Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
File: gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft (raw, json)
Hash identifier: W6mr3xgitvl0P7PmBg9uJJ2ZAQh177XL1l/JN2XtErE=
Subject key identifier: 43:14:5C:5F:C0:92:9A:DD:0A:0B:B3:5C:B4:54:3A:25:90:71:D5:25
Authority key identifier: 82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
Certificate issuer: /CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Certificate serial: 019D984FB0CC5A85DF86B4A6DF7B852078B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
Manifest number: 0E19
Signing time: Thu 16 Apr 2026 22:00:52 +0000
Manifest this update: Thu 16 Apr 2026 22:00:52 +0000
Manifest next update: Fri 17 Apr 2026 22:00:52 +0000
Files and hashes: 1: WbAwRdYrJR5wFAa2q_hyf2XEajA.roa (hash: fVhxKKPzH41Q65WrATxm9iiVCPSBedSsGy5vx1QfADc=)
2: gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl (hash: E+1NheDHVI9pZ1vQt39OH/S7boGHVRgnx1kqkREGplw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:b0:cc:5a:85:df:86:b4:a6:df:7b:85:20:78:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826cc9938c32e04dc5443dd6c05a027a5617d97b
Validity
Not Before: Apr 16 22:00:52 2026 GMT
Not After : Apr 17 22:00:52 2026 GMT
Subject: CN=43145c5fc0929add0a0bb35cb4543a259071d525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:53:71:1d:a5:b8:8a:50:70:53:ad:f8:8d:62:
10:71:d3:ba:c7:20:46:5d:0f:31:6a:f7:08:82:fd:
f8:1c:8d:33:0e:d7:37:38:ac:71:b1:9b:4b:4d:82:
2c:da:84:6d:8e:81:85:32:f2:78:14:f7:2a:5d:00:
05:a5:7e:c4:fc:c3:64:e0:a9:37:51:cc:b2:79:d3:
44:2b:30:00:97:77:08:f8:71:96:a8:9d:ae:a9:6b:
ba:d8:5e:2f:42:08:fc:e7:c1:d1:eb:32:b6:6a:97:
93:e5:f2:ae:fa:e0:2a:59:90:fa:1c:a9:63:0a:20:
7f:cf:2d:1b:23:1c:08:53:9f:06:da:89:89:f5:c2:
cd:35:71:bf:47:aa:6b:32:ff:ee:00:ae:b7:12:df:
a0:46:60:91:e7:1b:01:ba:ef:38:81:90:68:4c:de:
b1:8d:bd:4c:a9:e5:12:75:32:c5:86:a1:ae:ff:0a:
2c:7f:5f:b2:d8:a5:3a:11:4c:19:69:55:a6:16:4c:
d7:f4:11:70:7e:fa:73:c7:9c:bc:65:9e:d1:6e:13:
47:13:e0:a0:46:ae:c5:64:16:47:40:3e:88:03:3e:
b5:1c:f0:57:e9:1e:ea:98:61:ff:93:c8:85:7f:de:
3d:36:31:1a:26:3c:99:80:5a:59:fa:96:32:3a:23:
51:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:14:5C:5F:C0:92:9A:DD:0A:0B:B3:5C:B4:54:3A:25:90:71:D5:25
X509v3 Authority Key Identifier:
keyid:82:6C:C9:93:8C:32:E0:4D:C5:44:3D:D6:C0:5A:02:7A:56:17:D9:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmzJk4wy4E3FRD3WwFoCelYX2Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/532deb-42b1-4a2d-9fff-af7d6a89752a/1/gmzJk4wy4E3FRD3WwFoCelYX2Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:e9:c1:79:13:86:b7:da:ce:17:00:0e:03:01:a1:c1:98:54:
dd:ac:4a:b1:c9:46:ca:d7:27:f4:d2:2c:0e:bc:b2:57:6c:11:
29:51:4b:4d:7f:66:d5:d7:07:26:80:19:11:17:c4:25:71:62:
e9:93:38:ae:84:c0:c0:6e:05:ac:17:c3:5c:1c:bf:70:ee:97:
9f:33:fb:0b:bd:e3:41:73:35:ac:7e:c0:7f:73:50:9c:e1:f7:
85:26:bb:5b:2f:b0:f7:05:17:da:ff:e7:ea:ab:88:53:d0:d6:
fd:9f:a3:5d:45:08:8c:a3:f3:03:1f:35:9a:c1:3c:a1:6f:ee:
b8:ea:32:fb:22:dd:5c:e8:59:05:cc:3f:f6:81:58:dd:0f:92:
e2:61:e3:04:07:2e:4d:48:8e:ec:e3:ff:6f:ff:2b:d1:ee:a9:
43:0c:e8:50:9b:1f:a8:c7:01:dc:08:9d:17:64:d7:f5:bc:15:
cf:a9:fb:92:d9:ad:86:a1:57:62:5a:c5:fb:41:fd:4d:a5:42:
13:ee:e5:ab:8a:0f:e1:58:59:8b:f7:f7:a4:5d:74:31:95:e0:
b2:da:e1:5d:b3:d5:b5:b8:37:65:c4:b2:68:54:60:7f:43:8c:
42:8f:ed:a8:c5:87:1b:30:87:5c:0e:5f:88:5b:65:d4:cc:44:
4b:eb:89:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:07:54 2026 by rpki-client