Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
File: GzaOcCad5mDLwU35x2OwGHiKH_w.mft (raw, json)
Hash identifier: gTaH/3tZgUMRULKylX6TuZ+7ooGoy7ACYjYyYaCCnsM=
Subject key identifier: 4B:7E:C2:3A:B8:3D:BB:AB:97:1B:31:34:1D:67:C0:70:EB:59:08:A9
Authority key identifier: 1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
Certificate issuer: /CN=1b368e70269de660cbc14df9c763b018788a1ffc
Certificate serial: 019D9AE3835307DA748B868DE4D85AC70755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 10:01:34 +0000
Manifest this update: Fri 17 Apr 2026 10:01:34 +0000
Manifest next update: Sat 18 Apr 2026 10:01:34 +0000
Files and hashes: 1: Fnw0zHvzoat7GHpkTi7K_GI8Buw.roa (hash: 4BYNISLW+6a1Rm7fYvPimlxLy4jJM2Fwgwu5hoZNF4o=)
2: GzaOcCad5mDLwU35x2OwGHiKH_w.crl (hash: /uCQ+C67ONV53hEjJ6HEcMMJEi9S3KWDMSXQQVyTZ/M=)
3: JlkD4EYy4fdjW9cybX6Rmv1PhMI.roa (hash: pUW2Tt4TUNvQKWWScIb3hItHUaVoXgsVYQO1UFGRry8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:83:53:07:da:74:8b:86:8d:e4:d8:5a:c7:07:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368e70269de660cbc14df9c763b018788a1ffc
Validity
Not Before: Apr 17 10:01:34 2026 GMT
Not After : Apr 18 10:01:34 2026 GMT
Subject: CN=4b7ec23ab83dbbab971b31341d67c070eb5908a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:43:32:a3:29:64:cf:3a:fc:ef:85:f5:0f:ca:
ae:20:4b:73:83:f4:ff:c1:04:db:af:33:c6:4f:e4:
f1:42:d7:8e:01:94:d8:ad:a4:9a:85:22:20:d0:15:
61:bd:1b:ad:10:ab:5c:be:c9:b6:80:3c:b2:dc:8c:
33:3e:7a:3f:c1:e1:68:90:c7:83:2b:d8:e6:08:a1:
4b:a7:aa:00:0c:a8:9a:8b:45:40:27:69:15:c6:08:
3c:cc:2f:b1:f0:fa:96:ae:5e:88:78:6f:2c:f3:88:
41:ff:df:4e:45:bf:2d:64:33:2c:1f:82:16:84:61:
57:ab:b3:da:f2:db:46:01:3f:0e:a6:89:14:c2:ba:
73:a2:29:d3:e1:bc:39:29:99:13:7b:b6:3b:6d:a0:
9c:fd:4d:ca:5f:83:81:33:76:87:ef:b0:9e:d0:c8:
7a:6a:24:29:2e:03:6b:c8:8c:30:e2:e6:6d:56:d4:
1f:73:cd:7a:88:8b:d5:55:b2:93:04:f4:27:fb:3e:
2b:83:f8:32:ca:b6:22:40:16:70:72:7a:a4:54:3b:
67:1e:dd:b4:60:f7:37:f3:9d:8b:98:e4:0e:85:a5:
30:9f:6e:cf:4a:a1:c2:16:7c:5e:ec:3c:92:ed:59:
94:88:66:4f:9d:c2:7a:1e:69:ac:3a:8d:0b:0b:e7:
72:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7E:C2:3A:B8:3D:BB:AB:97:1B:31:34:1D:67:C0:70:EB:59:08:A9
X509v3 Authority Key Identifier:
keyid:1B:36:8E:70:26:9D:E6:60:CB:C1:4D:F9:C7:63:B0:18:78:8A:1F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaOcCad5mDLwU35x2OwGHiKH_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f65960-b03c-498c-b6d5-60951e97588c/1/GzaOcCad5mDLwU35x2OwGHiKH_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fd:31:bf:9d:4f:87:97:5f:65:5c:da:3f:7f:35:2d:0c:fa:
41:2b:58:1b:1c:a5:21:33:05:dd:d7:d5:84:a3:3c:b7:04:07:
fa:33:1d:c5:36:64:b1:9d:60:70:35:6a:fc:bc:48:7a:f3:9a:
13:a9:03:27:b8:51:df:81:52:4e:f2:ca:7f:ad:d2:f0:47:a1:
37:c6:09:80:6d:49:3a:a8:2d:74:22:b4:d8:8d:13:db:0a:33:
cd:77:59:e4:f5:a2:20:e5:e4:c5:8a:f7:01:13:87:8c:d6:d9:
94:ba:45:29:15:81:40:9d:44:5a:03:ae:d6:d8:27:00:e0:4e:
78:2a:a6:95:d4:1d:23:70:4e:85:d5:10:c4:ac:cf:67:83:8d:
d0:ba:71:c9:13:47:91:64:ec:54:9f:13:5b:99:90:00:2f:3d:
10:31:65:df:12:f5:04:8d:46:0a:0c:85:73:91:38:7c:a5:7b:
d8:d6:7a:0c:29:98:7f:44:a2:0e:ca:13:6c:cb:22:ff:35:35:
32:1a:5c:ba:18:08:87:a9:fc:20:1e:89:ae:d7:c4:a4:6a:a2:
76:79:78:b0:c3:e7:42:56:92:4d:20:84:c5:d6:9f:68:61:9f:
4b:96:17:b0:dd:8f:6b:86:23:71:d3:e6:d5:ae:b8:d7:f6:e3:
4f:68:58:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a44NTB9p0i4aN5NhaxwdVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMzY4ZTcwMjY5ZGU2NjBjYmMxNGRmOWM3NjNiMDE4Nzg4
YTFmZmMwHhcNMjYwNDE3MTAwMTM0WhcNMjYwNDE4MTAwMTM0WjAzMTEwLwYDVQQD
Eyg0YjdlYzIzYWI4M2RiYmFiOTcxYjMxMzQxZDY3YzA3MGViNTkwOGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEMyoylkzzr874X1D8quIEtzg/T/
wQTbrzPGT+TxQteOAZTYraSahSIg0BVhvRutEKtcvsm2gDyy3IwzPno/weFokMeD
K9jmCKFLp6oADKiai0VAJ2kVxgg8zC+x8PqWrl6IeG8s84hB/99ORb8tZDMsH4IW
hGFXq7Pa8ttGAT8OpokUwrpzoinT4bw5KZkTe7Y7baCc/U3KX4OBM3aH77Ce0Mh6
aiQpLgNryIww4uZtVtQfc816iIvVVbKTBPQn+z4rg/gyyrYiQBZwcnqkVDtnHt20
YPc3852LmOQOhaUwn27PSqHCFnxe7DyS7VmUiGZPncJ6HmmsOo0LC+dylwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEt+wjq4PburlxsxNB1nwHDrWQipMB8GA1UdIwQY
MBaAFBs2jnAmneZgy8FN+cdjsBh4ih/8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mNjU5NjAtYjAzYy00OThjLWI2ZDUt
NjA5NTFlOTc1ODhjLzEvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9mNjU5NjAtYjAzYy00OThjLWI2ZDUtNjA5NTFlOTc1ODhj
LzEvR3phT2NDYWQ1bURMd1UzNXgyT3dHSGlLSF93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcv0xv51P
h5dfZVzaP381LQz6QStYGxylITMF3dfVhKM8twQH+jMdxTZksZ1gcDVq/LxIevOa
E6kDJ7hR34FSTvLKf63S8EehN8YJgG1JOqgtdCK02I0T2wozzXdZ5PWiIOXkxYr3
AROHjNbZlLpFKRWBQJ1EWgOu1tgnAOBOeCqmldQdI3BOhdUQxKzPZ4ON0LpxyRNH
kWTsVJ8TW5mQAC89EDFl3xL1BI1GCgyFc5E4fKV72NZ6DCmYf0SiDsoTbMsi/zU1
MhpcuhgIh6n8IB6JrtfEpGqidnl4sMPnQlaSTSCExdafaGGfS5YXsN2Pa4YjcdPm
1a641/bjT2hY6g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:02:01 2026 by rpki-client