Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
File: gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft (raw, json)
Hash identifier: 5yzB5WuR6PpRVhBpS5wQtF/ZG38FToZ6NfDcErzl8fg=
Subject key identifier: 1F:11:F8:90:73:D7:8F:F9:C8:9D:56:E6:29:B1:9B:4F:B3:EF:A7:A3
Authority key identifier: 83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
Certificate issuer: /CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Certificate serial: 019CAF11735D2CF6432624656A8B0B80C016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
Manifest number: 11AA
Signing time: Mon 02 Mar 2026 15:01:22 +0000
Manifest this update: Mon 02 Mar 2026 15:01:22 +0000
Manifest next update: Tue 03 Mar 2026 15:01:22 +0000
Files and hashes: 1: VlW6EtyMaH795hvnaMozw2BfYQQ.roa (hash: my2rC1+ycBVaR38Z3DLdakYhoWnomEP/kZgHcgk7zUE=)
2: gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl (hash: aaaTXDX78JpI8D+9Nq88wnZdMvOfNHhWodgsXZZ2N+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:73:5d:2c:f6:43:26:24:65:6a:8b:0b:80:c0:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8336ca151ed4c323d498f06dd7c5ae394ceac59f
Validity
Not Before: Mar 2 15:01:22 2026 GMT
Not After : Mar 3 15:01:22 2026 GMT
Subject: CN=1f11f89073d78ff9c89d56e629b19b4fb3efa7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:60:1e:b3:df:9b:d1:a3:03:79:d2:8c:83:44:
94:a9:09:92:b0:60:81:ba:64:67:e1:2a:31:74:6a:
d3:17:5d:97:23:37:bc:d7:30:9d:cd:d9:b6:9e:71:
25:c3:13:25:1b:7c:ab:3b:57:90:4a:fe:3d:50:9f:
3e:50:bc:51:c8:4f:b4:91:e7:95:bf:55:92:9c:1a:
03:25:4a:5e:83:5f:25:50:01:53:08:d7:d0:a7:d3:
83:13:67:94:ea:d3:bb:d6:7c:76:72:3f:1a:94:1a:
74:e0:6c:b4:4c:5c:37:04:78:13:f0:92:6b:02:70:
85:ae:66:7d:6b:29:2d:3a:92:30:d3:2b:fb:96:2a:
81:36:24:14:a2:7f:eb:4f:93:a6:fc:7d:e4:06:17:
53:e6:4d:0d:f7:15:2a:0c:e4:53:0d:99:be:82:fe:
27:d1:35:f7:24:d9:02:92:77:da:ec:7b:7b:86:4b:
bf:cd:78:d8:93:ed:42:17:5a:b8:d3:7d:5e:73:69:
e4:5e:66:88:e2:0a:ea:a7:2d:c5:06:bf:32:b5:84:
e2:2b:d1:85:97:e1:9b:11:ab:c3:b7:fb:2c:2e:e3:
36:9f:1c:1c:7b:9b:cc:16:c9:38:c1:a4:54:76:f4:
4b:f9:a1:56:ff:0c:46:fb:95:f7:6e:f9:d6:78:a4:
a2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:11:F8:90:73:D7:8F:F9:C8:9D:56:E6:29:B1:9B:4F:B3:EF:A7:A3
X509v3 Authority Key Identifier:
keyid:83:36:CA:15:1E:D4:C3:23:D4:98:F0:6D:D7:C5:AE:39:4C:EA:C5:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzbKFR7UwyPUmPBt18WuOUzqxZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1face1-9e28-4d89-bf52-91795319845c/1/gzbKFR7UwyPUmPBt18WuOUzqxZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:27:4c:47:8e:20:f2:22:d3:af:d4:30:70:ef:d0:5d:8d:8b:
e2:e4:14:75:72:ba:4c:c3:51:77:3f:a9:25:bf:bb:3b:b6:f2:
96:8f:b8:2f:20:fa:0c:3f:9a:46:23:eb:f4:63:6b:41:dd:93:
98:fb:70:ae:56:7f:ab:04:5e:92:4a:de:41:cc:fc:a8:60:be:
18:da:04:30:ad:da:d3:0f:94:23:e6:f3:7d:7e:c7:87:09:65:
4a:88:23:c3:3a:53:09:59:ee:e0:08:5c:43:4e:a3:61:da:11:
e5:92:fb:04:33:da:0a:76:ff:77:b2:46:4f:a2:38:97:85:25:
06:68:4b:a9:06:33:76:27:3f:9e:f9:cd:96:0f:ee:19:3f:eb:
2d:2e:bc:91:da:b9:e0:37:b5:bd:87:86:de:14:5d:a2:48:e3:
8d:6a:f8:87:20:de:67:32:71:e9:57:e6:f1:7c:3d:ce:a0:a9:
85:d3:ab:67:71:e2:2d:b5:35:c6:0f:85:7d:17:6e:b7:7f:a8:
f1:c2:7b:7c:88:1a:56:91:28:20:2d:3d:d0:cf:04:d7:2c:f0:
88:21:f6:af:bc:80:de:6a:43:7a:ae:eb:30:d3:ff:ab:92:d5:
c3:f4:27:ab:93:56:da:a6:c9:f5:bf:1f:19:38:c0:9f:5d:67:
51:3d:22:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:58:36 2026 by rpki-client