Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
File: GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft (raw, json)
Hash identifier: LCg9nxuuk/7Nk9N01xIh88hrSPLH+ZDcRVYhv7DOT8s=
Subject key identifier: 8C:DC:51:14:BC:86:35:AC:87:DA:F2:6D:10:5F:11:3D:2F:7F:75:52
Authority key identifier: 1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
Certificate issuer: /CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Certificate serial: 019CAAFCFE08B566BE79C0CDBD03FE1DDCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
Manifest number: 064F
Signing time: Sun 01 Mar 2026 20:00:32 +0000
Manifest this update: Sun 01 Mar 2026 20:00:32 +0000
Manifest next update: Mon 02 Mar 2026 20:00:32 +0000
Files and hashes: 1: GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl (hash: 4hR2cYlZE15bKtO/Z7tRQL5sYXwedyb8r5YesohhYo0=)
2: rkyTFWOAnwX3F8qqO766n2upPq4.roa (hash: Lqt7F3+mbWjOVp+tT8JH700oKwS5LDilWe3XGrT0PWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fe:08:b5:66:be:79:c0:cd:bd:03:fe:1d:dc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b368fbf5bbd6d32f3dddc24ec204038c49b0550
Validity
Not Before: Mar 1 20:00:32 2026 GMT
Not After : Mar 2 20:00:32 2026 GMT
Subject: CN=8cdc5114bc8635ac87daf26d105f113d2f7f7552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:61:ed:19:68:6e:95:dc:70:36:02:73:68:df:
9a:06:5f:7c:a1:96:9c:86:24:dd:f4:04:dc:40:28:
d9:6e:a4:6b:7d:07:2f:5f:2a:1a:8a:af:46:36:d5:
8e:a3:ce:96:07:5a:77:6d:1f:62:f0:5b:ce:ad:0a:
86:e7:49:74:43:e1:0f:0b:66:bd:00:2f:d7:8a:4d:
34:c8:af:3a:3c:b2:b4:74:af:10:62:c7:75:c9:cb:
8d:b9:78:85:23:b2:31:cd:fc:d5:eb:a6:51:2c:81:
2f:2b:a3:20:0c:29:66:73:96:e8:60:af:27:bc:ae:
13:b5:46:0a:9b:77:8e:48:be:10:23:3f:e1:24:87:
6b:21:96:bd:10:db:89:a8:83:7f:75:ed:fb:ee:44:
50:28:9a:17:a2:d3:cb:f9:af:f8:1a:79:3e:16:7b:
90:d5:d0:c1:b2:79:57:5e:57:ac:d5:42:4d:e5:ba:
89:29:99:9c:d8:cc:98:e9:0c:4a:db:7a:77:5a:ed:
62:78:a1:51:aa:96:2a:83:c3:0f:90:62:c7:1d:3c:
e1:31:68:ef:d5:7c:84:fb:49:e1:9e:25:6f:2d:db:
51:59:fd:f9:8b:89:e6:cd:f8:7e:e9:3c:bc:55:f4:
e1:86:50:2c:27:fa:20:9e:42:56:51:d2:12:5d:2e:
44:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DC:51:14:BC:86:35:AC:87:DA:F2:6D:10:5F:11:3D:2F:7F:75:52
X509v3 Authority Key Identifier:
keyid:1B:36:8F:BF:5B:BD:6D:32:F3:DD:DC:24:EC:20:40:38:C4:9B:05:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzaPv1u9bTLz3dwk7CBAOMSbBVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2cbf88-58d9-424e-8f8f-fd4604d7e7af/1/GzaPv1u9bTLz3dwk7CBAOMSbBVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:6e:40:4d:0d:0b:25:b3:36:03:f1:dd:b7:db:e2:63:c1:14:
e6:2b:68:2a:13:f7:e5:7b:5f:8c:aa:0b:ac:f9:64:0c:fb:f1:
59:a0:1c:93:50:4d:32:a8:85:d5:24:db:2d:be:9c:d2:a5:cb:
96:ef:9f:58:2e:09:07:92:21:5e:d3:fb:93:07:fa:63:e6:aa:
82:73:7a:cb:53:5e:4f:b4:d8:c3:f2:86:e1:85:00:b7:77:f1:
88:c2:b4:60:19:ed:d3:2b:77:0a:22:8a:a5:b2:2a:47:81:37:
59:5b:bc:8b:de:35:ab:dd:93:7f:97:aa:07:d5:64:66:f0:0e:
1b:34:06:6b:cb:76:80:3c:98:86:4a:08:d6:0d:1e:08:6b:2a:
f4:ca:82:ba:23:b3:83:bf:af:ba:c4:fc:df:6f:68:df:35:bd:
9e:a1:5c:4c:f5:0b:35:7f:87:14:c9:e9:d8:61:5e:dd:4a:fe:
28:60:62:5c:8d:10:76:44:1a:61:fb:15:74:d6:1b:a4:69:19:
05:5e:d2:03:3b:46:a7:b5:c0:18:c0:3c:45:69:64:e9:10:e1:
7e:5c:2b:02:a4:3e:d3:8f:97:11:17:d3:99:75:d8:18:cb:fe:
6e:0f:fa:a0:5f:5c:c2:2f:32:63:c0:ea:08:b7:ff:ee:59:38:
a7:d1:15:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:50 2026 by rpki-client