Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
File: GzWY67XR0I6w2kONBSzrqk_cdo8.mft (raw, json)
Hash identifier: ECA99I/GHGbsffFa+a7AaH6z+E+5U33bs1ipx3IaLVs=
Subject key identifier: 1A:64:DA:1C:9F:6C:B6:E5:FB:B2:46:4E:EF:B6:91:19:26:2D:A2:D8
Authority key identifier: 1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
Certificate issuer: /CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Certificate serial: 019CAC469B38639C328F4794543E458681FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
Manifest number: 078D
Signing time: Mon 02 Mar 2026 02:00:34 +0000
Manifest this update: Mon 02 Mar 2026 02:00:34 +0000
Manifest next update: Tue 03 Mar 2026 02:00:34 +0000
Files and hashes: 1: GzWY67XR0I6w2kONBSzrqk_cdo8.crl (hash: UiCeUbfhHScSiQ9l8kpR3IbGXfvoA900D7s4+faTYlg=)
2: Zav8Gx3Ftvlbct-oXOibrBGZ2JM.roa (hash: 1ZAL+JjSReBWWnXXw88dwvfgMDtRJ2A88/nL1Id7fMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:9b:38:63:9c:32:8f:47:94:54:3e:45:86:81:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b3598ebb5d1d08eb0da438d052cebaa4fdc768f
Validity
Not Before: Mar 2 02:00:34 2026 GMT
Not After : Mar 3 02:00:34 2026 GMT
Subject: CN=1a64da1c9f6cb6e5fbb2464eefb69119262da2d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ea:a6:ff:14:94:b0:3b:21:cf:22:3f:93:9d:
ea:1d:80:8c:ca:22:b7:cc:e5:12:3a:5e:bd:20:8d:
2f:25:36:37:37:b9:62:e0:d0:ad:ef:c4:67:84:5a:
5d:1c:c6:63:3e:c3:9e:0f:53:f4:68:b8:46:f3:a1:
3b:ef:91:00:98:75:cb:a6:6c:9e:e3:d0:bb:85:70:
23:0c:9a:1c:ae:ce:7f:12:d7:29:af:21:b3:c2:ff:
91:36:e7:99:ed:33:7b:6e:48:43:e2:a3:0a:5b:c7:
bf:3a:63:66:f6:94:48:4c:dd:f5:f1:8b:23:5c:63:
b3:a2:4f:1a:a9:59:eb:ed:6e:48:b5:4b:cd:0e:2e:
ff:01:21:14:c4:2a:3d:5c:4c:68:25:33:ef:e6:f2:
3d:1e:2d:12:70:f7:e5:48:e2:28:54:bb:b9:f4:1a:
d9:76:90:57:91:db:30:01:0b:06:aa:ee:3b:3f:99:
d1:5b:0a:e6:77:4f:c1:f3:1b:da:e4:6e:ae:64:b1:
63:9b:38:18:e5:78:63:97:5a:85:1b:77:c3:8e:f1:
73:df:6c:ad:4c:4a:1c:88:5b:66:d8:b7:46:85:97:
5c:58:7e:6e:98:14:5c:f6:65:6c:4d:d5:b9:8a:e1:
4b:f5:82:a9:45:3e:ba:e3:6e:9a:aa:4f:d2:a4:66:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:64:DA:1C:9F:6C:B6:E5:FB:B2:46:4E:EF:B6:91:19:26:2D:A2:D8
X509v3 Authority Key Identifier:
keyid:1B:35:98:EB:B5:D1:D0:8E:B0:DA:43:8D:05:2C:EB:AA:4F:DC:76:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GzWY67XR0I6w2kONBSzrqk_cdo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0562f8-2670-440f-8502-1ba0ebaa8a86/1/GzWY67XR0I6w2kONBSzrqk_cdo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7e:6e:79:ca:c2:09:09:b7:c5:8e:db:7d:59:3e:8a:67:2e:
59:fe:b2:2a:22:ea:32:de:9c:86:af:19:4e:f2:e0:2e:12:39:
2e:18:3a:6c:72:a0:19:8b:b4:2a:ba:a8:66:4a:4b:04:bd:c7:
2a:5f:0d:a8:9c:a3:7a:5b:ff:90:f6:59:3b:2d:b8:8f:36:21:
cf:ec:39:6f:70:72:ba:6b:22:7e:eb:2b:ed:70:0f:42:d9:9c:
dd:e0:9d:ed:6c:62:ae:41:d2:00:e9:23:ce:f6:0f:c3:9a:4b:
d6:05:cb:6a:fb:28:02:4b:6c:fa:1d:ef:1a:f3:56:fd:b6:36:
54:c3:8e:6d:68:7b:c5:22:e2:96:19:b5:cd:08:6a:d8:f9:44:
42:ed:e4:8c:23:55:77:e6:0e:7d:26:55:d1:0a:98:60:14:b4:
c6:53:d9:22:44:b8:c2:96:ed:9a:cf:ff:7d:c9:2c:92:74:9b:
27:1a:e2:c5:9c:24:8e:96:3f:b1:ec:61:8b:18:0e:43:b7:56:
2b:ca:b3:c5:46:46:b2:98:1a:66:fd:47:0a:7c:e8:68:6b:34:
20:f9:85:af:db:49:90:27:9e:f1:61:45:cc:8b:4d:2c:2f:75:
2c:84:14:b1:19:55:7b:1f:73:a3:13:b8:14:95:78:ac:f5:9d:
47:9a:23:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:55 2026 by rpki-client