Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: OieBNBlWV/881nTFzNaMbcWNCkKsAS2N/COyIXbS8m8=
Subject key identifier: 16:86:5E:24:87:E1:F7:51:D1:A5:E3:51:A0:03:54:23:AF:B6:7C:AB
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 01A0C17AB26D8A0B78C80C6B34D83AFBBD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 01:00:38 +0000
Manifest this update: Mon 21 Sep 2026 01:00:38 +0000
Manifest next update: Tue 22 Sep 2026 01:00:38 +0000
Files and hashes: 1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: YbYIBITw/9DIu3TXq1qQj0wjxqCSreVHkBeNCkuLpg8=)
2: SiN-egvtwnZmsIkMnlS_ti2Z8oo.roa (hash: +a9n3GtFyFH5JC8/UIBQoBkf21E3Z0ZTMg3tsgsla2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:b2:6d:8a:0b:78:c8:0c:6b:34:d8:3a:fb:bd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Sep 21 01:00:38 2026 GMT
Not After : Sep 22 01:00:38 2026 GMT
Subject: CN=16865e2487e1f751d1a5e351a0035423afb67cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:03:5a:7e:4b:8e:c4:dd:27:4a:9d:f2:c4:b8:
40:df:00:7d:5a:08:20:99:2c:37:37:b6:9e:a6:c8:
05:75:26:3c:d6:af:80:40:63:1b:fe:37:d9:5c:ac:
d6:26:45:30:be:2b:71:23:33:50:d9:81:59:56:9d:
59:62:5c:9e:06:a3:93:67:55:83:c2:96:f4:0f:c0:
bc:dd:3a:e2:50:8a:3a:4e:c0:03:f8:a2:8d:2e:d3:
06:67:b4:0f:92:94:be:08:dc:c5:69:08:ab:44:25:
7d:e0:03:8e:be:18:22:b8:21:d8:82:d5:bd:10:ca:
0c:11:a5:d5:60:76:d1:80:97:37:ce:0d:6c:54:67:
cb:2d:35:6b:09:65:e6:26:91:55:ba:96:a3:0c:8d:
cf:e0:ca:2a:64:e1:49:3b:9a:07:88:f4:38:d5:4a:
d4:1a:ae:95:c6:78:a3:d4:da:2b:0d:57:98:74:76:
3a:39:99:2d:87:11:c6:50:07:a4:cb:0f:cd:93:3c:
c7:06:0a:1d:a6:b0:b0:88:7e:57:92:83:e1:6f:be:
29:44:9f:8f:81:e4:65:33:74:8d:34:e3:d3:fa:48:
26:d2:96:ae:b5:46:cb:50:fe:03:d4:1f:e9:d8:72:
f7:7e:82:62:60:d6:b1:c7:a4:db:a9:8a:69:b3:b0:
39:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:86:5E:24:87:E1:F7:51:D1:A5:E3:51:A0:03:54:23:AF:B6:7C:AB
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b6:ff:8a:c3:10:19:95:3f:05:dd:db:7c:63:25:ca:d1:9b:
20:07:0f:85:a4:70:c4:58:05:c5:8d:85:0a:5e:b7:27:93:58:
88:14:99:57:e1:c0:63:74:8f:7d:ea:3e:4b:0c:ae:99:17:49:
2b:bf:5a:01:e8:d9:d2:be:27:55:ab:67:5f:20:d1:53:d2:5a:
cf:b2:11:75:e8:9b:78:73:d6:c9:37:a7:21:e3:a1:e1:e8:78:
8b:ce:d1:53:fe:cb:49:db:74:e5:e3:f8:af:90:4f:d8:b7:37:
5f:40:17:b1:ca:4a:4d:76:90:c3:3e:ad:b6:b5:57:a9:d2:ed:
fc:b3:64:4b:08:0b:f8:a0:b6:85:bc:4a:9c:a9:a0:d4:5c:98:
89:6d:11:e8:62:52:91:a8:a0:5e:30:9b:16:63:95:5d:ed:0d:
9c:b8:8d:ce:75:c2:ef:6c:90:58:05:3a:7e:27:c0:4e:76:46:
59:93:0d:2b:35:de:2a:f0:c7:e5:8f:2f:c2:02:5f:2c:af:30:
7c:af:9e:2b:ce:16:3e:7f:5d:bf:5d:3a:24:82:41:dc:39:6b:
80:15:fa:2e:fe:1b:32:0a:26:03:7c:b0:eb:77:3f:45:97:01:
15:64:db:02:cb:5e:8f:91:cb:6e:bd:a9:22:7e:94:29:3d:d5:
5b:2e:a1:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDBerJtigt4yAxrNNg6+71dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YmNjNDA3YmYzODgxZTI5NjZhNTQ4YzQzMmIzZjA0MDE0
Njk5ZGQwHhcNMjYwOTIxMDEwMDM4WhcNMjYwOTIyMDEwMDM4WjAzMTEwLwYDVQQD
EygxNjg2NWUyNDg3ZTFmNzUxZDFhNWUzNTFhMDAzNTQyM2FmYjY3Y2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wNafkuOxN0nSp3yxLhA3wB9Wggg
mSw3N7aepsgFdSY81q+AQGMb/jfZXKzWJkUwvitxIzNQ2YFZVp1ZYlyeBqOTZ1WD
wpb0D8C83TriUIo6TsAD+KKNLtMGZ7QPkpS+CNzFaQirRCV94AOOvhgiuCHYgtW9
EMoMEaXVYHbRgJc3zg1sVGfLLTVrCWXmJpFVupajDI3P4MoqZOFJO5oHiPQ41UrU
Gq6Vxnij1NorDVeYdHY6OZkthxHGUAekyw/NkzzHBgodprCwiH5XkoPhb74pRJ+P
geRlM3SNNOPT+kgm0pautUbLUP4D1B/p2HL3foJiYNaxx6TbqYpps7A5YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaGXiSH4fdR0aXjUaADVCOvtnyrMB8GA1UdIwQY
MBaAFBm8xAe/OIHilmpUjEMrPwQBRpndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYt
NDQ5NzdkN2FiOWNhLzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYtNDQ5NzdkN2FiOWNh
LzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbb/isMQ
GZU/Bd3bfGMlytGbIAcPhaRwxFgFxY2FCl63J5NYiBSZV+HAY3SPfeo+SwyumRdJ
K79aAejZ0r4nVatnXyDRU9Jaz7IRdeibeHPWyTenIeOh4eh4i87RU/7LSdt05eP4
r5BP2Lc3X0AXscpKTXaQwz6ttrVXqdLt/LNkSwgL+KC2hbxKnKmg1FyYiW0R6GJS
kaigXjCbFmOVXe0NnLiNznXC72yQWAU6fifATnZGWZMNKzXeKvDH5Y8vwgJfLK8w
fK+eK84WPn9dv106JIJB3DlrgBX6Lv4bMgomA3yw63c/RZcBFWTbAstej5HLbr2p
In6UKT3VWy6hOQ==
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:49:13 2026 by rpki-client