Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
File: GBTcobly3pEWdeoi0vvNvgG4MLw.mft (raw, json)
Hash identifier: N2kDF3ChiAS4BFPoQdJe6NOjGV9i9qMOslrlxWW8VJ4=
Subject key identifier: F6:6A:AE:AE:F9:6A:0D:78:0A:E7:47:03:78:A6:3E:27:19:C8:A3:EF
Authority key identifier: 18:14:DC:A1:B9:72:DE:91:16:75:EA:22:D2:FB:CD:BE:01:B8:30:BC
Certificate issuer: /CN=1814dca1b972de911675ea22d2fbcdbe01b830bc
Certificate serial: 01A0C2C4AB37E713FD6CBBDDFD821CE6FE4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
Manifest number: 0254
Signing time: Mon 21 Sep 2026 07:01:03 +0000
Manifest this update: Mon 21 Sep 2026 07:01:03 +0000
Manifest next update: Tue 22 Sep 2026 07:01:03 +0000
Files and hashes: 1: GBTcobly3pEWdeoi0vvNvgG4MLw.crl (hash: XKN7xC3X3izBwub3v7n7vFqfgErRMUv7pJi8eRu4C5E=)
2: TJsdk6GlDGwNFsPogQM6Er0LdIs.asa (hash: uIr8DFmzh8tTb+dANLrMQVRmc/br/v70MLXUCo4zCNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:c4:ab:37:e7:13:fd:6c:bb:dd:fd:82:1c:e6:fe:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1814dca1b972de911675ea22d2fbcdbe01b830bc
Validity
Not Before: Sep 21 07:01:03 2026 GMT
Not After : Sep 22 07:01:03 2026 GMT
Subject: CN=f66aaeaef96a0d780ae7470378a63e2719c8a3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:5a:bd:76:c6:ff:d7:84:43:aa:eb:ee:05:
74:d1:28:27:76:be:21:45:bb:ab:70:68:2c:d4:68:
64:fc:98:37:9a:d7:f9:f8:78:36:e5:82:59:12:cc:
6a:be:cf:e0:21:88:20:b6:57:bf:d7:18:85:b5:1f:
5e:20:a7:bb:3b:ec:4a:36:a0:61:be:5f:3b:3a:29:
a9:12:e7:3a:3f:92:b3:fc:5b:95:16:3b:9a:11:6b:
fa:25:b6:42:0e:48:83:33:d4:19:f5:46:28:46:29:
ea:14:92:7c:64:1e:10:87:40:78:f0:42:9c:e9:77:
07:55:35:66:fd:d5:c9:26:e7:a6:35:3e:a1:fa:0e:
ab:98:6f:32:cc:19:66:73:ad:4c:a5:f7:3c:66:39:
8c:04:db:5e:23:6e:11:d9:47:8b:96:02:a2:0a:e8:
c5:79:04:54:5a:79:cb:51:b7:83:f2:f6:8e:a1:04:
d2:22:6f:e5:80:fa:1b:60:1c:f8:da:1e:00:17:e4:
69:62:80:fb:4f:f2:14:71:2b:96:1c:d0:f6:42:fe:
d1:3d:9d:c9:f6:13:6a:bc:e5:d0:5d:02:24:d1:63:
72:15:ac:f5:e8:43:02:2f:8d:2f:47:98:81:83:c4:
61:94:78:a9:dd:3d:1b:2b:6b:79:3d:f8:68:34:23:
1f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6A:AE:AE:F9:6A:0D:78:0A:E7:47:03:78:A6:3E:27:19:C8:A3:EF
X509v3 Authority Key Identifier:
keyid:18:14:DC:A1:B9:72:DE:91:16:75:EA:22:D2:FB:CD:BE:01:B8:30:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a4:91:d9:32:5c:73:73:eb:a5:08:8f:72:63:ef:24:a4:ba:
af:e3:3b:45:91:57:16:6d:3a:56:b3:26:9b:0a:62:39:fb:f9:
13:30:ec:b9:0b:84:88:79:a1:46:9c:07:ad:7b:2b:f2:d0:2e:
33:88:28:d3:4c:9a:b5:92:91:1f:95:44:08:9b:06:f6:af:47:
ed:f2:ae:26:88:26:54:6d:55:5b:54:53:8a:46:89:3b:a8:f2:
74:c0:37:05:ad:c1:68:1f:23:a7:0f:20:b2:c8:f4:80:67:f4:
12:8e:71:72:3c:6a:bf:65:bd:d5:05:e7:a0:fe:38:e6:cf:02:
15:14:4e:d8:37:e3:70:98:97:0f:78:64:76:7b:3b:c2:8a:c4:
ec:a7:9a:5c:05:6c:22:97:6e:92:dd:19:70:49:fa:8c:d9:bf:
98:94:2c:a1:19:b2:d0:ae:74:58:54:cd:69:bc:03:82:ab:82:
8c:e5:d9:89:87:92:f5:d4:da:b5:3b:ba:74:38:8b:dd:14:ec:
ba:fa:cb:60:89:2f:e5:07:99:50:13:09:81:c9:18:80:85:d6:
9a:23:7c:29:fe:85:0e:6e:de:4d:95:76:76:52:d1:62:35:cc:
a5:d3:a6:67:29:6b:a2:e9:11:14:08:2d:3f:2a:4f:40:7a:69:
ec:9e:31:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:52:23 2026 by rpki-client