Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
File: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft (raw, json)
Hash identifier: ICJqVmmgnxFoZghoIL5FteTEIV28BfXw2AP827bCegg=
Subject key identifier: 69:1B:B4:BC:9B:D6:39:FD:39:A4:C0:69:4B:E2:0E:74:9E:33:A3:69
Authority key identifier: 19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
Certificate issuer: /CN=199b3f908ce6e1764617731b624539421d13c94d
Certificate serial: 019FAA50CA54456B7540A3C2C1482CCA51F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
Manifest number: 0276
Signing time: Tue 28 Jul 2026 20:00:48 +0000
Manifest this update: Tue 28 Jul 2026 20:00:48 +0000
Manifest next update: Wed 29 Jul 2026 20:00:48 +0000
Files and hashes: 1: 1-uMLAeznJOsNAp6qe7uFTRwG1p0.asa (hash: DJBJFny1oUtx198izhqMG9CBYbGE0C4yb+lfyQ4cwO8=)
2: 9HbfhKUnZ7haZ03pPm7cMB8XKU8.roa (hash: ImuG4if+Hc6PIgHVLJaf1cQyzFqgiLjKr6z/klhg4eU=)
3: GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl (hash: 6jPTStSWjQ16b936BrcTV0HWEvXduBDdaQIJgt9tfrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:ca:54:45:6b:75:40:a3:c2:c1:48:2c:ca:51:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199b3f908ce6e1764617731b624539421d13c94d
Validity
Not Before: Jul 28 20:00:48 2026 GMT
Not After : Jul 29 20:00:48 2026 GMT
Subject: CN=691bb4bc9bd639fd39a4c0694be20e749e33a369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:61:a4:4d:37:37:8f:bb:93:02:2a:67:91:87:
d1:8d:62:8b:75:e7:c7:94:b8:2a:8e:ad:21:cd:56:
d6:0b:0f:bf:c5:b8:a9:3c:0f:5e:45:d4:35:b3:01:
0f:c5:0f:5f:84:b5:0c:42:a1:7d:61:e1:4a:08:50:
7e:b4:d5:f6:3f:77:37:2e:5e:84:ff:02:54:30:f9:
22:b7:8a:b6:c9:37:2b:96:bf:e8:59:30:c6:9c:f2:
6b:fe:06:7c:75:40:0f:87:ab:42:5b:6b:33:10:52:
0b:30:55:9a:9d:9a:91:3a:1a:3a:fb:28:16:cc:c4:
4a:36:3c:4d:2b:3e:9a:73:7c:bf:53:07:5e:a3:83:
84:52:8f:92:cc:0c:2b:e8:e3:fa:50:57:ff:d2:55:
7c:28:11:79:99:c4:6f:60:d1:72:39:3a:1f:98:8a:
3e:7b:47:89:de:37:5f:e7:d5:37:66:d5:ce:f8:bc:
e8:a2:ed:33:8e:09:20:f5:e4:f2:f2:e8:f1:69:ae:
f6:1a:12:b0:21:24:f5:de:ef:05:1f:51:e2:18:8f:
b2:4d:7a:83:5c:f2:60:27:d2:22:ee:c2:84:af:a7:
f7:df:8c:43:93:3c:b3:d3:93:62:54:55:b4:07:24:
08:70:c5:fb:d6:10:0c:dd:8b:e5:bc:aa:7d:b7:0a:
2b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:1B:B4:BC:9B:D6:39:FD:39:A4:C0:69:4B:E2:0E:74:9E:33:A3:69
X509v3 Authority Key Identifier:
keyid:19:9B:3F:90:8C:E6:E1:76:46:17:73:1B:62:45:39:42:1D:13:C9:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0e8715-d87e-4ce5-9482-2e97aba0fb2c/1/GZs_kIzm4XZGF3MbYkU5Qh0TyU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6d:08:f2:5a:ea:91:21:a1:65:67:28:ad:08:da:71:3c:9a:
32:41:5b:97:5f:f9:43:d5:29:38:23:4f:f4:31:d6:22:b8:ce:
8d:9a:3d:38:b3:98:92:47:41:61:fa:15:8d:16:f7:02:f7:8d:
32:29:32:e3:c4:21:03:a9:5d:35:ae:9c:e6:6c:c2:7d:0c:37:
25:a7:3f:3a:f4:26:cc:15:d4:fd:da:91:1d:9f:55:93:ab:cc:
34:1d:55:63:d0:5e:20:29:7d:8a:4b:4f:b2:22:74:a7:02:d0:
ae:fd:35:4f:35:b2:51:ec:09:bd:eb:46:3b:55:43:aa:e9:72:
25:87:79:71:0a:d9:12:9d:15:84:64:dd:be:4b:4b:74:ab:88:
ed:df:ed:a2:3e:7a:7a:31:f4:ca:d2:a8:f7:06:14:f8:a0:32:
80:f2:1b:a3:b0:74:18:66:d5:53:26:bf:c5:f4:8d:d1:e5:5c:
b5:bb:67:2f:8f:77:5b:ee:ae:f9:c1:ff:da:01:58:89:84:bf:
81:0a:a8:65:1c:78:5d:01:c0:40:63:0b:41:86:44:a9:57:45:
02:72:e0:a9:c7:6e:15:82:90:e9:b7:49:48:f8:70:f0:68:0e:
14:e4:4a:be:1c:1f:47:b9:f2:76:0f:11:9e:36:72:28:f0:85:
73:eb:70:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:55:59 2026 by rpki-client