Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: x/aA+exgOQETQuHYFS4F+t+aPeZfEzFKSL4gqqbuQi4=
Subject key identifier: BF:FE:2A:35:80:64:8D:B8:E9:76:E1:A6:A5:8E:DD:4A:75:85:C1:40
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 019CAA900C9D320715B505322FF2852226A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 047E
Signing time: Sun 01 Mar 2026 18:01:32 +0000
Manifest this update: Sun 01 Mar 2026 18:01:32 +0000
Manifest next update: Mon 02 Mar 2026 18:01:32 +0000
Files and hashes: 1: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: 8urm7e6tt8jhddbtgMFTyiF6/fL7PXhOqZBOhjifkTM=)
2: gdwYYL9CsGDFTkAuG8S2liyK-r0.roa (hash: S6etNmQi4pEy1ZdQxxbNiQYv530X1B2bmlUtb5h29UQ=)
3: rM0uTZNoLmKtjZkk_tSk7q-w9BI.roa (hash: dwD/35OeBK2EzCg4af00B6g6AoSl3HcpyQOtzC0IokY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:0c:9d:32:07:15:b5:05:32:2f:f2:85:22:26:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Mar 1 18:01:32 2026 GMT
Not After : Mar 2 18:01:32 2026 GMT
Subject: CN=bffe2a3580648db8e976e1a6a58edd4a7585c140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:f4:52:1b:9a:f3:52:7d:9f:5e:f6:ea:07:
96:e8:8c:7f:e9:c6:be:d8:69:0a:9c:6d:6e:b1:c4:
d6:19:aa:40:58:0b:c8:0e:ec:a0:c0:c7:e4:94:02:
97:6e:c4:cc:3b:21:0d:0e:4f:ee:dd:0d:d1:82:76:
3c:30:ed:33:70:d2:95:46:4d:1c:bb:55:ab:ce:14:
f8:36:5a:b7:0a:e3:1b:2d:8d:e2:1f:4f:d1:e8:8b:
9a:6a:0a:7c:a0:0c:ca:39:06:33:e9:f0:e7:86:f2:
cc:6d:d7:f5:17:c6:1f:34:d5:f2:86:cb:fe:95:77:
66:28:3e:8b:20:7e:6f:82:50:43:7e:25:0a:dd:16:
bc:ca:57:bb:3b:43:0a:5a:a1:95:c6:9f:46:66:8b:
76:01:80:fe:98:d4:bb:b0:2d:e2:4d:c9:b9:00:67:
4b:01:4d:09:32:6e:ce:6b:9b:dd:c0:0c:c6:7f:5f:
a4:d4:40:7c:31:8e:c5:98:f1:b4:7e:ff:77:87:44:
ef:38:2e:5e:3c:70:29:94:69:a6:85:db:6f:54:cd:
f1:f8:0e:74:6b:ab:6f:3d:4c:c5:73:1f:a7:18:c4:
7e:56:0d:2e:71:6a:48:e9:4a:91:fb:83:30:04:ef:
87:a4:a7:62:87:f3:02:52:3a:d1:b7:a2:17:77:e7:
f7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:FE:2A:35:80:64:8D:B8:E9:76:E1:A6:A5:8E:DD:4A:75:85:C1:40
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:eb:7c:9a:66:cd:22:19:cd:43:20:3c:6d:8b:97:a5:87:03:
54:1b:6a:08:0e:31:b7:db:f1:3d:5f:95:1b:f6:1b:df:49:2f:
44:41:c5:40:ba:c9:49:b7:3f:90:94:e8:2f:f7:1a:e0:3a:e9:
84:c4:37:f1:ca:80:f2:7f:aa:ae:16:8f:35:69:34:e8:bd:c4:
12:cb:e1:d6:9d:b0:df:32:75:a1:16:6b:05:7b:4f:81:3b:5f:
95:44:9f:d6:d1:2c:23:70:8e:a3:05:e2:fe:0c:52:2f:82:de:
0e:26:23:da:1d:b9:6b:57:37:54:dc:92:84:8f:5e:6a:5c:6e:
ae:d6:77:76:7c:6a:2c:e4:4c:d6:ef:cb:45:03:6b:fb:9b:6d:
6f:f3:1f:35:07:59:a7:7f:b2:ed:50:4e:4e:35:5d:b0:bc:23:
7f:2b:49:05:ec:c7:43:e5:73:e6:f5:8f:1d:be:d6:5e:fb:15:
21:67:02:69:c9:87:86:af:43:1c:46:29:86:e7:04:91:34:27:
e7:65:f5:04:d7:9d:13:33:dc:7b:d4:a0:be:8f:8c:3e:3a:0d:
e2:3c:3b:76:25:0b:1c:08:53:a6:f6:ae:e9:82:b9:c9:42:c1:
2c:c5:1c:9a:a8:a0:ef:90:7f:0d:d5:12:53:88:2d:23:52:50:
33:83:ef:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqkAydMgcVtQUyL/KFIiagMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OTRiZjg0ZGUzNmZmYjlkOTRiMjU3ZjMyNzgxMzQxOTQx
MzM0OTgwHhcNMjYwMzAxMTgwMTMyWhcNMjYwMzAyMTgwMTMyWjAzMTEwLwYDVQQD
EyhiZmZlMmEzNTgwNjQ4ZGI4ZTk3NmUxYTZhNThlZGQ0YTc1ODVjMTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnw/0Uhua81J9n1726geW6Ix/6ca+
2GkKnG1uscTWGapAWAvIDuygwMfklAKXbsTMOyENDk/u3Q3RgnY8MO0zcNKVRk0c
u1WrzhT4Nlq3CuMbLY3iH0/R6Iuaagp8oAzKOQYz6fDnhvLMbdf1F8YfNNXyhsv+
lXdmKD6LIH5vglBDfiUK3Ra8yle7O0MKWqGVxp9GZot2AYD+mNS7sC3iTcm5AGdL
AU0JMm7Oa5vdwAzGf1+k1EB8MY7FmPG0fv93h0TvOC5ePHAplGmmhdtvVM3x+A50
a6tvPUzFcx+nGMR+Vg0ucWpI6UqR+4MwBO+HpKdih/MCUjrRt6IXd+f39wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/+KjWAZI246XbhpqWO3Up1hcFAMB8GA1UdIwQY
MBaAFBmUv4TeNv+52UslfzJ4E0GUEzSYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUt
NDZhZjNlNTBjMDUyLzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8wNGQ0YmItZWQ0Ni00MmUxLWIwNDUtNDZhZjNlNTBjMDUy
LzEvR1pTX2hONDJfN25aU3lWX01uZ1RRWlFUTkpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY+t8mmbN
IhnNQyA8bYuXpYcDVBtqCA4xt9vxPV+VG/Yb30kvREHFQLrJSbc/kJToL/ca4Drp
hMQ38cqA8n+qrhaPNWk06L3EEsvh1p2w3zJ1oRZrBXtPgTtflUSf1tEsI3COowXi
/gxSL4LeDiYj2h25a1c3VNyShI9ealxurtZ3dnxqLORM1u/LRQNr+5ttb/MfNQdZ
p3+y7VBOTjVdsLwjfytJBezHQ+Vz5vWPHb7WXvsVIWcCacmHhq9DHEYphucEkTQn
52X1BNedEzPce9Sgvo+MPjoN4jw7diULHAhTpvau6YK5yULBLMUcmqig75B/DdUS
U4gtI1JQM4Pvzg==
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:21 2026 by rpki-client