 18:00:22 +0000
Manifest this update: Fri 17 Apr 2026 18:00:22 +0000
Manifest next update: Sat 18 Apr 2026 18:00:22 +0000
Files and hashes: 1: VlW6EtyMaH795hvnaMozw2BfYQQ.roa (hash: my2rC1+ycBVaR38Z3DLdakYhoWnomEP/kZgHcgk7zUE=)
2: gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl (hash: SbXSzlvTQ8FDlHsJlYnAYBKsYucniuwuWhDRarbmIgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:99:dc:1b:81:11:54:fa:b7:f6:12:71:4c:7c:ac:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Validity
Not Before: Apr 17 18:00:22 2026 GMT
Not After : Apr 18 18:00:22 2026 GMT
Subject: CN=b659873c089e423d738af935f34b3ffac0104020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ec:5e:76:7a:3c:bb:71:5a:11:a0:71:dd:82:
11:85:61:90:a8:09:3d:1f:1d:a0:0f:01:4a:05:ed:
4f:ff:d8:61:6a:52:79:30:82:51:9b:be:6e:da:3d:
35:42:c1:18:ca:d0:dd:10:9e:08:93:71:73:2e:3c:
4e:79:76:a8:3c:7b:36:ba:7f:f5:cb:68:e0:44:46:
85:96:77:76:0c:43:dc:a4:e6:21:52:98:20:6e:e9:
c3:2d:85:f5:dd:9d:56:b4:6d:95:9d:b3:3f:66:72:
c8:c0:43:9b:9d:c8:2b:eb:d5:99:46:d1:d2:d6:33:
fd:dd:1e:0f:8f:37:a9:21:09:83:9b:c7:93:c7:eb:
7f:05:ee:7e:4c:e0:ed:eb:8e:b7:32:fd:1a:04:48:
1a:ce:6d:80:c7:20:37:2e:00:b7:63:5f:d6:f3:7b:
26:d0:46:97:a8:e2:8c:f0:16:89:db:6e:d5:f8:d2:
36:02:bf:78:6c:e5:28:93:f4:ed:47:1d:ee:86:4f:
a4:c2:a1:6c:25:67:06:fc:f2:27:b3:b7:f4:57:6b:
ef:a8:4b:24:d7:57:0f:50:8e:37:68:de:84:5f:49:
1a:c5:6e:8a:e7:46:29:b4:30:db:c5:0d:ad:6c:30:
1b:01:cd:62:23:b3:86:f2:01:cb:fc:06:87:20:65:
b1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:59:87:3C:08:9E:42:3D:73:8A:F9:35:F3:4B:3F:FA:C0:10:40:20
X509v3 Authority Key Identifier:
keyid:83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7c:18:46:60:cf:9e:92:19:a6:2b:13:cf:af:14:b9:84:6d:
f9:23:a2:54:a1:20:16:f9:92:c7:79:ed:77:c4:cf:80:e3:8c:
70:a4:f8:a0:60:32:65:ea:3e:c3:4c:9d:b3:ff:89:7b:e7:5e:
64:32:de:f6:19:af:3c:5e:ee:dd:58:79:15:cb:2e:18:ac:c6:
44:36:a3:fa:bb:22:8a:c1:d7:ce:20:ab:e7:ee:49:b5:d1:17:
14:62:3d:98:49:2c:81:85:64:3d:1c:c2:9c:dc:97:ca:1d:29:
73:32:7c:b1:97:43:c3:74:ef:35:a2:32:7f:b5:7e:10:44:88:
eb:d2:ed:7e:3b:89:c0:43:98:11:9b:69:cc:b4:33:0e:60:2a:
50:b3:ee:cb:cd:c2:dd:e5:be:54:ab:f1:f5:3f:e9:c9:82:84:
f1:da:5b:d9:71:78:7f:4b:23:89:b8:4e:2c:c7:05:07:dd:23:
98:d4:d6:53:44:91:3d:c8:b8:ae:42:ee:62:2e:6d:73:9f:e3:
b3:3f:5d:e2:96:42:b7:11:2c:d5:00:a6:bd:05:19:8f:b0:a9:
ae:c0:ee:fb:a9:b9:0b:0d:0c:7a:cb:63:ae:7c:cc:79:78:33:
97:42:3c:fa:c7:60:ce:2e:0f:36:78:c6:24:df:ab:9d:80:27:
0f:09:c0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:31:35 2026 by rpki-client