Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
File: gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft (raw, json)
Hash identifier: ggsHnel5m+cdXErGz0Y1ziO7rb7AIeqfg/GYmTmvbB4=
Subject key identifier: D8:FB:DA:2E:7A:2F:7E:7B:8F:7D:BF:D8:BB:D5:BB:A6:DA:CA:CF:30
Authority key identifier: 83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
Certificate issuer: /CN=833a0b5594339aefe8b558e3729290b42bb1a974
Certificate serial: 019CAF111C4A1512F43C901B3989394B5031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
Manifest number: 11C1
Signing time: Mon 02 Mar 2026 15:01:00 +0000
Manifest this update: Mon 02 Mar 2026 15:01:00 +0000
Manifest next update: Tue 03 Mar 2026 15:01:00 +0000
Files and hashes: 1: OJQiev2wZVG1ocXpX4-0xyIDLu8.roa (hash: P2/t8LDWw8ZhLGGXRvorDGL2cHxIBux66GV2OQKjLoE=)
2: gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl (hash: z68l1+F6vTrauxkKGPfRlxKR70/AXaMOFrkO9VXvM+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:11:1c:4a:15:12:f4:3c:90:1b:39:89:39:4b:50:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833a0b5594339aefe8b558e3729290b42bb1a974
Validity
Not Before: Mar 2 15:01:00 2026 GMT
Not After : Mar 3 15:01:00 2026 GMT
Subject: CN=d8fbda2e7a2f7e7b8f7dbfd8bbd5bba6dacacf30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6b:34:f0:e0:16:57:c1:fa:ec:9b:62:68:41:
9a:0a:e2:0a:95:c3:74:7d:9d:d2:aa:b4:de:51:63:
a9:cf:91:fc:43:7c:44:b7:31:cc:04:dd:a3:75:32:
98:8c:47:57:05:1c:f3:2e:90:4e:5e:10:20:9d:81:
54:e5:9a:d4:8d:6b:17:32:3e:5b:31:ce:0b:c8:47:
aa:3a:9a:aa:76:83:37:ea:50:34:16:dc:16:dd:60:
d3:40:11:82:74:85:35:a5:4a:55:8d:47:0b:76:94:
3c:93:1c:7a:35:65:01:f2:f1:da:7b:0c:f0:69:00:
05:56:cb:8e:de:45:90:f9:24:c0:04:8b:34:11:31:
89:17:ea:9f:91:f2:0a:93:7c:52:b9:92:27:31:f7:
17:bd:cc:e0:81:a2:92:62:cd:d1:e5:ac:71:87:ba:
fc:47:33:3d:42:88:b1:67:3a:12:36:b1:67:06:45:
24:0e:a5:cb:01:be:7d:34:d9:c0:b9:50:ce:48:dc:
2b:0e:6d:33:e5:0b:d8:f1:03:a6:8b:d4:09:07:31:
e0:ce:e6:47:d6:39:02:f9:b6:82:43:86:fc:be:b9:
31:0a:75:ee:3b:49:67:5f:88:01:06:ba:1d:d3:5c:
2b:8a:24:84:3b:84:79:65:0a:45:ca:a7:7f:07:f2:
1a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FB:DA:2E:7A:2F:7E:7B:8F:7D:BF:D8:BB:D5:BB:A6:DA:CA:CF:30
X509v3 Authority Key Identifier:
keyid:83:3A:0B:55:94:33:9A:EF:E8:B5:58:E3:72:92:90:B4:2B:B1:A9:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzoLVZQzmu_otVjjcpKQtCuxqXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/76606e-7243-4b0b-82a3-3d06d242f992/1/gzoLVZQzmu_otVjjcpKQtCuxqXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e0:2b:c0:6a:c9:93:1b:f3:12:22:ca:f1:61:e3:58:f9:82:
ef:c1:ee:d5:9c:9c:9c:72:f0:ff:33:48:1d:dc:57:e0:c2:9f:
e2:b1:16:87:ae:30:51:ed:65:c7:14:3f:17:e9:0f:60:59:b5:
50:86:a7:e1:c0:b2:a5:18:cf:b3:ba:61:4a:14:a0:89:eb:13:
37:99:00:81:7a:65:82:ec:5d:a2:df:62:a8:e3:be:c5:24:4f:
6e:cc:d6:8b:32:ef:49:93:54:ae:12:a7:36:87:d8:65:b3:34:
f8:3d:3f:a3:04:7f:29:25:3c:c3:19:f6:18:3b:96:63:89:90:
31:b2:33:cc:98:2b:58:a5:80:17:a4:30:1d:bc:e2:f4:c5:b1:
f8:1d:7d:68:d7:f1:26:e2:3c:9f:71:c4:d1:c5:c2:d8:53:a9:
85:5c:ba:f0:47:67:b3:0d:97:2f:f5:74:9a:de:02:65:c1:2a:
0f:65:81:54:db:20:fb:c0:ac:8e:1f:08:5b:c4:c7:4f:f6:a1:
e2:68:f5:fd:6a:31:a0:ad:f4:12:28:54:0c:08:38:c0:d8:bf:
f5:7e:fc:63:08:f2:fa:5f:72:d2:bd:09:8d:3b:7c:9f:72:37:
0f:ed:55:c9:70:17:c5:17:11:40:41:66:64:5c:b7:f5:d2:04:
23:9c:b4:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvERxKFRL0PJAbOYk5S1AxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2EwYjU1OTQzMzlhZWZlOGI1NThlMzcyOTI5MGI0MmJi
MWE5NzQwHhcNMjYwMzAyMTUwMTAwWhcNMjYwMzAzMTUwMTAwWjAzMTEwLwYDVQQD
EyhkOGZiZGEyZTdhMmY3ZTdiOGY3ZGJmZDhiYmQ1YmJhNmRhY2FjZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGs08OAWV8H67JtiaEGaCuIKlcN0
fZ3SqrTeUWOpz5H8Q3xEtzHMBN2jdTKYjEdXBRzzLpBOXhAgnYFU5ZrUjWsXMj5b
Mc4LyEeqOpqqdoM36lA0FtwW3WDTQBGCdIU1pUpVjUcLdpQ8kxx6NWUB8vHaewzw
aQAFVsuO3kWQ+STABIs0ETGJF+qfkfIKk3xSuZInMfcXvczggaKSYs3R5axxh7r8
RzM9QoixZzoSNrFnBkUkDqXLAb59NNnAuVDOSNwrDm0z5QvY8QOmi9QJBzHgzuZH
1jkC+baCQ4b8vrkxCnXuO0lnX4gBBrod01wriiSEO4R5ZQpFyqd/B/IafQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNj72i56L357j32/2LvVu6bays8wMB8GA1UdIwQY
MBaAFIM6C1WUM5rv6LVY43KSkLQrsal0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83NjYwNmUtNzI0My00YjBiLTgyYTMt
M2QwNmQyNDJmOTkyLzEvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83NjYwNmUtNzI0My00YjBiLTgyYTMtM2QwNmQyNDJmOTky
LzEvZ3pvTFZaUXptdV9vdFZqamNwS1F0Q3V4cVhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMuArwGrJ
kxvzEiLK8WHjWPmC78Hu1ZycnHLw/zNIHdxX4MKf4rEWh64wUe1lxxQ/F+kPYFm1
UIan4cCypRjPs7phShSgiesTN5kAgXplguxdot9iqOO+xSRPbszWizLvSZNUrhKn
NofYZbM0+D0/owR/KSU8wxn2GDuWY4mQMbIzzJgrWKWAF6QwHbzi9MWx+B19aNfx
JuI8n3HE0cXC2FOphVy68Ednsw2XL/V0mt4CZcEqD2WBVNsg+8Csjh8IW8THT/ah
4mj1/WoxoK30EihUDAg4wNi/9X78Ywjy+l9y0r0JjTt8n3I3D+1VyXAXxRcRQEFm
ZFy39dIEI5y0qQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:28:02 2026 by rpki-client