Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
File: gzdbQ66KU9SMiIZx5n_Be_J_K34.mft (raw, json)
Hash identifier: kq70+t24gh633vfLkHRiTykrNIa+HLWwtX+nXOi1F3I=
Subject key identifier: A3:FC:BA:6E:67:1A:08:67:B9:40:56:0A:BF:98:09:C0:EB:8C:39:E0
Authority key identifier: 83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
Certificate issuer: /CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Certificate serial: 019D9C2D5974BCB6422748E9588D84F9AB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 16:01:50 +0000
Manifest this update: Fri 17 Apr 2026 16:01:50 +0000
Manifest next update: Sat 18 Apr 2026 16:01:50 +0000
Files and hashes: 1: GUI2iyS6cXbhnTIBOOmswbrKBR4.roa (hash: BhZ7NYLsNrafw61nMLVYDa+lwZAq7nN5BNqq/DyfVgw=)
2: Ry4GJllYI5DHvB5rPooA3w1oNc0.roa (hash: PYYgRq8HSZWN2KMVkiANk0IFKEKURPi6wZnpn5G5E7U=)
3: gzdbQ66KU9SMiIZx5n_Be_J_K34.crl (hash: +rlaVBo/xnBCJ0ICBQBxvdJzqhqKdaQh4DuOah2pvcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:59:74:bc:b6:42:27:48:e9:58:8d:84:f9:ab:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83375b43ae8a53d48c888671e67fc17bf27f2b7e
Validity
Not Before: Apr 17 16:01:50 2026 GMT
Not After : Apr 18 16:01:50 2026 GMT
Subject: CN=a3fcba6e671a0867b940560abf9809c0eb8c39e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c6:36:23:70:03:9c:91:52:9c:41:e7:d9:2f:
e1:eb:cd:95:67:3d:63:db:a9:f1:ba:c7:26:96:0d:
a2:3b:b5:e0:2e:b4:e7:f0:79:62:a5:38:4f:32:a9:
b4:37:3d:e4:df:eb:72:ba:45:37:82:81:f5:8c:42:
35:d9:d3:4c:e8:12:58:d0:47:7f:ca:0e:9f:f9:c8:
cb:57:55:2a:98:94:77:b7:19:15:d7:2c:99:66:5a:
8c:5b:5e:7b:93:d9:96:aa:af:49:30:9e:c1:ef:73:
09:2d:7d:7e:19:f0:93:9c:90:c9:81:69:a1:a5:b1:
cf:33:34:a2:68:94:91:d0:0e:e6:a9:58:5a:ea:de:
76:ce:bd:52:c0:d9:85:9b:c6:12:b0:16:dc:da:15:
2e:65:06:94:3c:44:4a:84:41:15:a1:67:78:2e:7c:
da:14:13:5d:6e:5e:72:e0:0e:31:3f:27:ae:68:2b:
5e:39:10:04:45:eb:c2:75:10:59:43:67:e8:93:b5:
7d:56:47:fc:35:0f:49:1a:e7:ef:11:e3:7c:bf:2d:
b0:f3:8f:c7:29:e4:31:7a:90:1c:35:79:4b:01:a6:
7b:80:98:9a:ed:d0:4c:b9:9d:6f:76:cd:8f:06:bb:
d6:3b:4e:af:d3:05:84:63:a1:b5:65:05:a3:15:8c:
3e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:BA:6E:67:1A:08:67:B9:40:56:0A:BF:98:09:C0:EB:8C:39:E0
X509v3 Authority Key Identifier:
keyid:83:37:5B:43:AE:8A:53:D4:8C:88:86:71:E6:7F:C1:7B:F2:7F:2B:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzdbQ66KU9SMiIZx5n_Be_J_K34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/192bba-1a74-4ba4-90d6-72c4c4b804a7/1/gzdbQ66KU9SMiIZx5n_Be_J_K34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f2:03:c1:ae:b4:5b:17:3f:d5:82:b8:5f:1f:63:d4:08:10:
4e:4e:60:95:62:16:7e:da:1f:82:f5:ca:98:b7:fe:45:44:b6:
61:7a:5a:a4:2f:31:f8:9c:67:44:c1:e5:ac:0a:87:5e:9c:e8:
fe:c0:f1:a7:31:a6:b0:79:40:67:10:ad:44:f8:69:9a:46:36:
22:df:44:6b:de:12:30:83:36:4f:27:ec:fa:47:3b:fb:4b:12:
ad:46:f7:a4:ec:4e:ea:65:30:65:68:0c:68:e0:d5:ad:a2:7f:
d1:d6:77:68:2b:6f:fb:02:ce:2f:66:3f:79:63:48:4b:9a:ff:
d6:26:ee:ca:6f:1f:44:47:29:09:ff:e1:1b:6c:44:b5:f7:c3:
f1:13:b7:cf:de:0e:a0:7b:71:d3:af:85:1e:ae:fc:23:b6:2c:
f4:e4:6b:e9:f0:42:9e:5f:c6:f5:9c:8c:68:96:58:62:46:a9:
dc:22:9a:da:ce:bd:ae:15:07:f4:0d:5d:69:93:b2:e5:ac:8e:
c0:37:59:4e:11:f8:61:20:c5:97:a1:19:3a:2d:1f:c0:04:87:
f1:18:51:d9:6f:e3:1d:97:22:94:9d:aa:6e:8f:d7:8c:9a:c9:
b8:6f:ea:e0:fa:cf:d1:20:7c:3c:86:24:2c:07:48:c3:24:66:
3f:de:68:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:56:34 2026 by rpki-client