Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: 70Q89ShLAw5JVO2z13emNPxN4ompV6Z7Luk3YcxMBqA=
Subject key identifier: 91:40:AC:9D:46:A0:A1:AA:AA:DE:33:B7:BE:C6:A3:74:5F:8C:39:EB
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 01A100C7FB59033EF29D6FAB05D0B8E30403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 06BD
Signing time: Sat 03 Oct 2026 08:01:08 +0000
Manifest this update: Sat 03 Oct 2026 08:01:08 +0000
Manifest next update: Sun 04 Oct 2026 08:01:08 +0000
Files and hashes: 1: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: 7ECpAtlN4h/ARWc62Gsg+IXpNIrfEEmD10rtMXUGrPQ=)
2: WKAggwW4-2Bg4MeY0gX0Cx4LA4U.roa (hash: /G/TygfNsNBDAG6vbAPSrcTJMAI8N6hE5YMA8pkrvnA=)
3: rM0uTZNoLmKtjZkk_tSk7q-w9BI.roa (hash: dwD/35OeBK2EzCg4af00B6g6AoSl3HcpyQOtzC0IokY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:c7:fb:59:03:3e:f2:9d:6f:ab:05:d0:b8:e3:04:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Oct 3 08:01:08 2026 GMT
Not After : Oct 4 08:01:08 2026 GMT
Subject: CN=9140ac9d46a0a1aaaade33b7bec6a3745f8c39eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:65:bf:35:12:0e:4c:93:89:01:e3:8c:08:16:
2e:a0:55:dc:8b:21:53:ae:f0:d1:97:96:25:16:f6:
ae:24:3c:89:a4:69:c8:f5:74:f3:39:51:79:ad:85:
4e:ae:80:d5:a9:fe:90:da:37:e7:03:82:93:bd:ef:
3b:52:57:0f:90:07:2f:67:49:e7:b9:23:8c:ad:77:
9a:c3:84:98:61:ac:9e:7f:fb:54:56:72:5c:d1:3f:
33:70:09:fe:d7:ca:01:a8:88:30:31:5f:f4:c0:f5:
da:8f:a4:87:b8:e3:4b:94:5d:78:3b:41:fb:2e:90:
0d:25:c5:8b:e9:ae:bd:7f:f4:28:67:61:9d:37:31:
f8:b2:d6:2f:12:b6:ca:f8:41:63:fa:ce:fc:6d:28:
ea:d8:c4:d1:4d:d1:dd:b9:e4:06:02:af:4f:e6:aa:
f0:95:ed:ae:58:9d:71:e1:76:51:68:4c:bb:29:82:
56:5d:35:4c:fb:c2:18:68:15:a2:ae:5c:43:62:60:
bc:14:07:74:2d:3d:8a:46:0c:ef:14:29:e9:8c:e8:
2f:e7:ba:6d:31:5c:76:7c:97:ad:7b:9e:2e:1f:3d:
33:01:f2:9e:f4:c6:4c:fc:82:69:ea:dc:b6:9a:bd:
b1:50:09:27:74:34:1f:40:b7:a8:94:41:2f:a8:03:
91:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:40:AC:9D:46:A0:A1:AA:AA:DE:33:B7:BE:C6:A3:74:5F:8C:39:EB
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6d:79:b0:25:8c:80:3d:b6:c4:de:ef:9f:7f:45:27:57:3b:
05:d4:bd:5d:14:09:19:ea:36:6a:e2:21:07:c0:42:76:20:75:
c9:54:55:13:21:d1:d1:af:85:60:63:fc:35:96:61:b1:70:15:
f0:07:94:2e:fd:5d:d1:b7:5f:61:b5:9f:2f:f4:d6:aa:5f:13:
a3:3c:25:34:96:d7:3a:53:51:bd:8f:ae:37:07:94:b4:4f:55:
04:27:c0:1e:a2:33:39:00:a7:3c:61:3b:85:1c:d5:44:a3:81:
b2:80:23:f0:9b:6b:c7:33:90:c9:7d:cf:71:12:c6:d4:9e:55:
92:18:ac:50:35:fc:f3:1d:0b:ef:3e:15:d7:d5:74:68:4a:ed:
1d:6c:9b:48:32:27:da:87:62:da:b3:84:1c:e4:f3:a3:12:6c:
f8:ae:30:ca:13:91:74:16:f1:e8:9f:f7:5c:26:3b:0d:1e:ba:
cc:36:b9:20:51:1e:19:3b:09:43:ad:a3:27:bd:2a:3f:d4:3c:
11:b5:29:ae:88:10:ea:f6:55:3b:92:03:64:f5:46:7d:7a:2f:
cb:34:64:69:12:df:40:12:3d:1f:79:a3:9c:1b:1c:64:78:0e:
7e:44:c7:be:0b:9c:46:7b:49:fc:36:3d:23:46:c2:67:30:58:
3b:3b:c8:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEAx/tZAz7ynW+rBdC44wQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OTRiZjg0ZGUzNmZmYjlkOTRiMjU3ZjMyNzgxMzQxOTQx
MzM0OTgwHhcNMjYxMDAzMDgwMTA4WhcNMjYxMDA0MDgwMTA4WjAzMTEwLwYDVQQD
Eyg5MTQwYWM5ZDQ2YTBhMWFhYWFkZTMzYjdiZWM2YTM3NDVmOGMzOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2W/NRIOTJOJAeOMCBYuoFXciyFT
rvDRl5YlFvauJDyJpGnI9XTzOVF5rYVOroDVqf6Q2jfnA4KTve87UlcPkAcvZ0nn
uSOMrXeaw4SYYayef/tUVnJc0T8zcAn+18oBqIgwMV/0wPXaj6SHuONLlF14O0H7
LpANJcWL6a69f/QoZ2GdNzH4stYvErbK+EFj+s78bSjq2MTRTdHdueQGAq9P5qrw
le2uWJ1x4XZRaEy7KYJWXTVM+8IYaBWirlxDYmC8FAd0LT2KRgzvFCnpjOgv57pt
MVx2fJete54uHz0zAfKe9MZM/IJp6ty2mr2xUAkndDQfQLeolEEvqAORhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFArJ1GoKGqqt4zt77Go3RfjDnrMB8GA1UdIwQY
MBaAFBmUv4TeNv+52UslfzJ4E0GUEzSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUt
NDZhZjNlNTBjMDUyLzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUtNDZhZjNlNTBjMDUy
LzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABm15sCWM
gD22xN7vn39FJ1c7BdS9XRQJGeo2auIhB8BCdiB1yVRVEyHR0a+FYGP8NZZhsXAV
8AeULv1d0bdfYbWfL/TWql8TozwlNJbXOlNRvY+uNweUtE9VBCfAHqIzOQCnPGE7
hRzVRKOBsoAj8JtrxzOQyX3PcRLG1J5VkhisUDX88x0L7z4V19V0aErtHWybSDIn
2odi2rOEHOTzoxJs+K4wyhORdBbx6J/3XCY7DR66zDa5IFEeGTsJQ62jJ70qP9Q8
EbUprogQ6vZVO5IDZPVGfXovyzRkaRLfQBI9H3mjnBscZHgOfkTHvgucRntJ/DY9
I0bCZzBYOzvIPw==
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:39:55 2026 by rpki-client