Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json)
Hash identifier: VDvIUgfpCAkFsuy0rpdB/6NWWGJSVY0JdfNJeeNfjOo=
Subject key identifier: 19:C7:18:E3:76:9C:21:F4:33:E2:3B:C5:DC:CC:99:67:05:4E:D6:4F
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 019CACB483E2070DB772299AAE0BC7B74A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 04:00:37 +0000
Manifest this update: Mon 02 Mar 2026 04:00:37 +0000
Manifest next update: Tue 03 Mar 2026 04:00:37 +0000
Files and hashes: 1: GUI2iyS6cXbhnTIBOOmswbrKBR4.roa (hash: BhZ7NYLsNrafw61nMLVYDa+lwZAq7nN5BNqq/DyfVgw=)
2: Ry4GJllYI5DHvB5rPooA3w1oNc0.roa (hash: PYYgRq8HSZWN2KMVkiANk0IFKEKURPi6wZnpn5G5E7U=)
3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: 7Y09JrJ4xO9zqzOt4zwLhRQIFF2ioqLwxm2DSesnvgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:83:e2:07:0d:b7:72:29:9a:ae:0b:c7:b7:4a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Mar 2 04:00:37 2026 GMT
Not After : Mar 3 04:00:37 2026 GMT
Subject: CN=19c718e3769c21f433e23bc5dccc9967054ed64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:79:35:4e:8d:e7:07:cc:7d:a0:9a:eb:6d:26:
14:e5:06:56:40:68:db:c7:46:0e:76:8f:00:87:ea:
9e:f0:17:1d:48:a9:21:23:4f:91:22:3c:ec:b2:72:
95:ce:89:73:e8:9b:19:10:e7:84:9b:96:cf:b2:66:
5a:42:e1:87:80:f6:38:91:28:94:45:07:24:2d:d2:
9d:cf:86:41:e7:34:46:55:1e:38:a1:ca:12:1f:90:
47:2a:12:87:26:8b:4b:23:2e:ea:09:c1:74:56:73:
ce:01:79:a8:ae:48:f6:35:e1:6c:71:12:75:d9:31:
fe:ff:20:d6:94:75:91:51:78:49:0a:e5:06:20:f1:
25:71:14:5b:01:f3:fe:14:5a:7a:71:aa:bd:86:24:
84:13:64:82:81:20:dd:73:e1:c4:7f:42:42:42:15:
23:11:cb:30:f5:e8:e4:67:06:91:b9:ae:fb:ac:30:
b5:02:88:50:8f:f4:1c:e8:90:f7:69:15:48:0c:67:
2e:56:3c:50:52:1e:69:c9:45:6b:ef:b6:ad:33:8c:
e7:02:22:86:96:73:a3:8e:28:63:6e:ab:67:5a:d8:
57:e7:1d:18:15:63:f6:c0:4d:c5:79:71:1e:6b:7f:
54:f6:ae:aa:43:84:cd:f6:46:e6:a8:e2:fe:c0:b4:
23:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C7:18:E3:76:9C:21:F4:33:E2:3B:C5:DC:CC:99:67:05:4E:D6:4F
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ba:69:69:7e:59:d8:ca:4d:1d:81:3c:07:a0:42:cc:3e:ad:
3c:91:90:6c:38:1a:cb:99:f7:6d:44:21:02:0f:9b:75:80:b1:
e7:b3:a7:12:c1:1a:7d:37:75:8a:23:c8:4d:1d:2c:51:c7:8a:
a8:3f:be:3c:4d:c4:08:29:5b:7a:15:30:17:b1:3f:80:85:f2:
60:62:fa:c7:50:92:f1:0d:d8:d4:0a:65:7f:df:e5:80:d0:4d:
0a:af:4d:88:0e:11:5d:94:fa:ca:e8:a7:9f:c0:a2:80:4f:36:
69:26:46:43:cd:3c:f2:4b:cd:92:53:82:46:bc:d6:61:06:33:
0a:50:af:60:9f:a7:b8:43:3f:fd:6c:58:1d:3e:a0:26:6a:6c:
66:22:4c:df:8b:63:07:4e:8e:19:96:fa:9c:2b:0a:42:0f:1c:
86:53:29:fc:ad:c9:0b:ab:dc:f2:ce:c7:c5:02:fd:16:cf:46:
ab:30:7a:cf:3e:fb:98:2d:3c:10:e8:72:8b:d5:83:c8:74:78:
54:a3:3c:91:ff:45:8a:17:11:d9:b4:b6:b7:c9:89:8b:b2:22:
2c:bc:02:ea:02:a0:47:02:b4:0e:23:d1:e4:76:a4:ef:89:6c:
fc:6d:d2:dc:91:80:d9:76:93:85:71:d2:88:46:88:16:bb:f6:
12:f4:13:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZystIPiBw23cimargvHt0otMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMzc1YjQzYWU4YTUzZDQ4Yzg4ODY3MWU2N2ZjMTdiZjI3
ZjJiN2UwHhcNMjYwMzAyMDQwMDM3WhcNMjYwMzAzMDQwMDM3WjAzMTEwLwYDVQQD
EygxOWM3MThlMzc2OWMyMWY0MzNlMjNiYzVkY2NjOTk2NzA1NGVkNjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHk1To3nB8x9oJrrbSYU5QZWQGjb
x0YOdo8Ah+qe8BcdSKkhI0+RIjzssnKVzolz6JsZEOeEm5bPsmZaQuGHgPY4kSiU
RQckLdKdz4ZB5zRGVR44ocoSH5BHKhKHJotLIy7qCcF0VnPOAXmorkj2NeFscRJ1
2TH+/yDWlHWRUXhJCuUGIPElcRRbAfP+FFp6caq9hiSEE2SCgSDdc+HEf0JCQhUj
Ecsw9ejkZwaRua77rDC1AohQj/Qc6JD3aRVIDGcuVjxQUh5pyUVr77atM4znAiKG
lnOjjihjbqtnWthX5x0YFWP2wE3FeXEea39U9q6qQ4TN9kbmqOL+wLQj7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnHGON2nCH0M+I7xdzMmWcFTtZPMB8GA1UdIwQY
MBaAFIM3W0OuilPUjIiGceZ/wXvyfyt+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xOTJiYmEtMWE3NC00YmE0LTkwZDYt
NzJjNGM0YjgwNGE3LzEvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xOTJiYmEtMWE3NC00YmE0LTkwZDYtNzJjNGM0YjgwNGE3
LzEvZ3pkYlE2NktVOVNNaUlaeDVuX0JlX0pfSzM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABLppaX5Z
2MpNHYE8B6BCzD6tPJGQbDgay5n3bUQhAg+bdYCx57OnEsEafTd1iiPITR0sUceK
qD++PE3ECClbehUwF7E/gIXyYGL6x1CS8Q3Y1Aplf9/lgNBNCq9NiA4RXZT6yuin
n8CigE82aSZGQ8088kvNklOCRrzWYQYzClCvYJ+nuEM//WxYHT6gJmpsZiJM34tj
B06OGZb6nCsKQg8chlMp/K3JC6vc8s7HxQL9Fs9GqzB6zz77mC08EOhyi9WDyHR4
VKM8kf9FihcR2bS2t8mJi7IiLLwC6gKgRwK0DiPR5Hak74ls/G3S3JGA2XaThXHS
iEaIFrv2EvQTQw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:44:20 2026 by rpki-client