Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
File: gZkBtk_iJla48tsmC0U_J5NSt9A.mft (raw, json)
Hash identifier: gN5M65gjJjvr7+FHzf7ogpHc+hX8DvYh1anMMd/rzfM=
Subject key identifier: 66:97:27:A8:C1:E9:FD:05:4E:35:6D:5E:D1:79:28:8E:9C:16:4B:13
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 019CAA8F5647710452314C98C1CD64CEDAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
Manifest number: 170A
Signing time: Sun 01 Mar 2026 18:00:46 +0000
Manifest this update: Sun 01 Mar 2026 18:00:46 +0000
Manifest next update: Mon 02 Mar 2026 18:00:46 +0000
Files and hashes: 1: QDfTLxIL9bTs2IJHGbG9J1JYEvI.roa (hash: gdEjWQnWjf/YDqv1eeE481wpqiSUZPqETZ8kJJFiZJE=)
2: gZkBtk_iJla48tsmC0U_J5NSt9A.crl (hash: QKkJL8CJH2LAe7TZ7uk9EG/zsU8FGisHgEGEAf2YuJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:56:47:71:04:52:31:4c:98:c1:cd:64:ce:da:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Mar 1 18:00:46 2026 GMT
Not After : Mar 2 18:00:46 2026 GMT
Subject: CN=669727a8c1e9fd054e356d5ed179288e9c164b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:56:b6:fd:5a:14:d1:03:6c:3a:f5:fc:87:b2:
cc:e5:94:d9:52:e5:2d:fc:ed:a9:16:21:dc:1a:02:
1b:a8:79:e4:32:86:bc:28:48:7c:ad:c0:c1:cc:82:
35:7c:79:f3:c7:9c:3f:d4:81:7f:6b:a9:0c:dc:a2:
4b:55:bc:35:68:d6:fe:36:86:69:61:71:ac:fa:e0:
e1:09:cc:9f:58:bd:7f:0f:04:7e:20:eb:83:c6:d5:
ba:2e:4a:5f:67:0e:e7:04:0a:3f:84:46:8c:18:01:
c8:fe:4e:9f:a8:58:6d:e5:c5:f1:84:e1:84:eb:1c:
7b:91:44:1e:52:54:1b:96:04:7f:77:f3:17:7b:98:
26:2d:9e:59:cf:f6:ba:30:93:a8:70:00:5f:b4:ee:
a0:23:34:b9:bf:4c:24:45:00:d0:56:9a:04:15:9f:
7d:44:4e:84:3a:da:c8:86:3d:4f:11:4f:d3:80:e7:
4a:be:38:93:72:5a:18:14:44:45:ba:c7:bf:00:23:
45:c8:3e:ee:20:02:81:76:2e:c5:65:00:f1:a8:02:
1f:d2:47:a3:36:a1:18:e0:13:67:64:15:f6:ea:a9:
b4:c9:71:b7:9f:76:f5:1e:76:3b:47:85:7c:cc:2a:
bb:9f:08:d8:b3:df:67:45:a2:ed:12:ba:15:4a:64:
ee:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:97:27:A8:C1:E9:FD:05:4E:35:6D:5E:D1:79:28:8E:9C:16:4B:13
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ba:2e:43:e1:d2:ad:9c:19:40:bf:be:10:6b:27:81:bd:bf:
67:48:8b:cb:70:a5:f3:25:25:46:04:2f:6f:23:11:50:82:5f:
27:74:87:d0:a3:33:04:0d:a4:27:d4:a9:31:81:33:49:5f:52:
63:6d:60:65:ba:93:7f:72:06:1d:8b:da:05:3a:f8:e3:e9:39:
cc:fc:27:c1:ab:5b:59:b7:8e:c1:93:c9:74:04:37:e7:10:fb:
d6:4f:fb:d0:28:89:37:b8:69:c9:bc:fa:6b:48:d8:ff:ec:8d:
1c:e2:cf:74:b6:17:1d:6d:81:81:97:ae:10:cb:51:eb:dd:1e:
57:05:16:8d:b7:07:d0:5f:81:03:2e:80:f1:c3:d4:81:e1:96:
7e:db:67:7b:4a:74:e6:ea:2f:49:ea:05:84:e8:12:27:5b:41:
d8:a6:1a:3c:df:3b:15:f6:57:53:a4:29:8c:f6:0c:1b:a6:22:
f3:a1:fb:9d:a5:70:03:5d:0e:28:89:84:f8:7f:83:46:d0:74:
54:a8:66:88:e7:81:67:d6:81:68:a0:85:43:4a:c8:ab:ce:46:
22:97:b2:e8:84:bf:06:7c:ff:60:90:aa:68:68:81:aa:ef:6b:
3f:f0:eb:f0:3d:7f:ae:34:9a:0e:d9:37:4e:5a:6b:0d:31:32:
1c:46:22:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:13 2026 by rpki-client