Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: BY/pQ0YKNEq7dNJlYZg9pX9VlGRuPDdVgxQ5G/ZxRoo=
Subject key identifier: 62:35:D9:C1:76:1D:BD:52:FB:8B:55:BF:9B:39:75:01:BE:61:00:F3
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 019FAAF54332BEA32D0F8C667C1560A8AB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 060C
Signing time: Tue 28 Jul 2026 23:00:27 +0000
Manifest this update: Tue 28 Jul 2026 23:00:27 +0000
Manifest next update: Wed 29 Jul 2026 23:00:27 +0000
Files and hashes: 1: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: 0OumJDxGyxSdQ7WwYifsPFpdA+0EtcZ+wfz9wLNUNXI=)
2: WKAggwW4-2Bg4MeY0gX0Cx4LA4U.roa (hash: /G/TygfNsNBDAG6vbAPSrcTJMAI8N6hE5YMA8pkrvnA=)
3: rM0uTZNoLmKtjZkk_tSk7q-w9BI.roa (hash: dwD/35OeBK2EzCg4af00B6g6AoSl3HcpyQOtzC0IokY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:43:32:be:a3:2d:0f:8c:66:7c:15:60:a8:ab:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Jul 28 23:00:27 2026 GMT
Not After : Jul 29 23:00:27 2026 GMT
Subject: CN=6235d9c1761dbd52fb8b55bf9b397501be6100f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:07:a9:c7:e1:93:40:ad:63:dd:59:75:4d:
e0:49:b5:cc:e7:6c:0e:85:d1:6c:17:00:d2:af:94:
4c:8a:c0:7f:02:e6:c3:9d:1e:5f:89:8b:9f:6a:a6:
6b:de:c2:36:2b:32:ab:0d:aa:f1:eb:6b:c2:e6:4d:
f7:04:56:0c:4b:a8:e5:35:34:12:a8:22:cf:25:00:
b9:05:52:c7:50:73:ea:52:90:5c:6a:dd:81:34:81:
c8:6f:b0:f5:0f:7a:54:63:2e:e5:f4:e5:ed:b4:2f:
ed:28:65:fd:b3:41:aa:ed:80:17:0b:67:c7:ec:1a:
73:b4:4c:f1:d5:4d:67:c2:b7:e4:f5:c9:34:94:1f:
90:43:59:17:f8:55:57:05:60:b4:a1:60:36:57:99:
cb:df:4f:b4:21:0e:44:13:50:d2:8b:b2:b5:08:69:
ec:e1:d8:7f:e4:9d:29:ab:37:b7:43:9f:c0:a6:9c:
43:1d:5a:3a:55:f3:59:15:45:2c:a6:39:f7:5b:44:
a1:48:ff:2c:20:ab:06:1b:0a:42:cd:2e:63:67:ff:
a8:e3:b9:11:2a:61:b0:80:9b:b8:15:92:b0:b6:24:
db:72:56:19:19:be:4a:a5:a1:1c:51:a2:50:bf:9a:
af:95:b9:fd:1e:e1:83:bf:84:ff:f8:dd:4e:58:dc:
b7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:35:D9:C1:76:1D:BD:52:FB:8B:55:BF:9B:39:75:01:BE:61:00:F3
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:6e:0e:5d:11:d9:48:c9:e3:63:8d:d9:cc:59:72:ec:23:07:
17:32:3a:07:b7:74:c9:f7:3a:3e:28:d8:41:d4:45:5d:fb:53:
82:d7:8d:79:89:a3:c1:e2:eb:c0:22:37:ea:df:10:27:fe:8d:
74:9f:15:f4:de:fa:b5:ab:c7:ad:19:9b:51:d5:36:5a:b6:d6:
c5:02:27:18:21:df:d0:6c:77:6b:24:8a:46:c6:1d:ed:0e:78:
42:25:92:80:69:6f:2b:4e:c0:e6:61:ca:79:0c:ba:c5:33:c4:
46:ea:50:a8:d2:97:2c:c3:23:99:a6:82:73:92:ef:45:91:98:
ca:7c:22:bf:5e:15:f2:e2:57:0e:c1:a2:68:32:1e:36:be:d2:
21:61:50:d6:09:d9:c2:5a:7f:93:e0:eb:9b:32:78:4c:5a:fe:
67:1c:c4:b9:cd:40:4d:3c:0d:e0:b5:47:5b:cf:91:73:f6:11:
39:75:60:e6:05:e9:6a:8e:00:65:de:a5:74:7b:6e:2a:3b:90:
1a:a5:22:55:3c:18:cd:fe:aa:76:2a:8a:e0:b0:db:4a:75:68:
01:b3:1a:84:46:b7:53:6b:b7:77:d6:7f:75:32:a5:6f:8f:70:
2e:f4:54:8a:00:67:ce:d5:6e:0b:7a:42:8c:39:c0:2d:3e:68:
1d:26:27:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:26:47 2026 by rpki-client