Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: UeKcZml5f6e/JGPu8pdRj8BuZtOtK3NKBkli8Amszw0=
Subject key identifier: 8C:3D:25:52:2D:A2:B5:F7:64:DB:B7:A2:5A:14:F1:49:0D:F1:EC:88
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 019EC25C435F7EA69D7FE7322C89E4D7F977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 19:01:26 +0000
Manifest this update: Sat 13 Jun 2026 19:01:26 +0000
Manifest next update: Sun 14 Jun 2026 19:01:26 +0000
Files and hashes: 1: Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa (hash: 4BYNISLW+6a1Rm7fYvPimlxLy4jJM2Fwgwu5hoZNF4o=)
2: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: uFIEED1w0v11jva9Ax0CMlzO6YMOj4DNdTjV9O+Zgug=)
3: JlkD4EYy4fdjW9cybX6Rmv1PhMI.roa (hash: pUW2Tt4TUNvQKWWScIb3hItHUaVoXgsVYQO1UFGRry8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5c:43:5f:7e:a6:9d:7f:e7:32:2c:89:e4:d7:f9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Jun 13 19:01:26 2026 GMT
Not After : Jun 14 19:01:26 2026 GMT
Subject: CN=8c3d25522da2b5f764dbb7a25a14f1490df1ec88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:08:17:89:95:48:8c:55:c1:5f:2f:93:72:67:
e6:2c:ac:90:da:09:fe:64:8d:08:c7:07:29:64:bd:
37:db:23:10:d4:91:c1:07:ee:21:b4:a9:95:c3:aa:
c7:a9:44:bd:f3:e1:a5:32:22:43:7d:11:bf:20:5b:
d0:67:e9:d9:95:c3:ec:a2:55:b0:0e:27:72:5b:ac:
56:9f:f6:57:ca:78:3c:42:af:82:b1:76:6f:b4:fb:
b3:8f:f2:53:ba:b2:07:a4:56:e5:5a:9d:b2:1b:42:
12:af:be:b3:d6:6a:3d:1d:19:7f:e8:fb:49:60:1a:
9e:a0:02:27:e9:15:c3:8b:ec:7b:ba:66:d7:48:c1:
5d:93:34:d5:37:c0:69:8c:09:cd:60:86:71:4f:80:
cf:17:fe:8c:73:2d:91:9d:db:ea:af:8e:58:be:40:
00:47:1a:68:b8:3d:32:85:c1:e3:43:7f:31:98:ef:
d6:0f:cd:84:21:47:60:f2:62:c7:de:3f:f9:12:6a:
7f:00:14:86:8d:ee:79:b4:40:d3:4f:73:4b:0c:d1:
c4:55:0f:ff:08:35:90:ab:6d:1c:a7:53:39:0f:a3:
02:ea:7a:3e:d3:0d:00:fa:f6:a1:01:28:fc:0a:6b:
49:22:b3:53:a2:6a:b5:4a:27:11:33:85:d0:9b:24:
4f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:3D:25:52:2D:A2:B5:F7:64:DB:B7:A2:5A:14:F1:49:0D:F1:EC:88
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:51:ee:2b:0a:09:7d:d0:ab:2f:69:6b:cc:82:51:6d:0e:ed:
15:be:52:51:54:ab:93:9a:38:ad:b1:a9:0e:ce:3f:90:28:4e:
f5:c6:33:37:58:50:d0:03:15:fa:22:76:ad:c9:d4:91:f0:97:
eb:53:d6:c9:d2:0c:6c:1d:99:a7:44:d1:70:e1:9a:af:36:7e:
81:1e:60:29:e7:ee:67:a6:63:e9:22:fe:c9:7a:5f:f1:c7:dc:
88:01:bb:df:61:9d:76:7c:1e:a0:42:cd:91:16:2e:96:a4:59:
84:a1:25:96:61:ee:2d:47:72:5a:ed:1e:ba:bd:98:83:4d:d0:
db:d6:71:af:9b:fb:36:17:de:59:16:9a:cd:28:a2:15:a9:70:
f8:e8:9f:52:88:0c:c3:93:4d:95:9c:3a:88:a4:ef:04:43:ab:
b3:f6:db:00:f4:ef:ff:d2:af:f1:22:01:ac:7c:70:24:04:26:
fa:87:11:d2:13:d8:9b:59:e5:d4:b2:00:60:a2:38:09:14:94:
0d:61:2b:a5:14:be:7d:7e:f0:05:e6:89:ed:fb:50:9e:16:3c:
82:ba:26:c2:16:cc:51:ef:2e:03:6c:68:3a:90:ce:99:a3:07:
19:d3:cd:bb:ae:71:f0:0c:fa:ec:1a:c8:59:51:b5:10:1a:bc:
8e:93:8f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:53:59 2026 by rpki-client