Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: ol6DqeCQZEzo84SuNA5scwki3QhG5JBsBZdHf41PKlA=
Subject key identifier: 7F:50:53:2E:F5:84:7E:08:93:E0:50:CF:B6:92:6A:43:FF:D2:DE:DF
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 01A0DF180B4FD6207FEDD9E34BB0C5DED43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 1A78
Signing time: Sat 26 Sep 2026 19:01:29 +0000
Manifest this update: Sat 26 Sep 2026 19:01:29 +0000
Manifest next update: Sun 27 Sep 2026 19:01:29 +0000
Files and hashes: 1: Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa (hash: 4BYNISLW+6a1Rm7fYvPimlxLy4jJM2Fwgwu5hoZNF4o=)
2: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: fT56kj8hGlJVgcqcqZRrg7ldiuLRk2GiJHZbJBqA+LA=)
3: JlkD4EYy4fdjW9cybX6Rmv1PhMI.roa (hash: pUW2Tt4TUNvQKWWScIb3hItHUaVoXgsVYQO1UFGRry8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:18:0b:4f:d6:20:7f:ed:d9:e3:4b:b0:c5:de:d4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Sep 26 19:01:29 2026 GMT
Not After : Sep 27 19:01:29 2026 GMT
Subject: CN=7f50532ef5847e0893e050cfb6926a43ffd2dedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:65:13:7c:25:8c:74:5f:07:74:57:a8:8c:
9b:e6:72:c6:a6:ee:c2:2f:91:55:9a:1b:fc:6b:c6:
45:f7:1e:dc:d6:cd:28:ca:c0:1e:99:51:74:f3:d2:
b8:fa:54:14:7e:82:43:41:bd:60:b6:50:bc:d2:04:
9e:3d:6f:8a:b1:63:d2:81:5c:90:99:6b:24:3d:c6:
e2:08:15:a6:e6:64:54:52:ac:aa:7f:b1:22:24:02:
cf:91:34:eb:1d:fc:78:68:d9:c1:7f:a6:8c:93:d4:
9c:8b:2d:a9:ba:15:96:5b:ff:55:f8:51:3b:d8:f3:
8c:bd:c4:31:73:d4:5f:5e:bb:45:f8:de:2e:2d:e4:
a5:af:90:71:d4:08:33:f5:f0:b3:fc:65:41:22:25:
b1:90:3f:71:bc:1b:f4:69:a6:af:e9:82:e4:e5:0b:
86:8f:bf:19:63:54:d9:64:4f:04:e7:96:f6:7f:f9:
6c:8b:35:a1:e9:d4:a9:c1:04:cb:93:19:fc:ae:ef:
c2:a3:c2:22:d4:d6:37:96:84:cc:09:34:a6:dd:1e:
15:ac:a4:43:c6:03:eb:93:0a:4a:6f:e8:4c:04:9c:
1f:4c:e2:fb:1e:17:dc:da:b3:b0:d3:0a:6b:84:bd:
77:ce:14:23:8a:9c:11:0c:20:0b:4f:04:ba:80:0f:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:50:53:2E:F5:84:7E:08:93:E0:50:CF:B6:92:6A:43:FF:D2:DE:DF
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b3:e0:45:d1:08:4b:35:0f:0d:0c:16:89:93:ad:ae:bb:b0:
19:5b:7b:8b:d6:48:bc:cf:da:4d:cc:f8:97:a4:9d:ce:aa:a9:
cf:3d:2e:d9:cd:76:e2:81:e4:0c:cb:44:af:9a:94:92:0e:6e:
f2:99:08:49:ba:37:10:bc:fc:42:b6:84:60:3e:80:ac:ab:1a:
d9:9e:a3:69:fd:ce:88:75:34:6f:ec:0c:17:14:4d:2b:17:90:
47:c5:7e:2a:11:b9:29:43:1b:11:d5:a3:e3:a1:e2:ea:03:1c:
06:ef:bf:a5:3d:b3:1a:ea:32:4c:36:4d:64:8c:23:56:f5:74:
be:8b:29:71:69:95:cd:29:b4:ed:f8:ca:ae:6f:84:19:c8:ae:
30:bf:1f:5a:3d:1e:bb:44:01:14:f2:d9:00:21:fe:97:ab:c8:
fe:e3:44:14:0c:39:57:5c:80:72:8b:df:87:33:d1:5a:81:26:
38:00:ea:36:d2:66:ae:82:70:7c:3c:85:6a:f0:88:90:27:a7:
88:f4:dd:89:b4:81:e8:59:dc:3b:40:7c:b4:33:f3:28:e3:08:
7f:34:4e:24:0a:98:1a:ae:7e:eb:8f:f6:9b:13:2c:d4:a1:7c:
74:e9:68:db:68:63:04:cf:87:33:50:75:bb:4b:72:22:82:f6:
be:cd:10:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:33:04 2026 by rpki-client