
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
File: GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json)
Hash identifier: RjTimdHwDscGsPrV4i803Qlw8BMDGKgpTM/1dQ0YO0g=
Subject key identifier: BF:C0:0F:8C:C1:81:4C:7A:19:E1:DD:15:61:68:95:12:72:37:C5:91
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Certificate issuer: /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial: 019CAC105F8B8B3628B41D8F43BC4DF92161
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
Manifest number: 111E
Signing time: Mon 02 Mar 2026 01:01:19 +0000
Manifest this update: Mon 02 Mar 2026 01:01:19 +0000
Manifest next update: Tue 03 Mar 2026 01:01:19 +0000
Files and hashes: 1: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: WMeE+xsoPjgT/XwFhO2GcvCk/al4CK5hyuL+xGrqGjU=)
2: ePI6xD2cfu7fzAdug0Km--LXZXw.roa (hash: A5otAx8dQYDetFTAWi3ze+gQMQ2WC4fRm0x+IwV20E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:5f:8b:8b:36:28:b4:1d:8f:43:bc:4d:f9:21:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Validity
Not Before: Mar 2 01:01:19 2026 GMT
Not After : Mar 3 01:01:19 2026 GMT
Subject: CN=bfc00f8cc1814c7a19e1dd15616895127237c591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:d8:02:c1:03:22:0e:75:bc:fa:04:67:66:
f9:e8:78:d0:d9:c9:de:03:e3:d6:3b:8e:74:93:38:
79:6e:1e:ad:5e:50:8e:79:8f:33:e0:18:99:18:fa:
68:2a:bc:f5:a8:55:0a:44:b9:a4:3d:d1:79:57:9c:
07:be:36:dc:5c:3c:27:9a:e2:2f:8a:d2:97:bb:bd:
28:57:0b:77:d7:9f:d3:bf:d5:06:97:10:26:39:9c:
49:00:3b:fa:d0:52:90:18:9d:68:ae:0d:12:56:14:
d4:1d:d9:ef:ca:f0:ad:05:96:b8:3d:76:19:bb:7a:
a3:b2:b9:71:f0:9c:e7:01:0a:06:70:cb:69:3e:dc:
4d:55:4d:fe:be:6c:a5:f0:84:fe:28:c5:bd:2b:ad:
06:82:4e:5d:af:45:bd:f2:99:d4:bd:12:f3:d3:55:
1d:e9:78:47:7c:09:81:1e:d3:e3:01:9a:8a:cb:bd:
50:61:9b:4a:60:99:20:f9:34:25:26:4a:d7:71:7e:
7e:0a:70:60:fb:02:be:6b:9b:b7:1e:82:86:54:37:
7a:55:12:f1:9b:d3:31:94:c4:7a:52:5f:bf:55:c9:
39:2a:c8:d0:a1:8a:47:b9:66:c6:17:50:e6:f3:6b:
c2:5b:a6:d9:43:9f:f3:29:80:94:20:4b:fb:33:77:
6c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C0:0F:8C:C1:81:4C:7A:19:E1:DD:15:61:68:95:12:72:37:C5:91
X509v3 Authority Key Identifier:
keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:79:aa:9f:6d:d5:10:48:b5:c4:53:37:8f:bb:60:2b:c9:45:
49:49:8d:9a:6b:5b:c8:88:2d:06:8a:6e:45:46:a8:c3:b4:5a:
35:c2:11:7a:c1:b5:06:a0:1f:ee:22:e8:79:4b:77:e0:e8:bc:
08:57:5c:15:8f:19:8b:25:00:24:7d:ad:ab:af:52:32:3e:14:
9f:d1:8e:a3:f0:d9:a3:29:60:c3:94:97:b1:10:b6:fd:25:3c:
56:f8:a4:e7:09:19:a9:37:1d:72:64:f5:14:7b:e5:7d:8c:5b:
79:ec:54:8a:cf:7b:e2:7d:b4:90:96:4d:85:20:0e:30:c3:25:
e0:cc:6d:f3:d3:6b:6a:be:c3:97:46:d6:36:a1:fa:53:d8:90:
60:19:d6:0e:73:e1:a6:cd:74:f7:21:91:db:a3:b6:db:14:65:
79:0e:e7:e5:fd:de:5c:9c:75:8c:ce:9b:e7:94:f0:bc:77:fd:
68:3e:57:a1:d1:a2:ab:42:8b:d1:1f:b2:55:07:07:82:64:81:
43:c9:3e:6a:31:af:d4:1c:0e:48:b1:f5:da:fb:d4:5b:b7:ff:
4c:5c:2b:71:22:b0:25:bf:64:1d:ab:02:6d:88:41:f5:45:9f:
64:74:51:05:a0:cd:f9:5a:26:73:4c:a4:34:f0:ac:50:e4:99:
69:5a:c8:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysEF+LizYotB2PQ7xN+SFhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjJlMWZjNDAwYmJmOWRjYjIwNjZhZGUzZGJmZTVjOWVh
YjJlN2QwHhcNMjYwMzAyMDEwMTE5WhcNMjYwMzAzMDEwMTE5WjAzMTEwLwYDVQQD
EyhiZmMwMGY4Y2MxODE0YzdhMTllMWRkMTU2MTY4OTUxMjcyMzdjNTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9vYAsEDIg51vPoEZ2b56HjQ2cne
A+PWO450kzh5bh6tXlCOeY8z4BiZGPpoKrz1qFUKRLmkPdF5V5wHvjbcXDwnmuIv
itKXu70oVwt315/Tv9UGlxAmOZxJADv60FKQGJ1org0SVhTUHdnvyvCtBZa4PXYZ
u3qjsrlx8JznAQoGcMtpPtxNVU3+vmyl8IT+KMW9K60Ggk5dr0W98pnUvRLz01Ud
6XhHfAmBHtPjAZqKy71QYZtKYJkg+TQlJkrXcX5+CnBg+wK+a5u3HoKGVDd6VRLx
m9MxlMR6Ul+/Vck5KsjQoYpHuWbGF1Dm82vCW6bZQ5/zKYCUIEv7M3ds2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/AD4zBgUx6GeHdFWFolRJyN8WRMB8GA1UdIwQY
MBaAFBmy4fxAC7+dyyBmrePb/lyeqy59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iMmU1ODUtZjU4ZC00MjIwLThiZWYt
MGRhOWFlODQ1OGRiLzEvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iMmU1ODUtZjU4ZC00MjIwLThiZWYtMGRhOWFlODQ1OGRi
LzEvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3mqn23V
EEi1xFM3j7tgK8lFSUmNmmtbyIgtBopuRUaow7RaNcIResG1BqAf7iLoeUt34Oi8
CFdcFY8ZiyUAJH2tq69SMj4Un9GOo/DZoylgw5SXsRC2/SU8Vvik5wkZqTcdcmT1
FHvlfYxbeexUis974n20kJZNhSAOMMMl4Mxt89Nrar7Dl0bWNqH6U9iQYBnWDnPh
ps109yGR26O22xRleQ7n5f3eXJx1jM6b55TwvHf9aD5XodGiq0KL0R+yVQcHgmSB
Q8k+ajGv1BwOSLH12vvUW7f/TFwrcSKwJb9kHasCbYhB9UWfZHRRBaDN+Vomc0yk
NPCsUOSZaVrIng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:46:01 2026 by rpki-client