Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json)
Hash identifier: eF4hI2nFydSH3NIucF7NdCpss9hXhcsuw+Wt20+3i44=
Subject key identifier: 72:8A:AF:6E:8D:55:AA:43:6D:47:E5:ED:87:9A:51:73:C4:02:56:5D
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 019CAAC6D8688A1F8814197796C7F52EC415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
Manifest number: 0D9E
Signing time: Sun 01 Mar 2026 19:01:23 +0000
Manifest this update: Sun 01 Mar 2026 19:01:23 +0000
Manifest next update: Mon 02 Mar 2026 19:01:23 +0000
Files and hashes: 1: WbAwRdYrJR5wFAa2q_hyf2XEajA.roa (hash: fVhxKKPzH41Q65WrATxm9iiVCPSBedSsGy5vx1QfADc=)
2: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: faWcg+UWQXZATq1T82TaI6kE5mgopUMqrf1F+45OAAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d8:68:8a:1f:88:14:19:77:96:c7:f5:2e:c4:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Mar 1 19:01:23 2026 GMT
Not After : Mar 2 19:01:23 2026 GMT
Subject: CN=728aaf6e8d55aa436d47e5ed879a5173c402565d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:18:7e:6c:a1:15:ed:3a:28:65:ad:66:84:2c:
51:55:91:b7:5f:45:c6:bf:7f:4a:d9:30:c8:35:ca:
ec:ee:e0:bb:9f:80:29:62:35:ff:c5:67:13:e5:14:
13:52:69:ad:1b:11:50:28:2f:cd:29:0b:33:12:c0:
fd:59:31:c9:68:ae:a1:51:e6:72:9a:d7:ce:db:d5:
80:26:b6:ee:b1:89:45:b3:3b:a8:9e:15:11:67:24:
9f:07:9f:8e:a0:65:da:f0:07:42:df:58:a3:29:ea:
1b:c0:29:1d:08:44:49:76:a3:6f:19:04:0f:0f:ad:
88:9a:67:d2:e6:a9:2c:30:5d:cc:94:19:f3:ac:4c:
1e:32:4a:7d:80:fd:e4:e7:52:aa:c9:57:52:32:85:
81:3a:63:e6:d2:e0:4c:32:fb:c4:61:2e:b2:59:16:
cc:2e:1a:81:5c:4b:24:d9:0a:79:7d:e8:02:54:bf:
96:90:ed:f1:18:99:d6:4c:d4:8d:75:a9:bc:90:7a:
3e:f2:cb:99:d2:b0:c3:b7:2d:a0:92:ad:fd:1a:b7:
ac:23:f8:42:21:79:8e:b0:7e:7e:2b:ad:4c:02:f1:
41:02:32:b0:18:91:ca:ed:56:4f:40:e8:eb:c7:a9:
e7:76:e7:8c:49:ca:53:b1:ec:84:22:7f:89:d5:32:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8A:AF:6E:8D:55:AA:43:6D:47:E5:ED:87:9A:51:73:C4:02:56:5D
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f5:38:28:63:8f:01:b2:25:21:5f:c3:ea:5f:4c:eb:46:4f:
da:cd:20:0f:f2:dd:a2:a0:d2:f7:68:07:f9:07:28:9c:23:b3:
e5:b7:a4:68:46:c5:23:22:93:34:1e:f8:c9:16:ee:c1:50:39:
c2:15:14:3c:d1:50:c7:09:e0:8d:a6:8b:f5:b8:4e:a1:c7:00:
fb:67:b1:27:c4:0b:ce:cd:58:b1:fe:37:7f:b6:4a:06:c8:92:
ec:0f:9d:20:0d:36:42:ab:22:6f:c6:c5:1b:a1:e3:8b:a4:c1:
c2:7c:cc:09:a2:62:da:b7:db:25:d8:45:71:23:ee:6a:58:a3:
be:bc:07:eb:a4:97:3b:9d:85:ee:c6:db:bd:cf:84:de:be:94:
22:3f:41:60:41:4d:7f:60:57:39:21:f7:cd:4e:f3:a9:d0:80:
0b:32:7c:b2:3e:1c:4c:19:4a:80:0c:1f:a6:e0:78:9e:ae:03:
c8:9e:ee:54:a7:b4:bc:d9:94:0f:4f:eb:22:da:44:1f:f2:21:
bf:fe:2c:a9:99:40:ee:9f:9d:86:00:32:96:dc:21:ef:f7:51:
d2:cd:bc:81:2e:26:c3:02:54:cb:af:36:41:9b:78:b1:54:be:
4b:2e:32:c4:e4:5d:5b:83:1f:91:6d:50:3e:1b:1d:8d:6b:f7:
30:1e:72:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:58 2026 by rpki-client