
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
File: GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json)
Hash identifier: g0dtBIbOPmKOHZ78xzdPYCpg41ZAu7RvSOJ05381vh4=
Subject key identifier: 59:7F:8C:AA:62:51:5C:9C:A3:C4:A4:E6:C6:5F:CB:A2:EA:20:C9:39
Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
Certificate issuer: /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Certificate serial: 019D9886BB2E157911EC33E92EF1A041E7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
Manifest number: 06CA
Signing time: Thu 16 Apr 2026 23:00:59 +0000
Manifest this update: Thu 16 Apr 2026 23:00:59 +0000
Manifest next update: Fri 17 Apr 2026 23:00:59 +0000
Files and hashes: 1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: 9ZtWOc9LaXLXoY4V74/6li6mLpM7eUE4Advi1vfVpno=)
2: rkyTFWOAnwX3F8qqO766n2upPq4.roa (hash: Lqt7F3+mbWjOVp+tT8JH700oKwS5LDilWe3XGrT0PWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:bb:2e:15:79:11:ec:33:e9:2e:f1:a0:41:e7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Validity
Not Before: Apr 16 23:00:59 2026 GMT
Not After : Apr 17 23:00:59 2026 GMT
Subject: CN=597f8caa62515c9ca3c4a4e6c65fcba2ea20c939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:11:84:bd:65:d4:48:bd:c5:b2:25:a8:d3:34:
43:28:65:e6:6e:7b:ab:23:15:f7:17:c2:40:34:c8:
84:f8:b1:d1:b6:38:cf:fc:3a:1e:33:56:b5:33:d7:
6f:d5:c8:57:c7:3b:2a:0c:5b:c3:72:92:81:f7:40:
26:c4:a8:52:fa:ae:7a:97:a6:d1:50:54:7a:c5:b5:
10:28:09:c2:43:40:c8:10:b2:b3:70:ec:f1:83:84:
3b:dd:10:53:c7:de:42:a3:aa:bf:3b:8b:3a:41:e6:
60:8a:51:e2:24:c8:94:0a:9c:6f:c5:88:48:7e:3d:
02:19:03:b1:1a:37:5a:61:25:63:8d:d4:b6:7c:dc:
5b:72:bb:34:d0:e3:61:d4:32:fd:35:53:b9:01:73:
4a:51:f8:57:c5:c9:56:6f:16:d1:a6:9a:84:dc:47:
65:7d:f1:32:14:cd:65:53:dd:a5:fa:c7:42:9b:5d:
aa:29:30:64:b1:ba:e2:55:57:ce:57:00:3c:f3:a4:
3a:dd:10:f0:a3:6c:d6:62:e7:75:d3:80:25:70:a0:
0b:e7:e0:f0:dc:1f:0b:84:6b:ad:1a:39:12:a7:fb:
52:78:fa:ee:3b:75:73:6f:2e:22:72:c3:03:8c:5a:
39:1b:fc:d6:4a:d9:1c:88:f9:b7:ec:21:be:48:54:
77:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7F:8C:AA:62:51:5C:9C:A3:C4:A4:E6:C6:5F:CB:A2:EA:20:C9:39
X509v3 Authority Key Identifier:
keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:52:2c:09:c8:26:13:2c:f7:d4:4b:a4:09:6f:41:b8:b5:ba:
95:16:46:3f:04:c6:12:37:33:fe:4d:c6:19:bf:92:99:28:3a:
f4:dd:53:5a:5a:bf:7a:be:07:94:5a:70:9d:d9:34:3c:57:f8:
18:da:be:2e:f8:c4:55:eb:86:c7:76:d4:41:ee:4f:75:1e:73:
bf:95:70:88:ca:5c:ce:94:09:b6:8d:60:74:95:e0:a4:04:47:
b9:c1:bb:5b:fa:2b:b2:7d:ac:47:37:a7:3c:53:4e:df:27:6b:
a1:e2:6d:70:49:bc:d0:dd:d6:c5:00:48:26:1b:93:be:6a:90:
52:b5:14:35:a0:fd:b6:9a:d9:22:44:b8:2f:02:59:8e:ad:99:
d9:33:83:ff:d6:a7:9d:b4:f7:fa:8e:38:58:96:72:52:2a:5d:
62:f6:5a:f6:5c:fa:a2:e9:0c:50:c4:e0:67:1a:df:29:c6:7d:
04:68:75:2e:b4:ee:df:28:82:e4:c7:5a:79:1b:90:af:67:7f:
97:de:80:89:20:f8:81:b9:f8:65:f4:4c:80:6b:dd:1e:19:06:
e2:25:4c:bc:16:d3:17:f2:97:38:a1:7a:b4:c5:38:cf:f9:24:
d3:2e:14:3b:53:69:7a:51:fc:d2:df:09:24:75:78:5a:1a:18:
cd:2d:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:08:54 2026 by rpki-client