Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
File: GZS_hN42_7nZSyV_MngTQZQTNJg.mft (raw, json)
Hash identifier: n1AcvoRg+axeGqyheMoIKscqkibyNlVurlNPMN3O5ek=
Subject key identifier: EF:FA:73:1B:71:30:1B:4E:8E:26:19:5D:C4:C9:3D:AF:74:61:6F:B0
Authority key identifier: 19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
Certificate issuer: /CN=1994bf84de36ffb9d94b257f3278134194133498
Certificate serial: 019D9818581B8DEFE2563D17D099BEAA0CB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
Manifest number: 04F9
Signing time: Thu 16 Apr 2026 21:00:25 +0000
Manifest this update: Thu 16 Apr 2026 21:00:25 +0000
Manifest next update: Fri 17 Apr 2026 21:00:25 +0000
Files and hashes: 1: GZS_hN42_7nZSyV_MngTQZQTNJg.crl (hash: d9k+tvOdiUDuOxbLTp6wRpT9rpbOtW4pcuFeiTEOYBk=)
2: gdwYYL9CsGDFTkAuG8S2liyK-r0.roa (hash: S6etNmQi4pEy1ZdQxxbNiQYv530X1B2bmlUtb5h29UQ=)
3: rM0uTZNoLmKtjZkk_tSk7q-w9BI.roa (hash: dwD/35OeBK2EzCg4af00B6g6AoSl3HcpyQOtzC0IokY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:58:1b:8d:ef:e2:56:3d:17:d0:99:be:aa:0c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1994bf84de36ffb9d94b257f3278134194133498
Validity
Not Before: Apr 16 21:00:25 2026 GMT
Not After : Apr 17 21:00:25 2026 GMT
Subject: CN=effa731b71301b4e8e26195dc4c93daf74616fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:8c:6e:a0:dc:34:5e:92:1e:e2:d7:0e:4a:
c0:f8:d4:2e:f3:d3:f6:80:ff:db:3d:5e:d0:e8:93:
31:b7:b8:75:3c:ec:32:2a:46:1e:8b:56:7f:0e:f9:
ff:6e:8e:4e:1a:41:ee:e3:72:5d:b0:d3:c9:6d:53:
2d:85:1d:4d:64:df:7c:7d:ab:f5:16:2e:c1:a4:5c:
32:ed:e4:9e:d1:be:bc:84:4a:6e:6c:e1:dc:ce:fc:
38:80:eb:9f:ac:8a:e7:48:c8:f4:91:6a:54:a6:00:
58:0e:d6:e0:64:74:e4:2e:17:3c:a1:53:4c:1f:ee:
26:e7:9b:0e:a7:6d:8e:36:c6:59:ad:c5:3e:ed:d4:
96:a8:cb:25:07:c5:c0:b8:c5:a1:9e:63:8e:65:57:
b0:d3:39:b6:de:f6:8b:db:61:36:6f:d9:93:6f:c5:
a3:31:9a:79:63:95:b7:01:20:3c:0d:01:39:38:7d:
a8:72:51:53:ab:1a:4e:91:39:f4:81:76:49:4f:e7:
e5:ec:10:bd:34:f1:bf:87:97:94:13:20:69:4a:57:
69:13:73:e6:61:f7:0e:77:6d:63:b7:3c:61:0c:70:
f6:b7:87:ae:8f:52:e4:2c:ce:f1:40:25:3f:18:a4:
c9:ac:95:9e:7f:b0:34:a8:7a:a0:1d:a8:d4:54:f2:
65:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FA:73:1B:71:30:1B:4E:8E:26:19:5D:C4:C9:3D:AF:74:61:6F:B0
X509v3 Authority Key Identifier:
keyid:19:94:BF:84:DE:36:FF:B9:D9:4B:25:7F:32:78:13:41:94:13:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZS_hN42_7nZSyV_MngTQZQTNJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/04d4bb-ed46-42e1-b045-46af3e50c052/1/GZS_hN42_7nZSyV_MngTQZQTNJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e2:84:0e:00:71:23:85:b2:ab:93:6d:cf:f4:fc:85:54:82:
4b:de:93:89:e7:94:7f:f7:b8:c5:90:3b:02:ca:f7:a3:fc:67:
7d:20:38:26:a4:18:eb:15:7b:67:c6:26:df:08:dd:ee:e1:53:
0d:f2:b5:a7:d9:dd:14:b0:87:3f:ec:c9:0b:ce:2d:f3:22:fd:
04:d0:e5:24:b8:34:dc:0f:40:d0:b4:f2:ee:e2:86:ab:1d:1b:
31:32:3e:c0:54:57:c5:a9:4c:10:f8:55:17:0d:66:59:4b:86:
dc:a4:b6:b8:1e:ca:33:6c:63:ac:64:15:d2:5a:8c:95:42:aa:
af:58:48:45:6d:5a:57:e2:d1:8b:8c:5f:dd:4d:62:57:86:c5:
47:7f:c7:65:f6:b3:29:b4:37:19:5e:3e:84:88:15:27:88:48:
ef:93:d6:ad:5f:75:3f:c0:66:8d:82:19:ca:15:c7:8c:81:6d:
77:e7:24:99:ba:cb:eb:f7:96:40:a5:6c:48:3f:b1:b8:a8:1a:
53:b0:a4:c3:22:f6:6d:bd:dc:87:46:79:3c:20:bd:65:1e:11:
1d:1d:6f:f3:93:fb:51:1e:4c:ca:95:70:32:8f:9b:03:99:e7:
e0:13:e8:1e:ae:5a:99:c5:41:30:2c:89:03:14:e6:73:7c:23:
c4:7b:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:02 2026 by rpki-client