Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: ZjywuOafMIGVnSCGGPnJnO5sOvFqYYI4te+lpwR2JtE=
Subject key identifier: 7C:92:9C:4A:D4:67:17:B1:53:73:CB:5A:8F:D2:A1:08:A8:65:54:0A
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 01A0D9BB6BAAFF47C5BFA5740212EE6E6D35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 1753
Signing time: Fri 25 Sep 2026 18:02:13 +0000
Manifest this update: Fri 25 Sep 2026 18:02:13 +0000
Manifest next update: Sat 26 Sep 2026 18:02:13 +0000
Files and hashes: 1: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: FQL3g24eZWhlk8jz8HNTSz6iMTIY10DuHxjB7yuF/cc=)
2: m1RumSL2Lpkn5xSdos4UK5ogmGo.roa (hash: t8Fp9lqrvZa6bhqA8X/cu7LJ30Q8l1gfuatd+QQW+b8=)
3: tmAwZ9rp_6wm7u527HJaXsN99iU.roa (hash: RX2GBKLuRCt7FRxgKIFpvkG43EUbtKKHIwQ+YaosNiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:6b:aa:ff:47:c5:bf:a5:74:02:12:ee:6e:6d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Sep 25 18:02:13 2026 GMT
Not After : Sep 26 18:02:13 2026 GMT
Subject: CN=7c929c4ad46717b15373cb5a8fd2a108a865540a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:99:ab:79:19:61:0a:60:cc:ec:4b:9d:0b:19:
a5:bb:63:01:2e:47:f3:52:68:56:7d:7c:61:bc:e9:
0e:8f:5b:47:87:71:ba:ca:0b:a2:7f:54:d6:e2:bc:
fa:99:c9:14:9d:85:20:c9:51:3a:ba:10:48:a6:c9:
d5:77:14:81:d2:7c:ad:04:5b:20:ae:f7:7a:c3:eb:
47:14:72:4d:4b:97:b6:fd:e1:f7:8d:63:88:0c:3f:
1b:77:d0:b0:6a:d5:59:01:e8:8f:c0:5b:1f:ce:94:
e9:7f:de:6c:55:62:24:37:a6:45:45:19:f0:32:fd:
4f:f7:d4:7b:49:be:a8:e4:30:dd:6b:4f:50:f3:02:
06:8f:b8:5d:ef:6e:5d:64:1f:08:c4:94:9a:1b:f3:
48:be:77:e9:51:d5:08:15:19:61:b1:23:3b:a2:a3:
c2:8e:fe:5e:5a:46:12:67:e5:d0:23:17:2e:30:85:
a3:ee:76:ab:48:a0:1c:7c:5b:d0:c4:8d:33:9d:b1:
4d:35:cb:21:99:ea:33:28:f9:c2:50:f9:12:d0:e0:
3b:8f:38:80:77:da:10:34:64:25:29:69:dd:d9:ad:
c8:57:28:e2:1e:d6:0e:8c:6f:79:64:53:c1:99:43:
39:2c:6b:cd:6d:4b:20:c7:26:e4:fd:72:49:31:55:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:92:9C:4A:D4:67:17:B1:53:73:CB:5A:8F:D2:A1:08:A8:65:54:0A
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ee:af:04:e7:97:f2:90:d5:94:b9:30:6b:53:34:4d:28:04:
1c:7d:d6:0e:7f:6f:c3:1b:45:6e:8f:93:4e:94:e3:4c:18:7e:
be:f4:ba:5c:87:fd:9d:68:64:8b:b4:49:0e:73:50:44:06:38:
23:85:83:be:4c:b8:16:ca:71:9b:d0:10:87:cf:59:8d:00:03:
fc:bf:5e:84:dc:c0:c4:73:ff:ce:b1:22:3d:61:f2:8e:9a:1b:
66:60:41:f1:b6:7c:27:22:67:c3:53:15:59:56:cd:70:c4:31:
2c:5e:f7:32:68:af:43:62:e9:0b:fa:4c:49:50:0c:c3:25:0e:
48:c0:a3:19:81:f7:10:91:df:28:4f:a9:d5:6c:36:cb:fa:29:
63:d5:3f:8c:9c:5c:d1:8b:c0:b5:0c:03:4f:1b:74:46:e5:9a:
a5:53:cb:6c:1d:f7:da:df:bf:0c:cb:0c:f3:97:6a:1e:6e:67:
2d:cf:c8:b0:47:1a:12:50:3d:ef:05:19:48:1b:29:67:7d:c7:
13:b1:cc:bc:7b:8a:4f:b9:1a:30:45:1b:63:73:16:9f:94:94:
f9:5b:93:c3:eb:99:7e:ed:72:8f:d6:6c:37:e2:ce:7e:f4:8c:
9c:50:6b:c4:5a:36:23:c1:f7:5e:bd:5f:11:f3:4f:b7:59:b3:
3a:5b:31:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZu2uq/0fFv6V0AhLubm01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjgwMGMzOTEyNmRiM2NhNGUwZDU2OTEwZjBhZDM3OTI1
N2U0YTAwHhcNMjYwOTI1MTgwMjEzWhcNMjYwOTI2MTgwMjEzWjAzMTEwLwYDVQQD
Eyg3YzkyOWM0YWQ0NjcxN2IxNTM3M2NiNWE4ZmQyYTEwOGE4NjU1NDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipmreRlhCmDM7EudCxmlu2MBLkfz
UmhWfXxhvOkOj1tHh3G6yguif1TW4rz6mckUnYUgyVE6uhBIpsnVdxSB0nytBFsg
rvd6w+tHFHJNS5e2/eH3jWOIDD8bd9CwatVZAeiPwFsfzpTpf95sVWIkN6ZFRRnw
Mv1P99R7Sb6o5DDda09Q8wIGj7hd725dZB8IxJSaG/NIvnfpUdUIFRlhsSM7oqPC
jv5eWkYSZ+XQIxcuMIWj7narSKAcfFvQxI0znbFNNcshmeozKPnCUPkS0OA7jziA
d9oQNGQlKWnd2a3IVyjiHtYOjG95ZFPBmUM5LGvNbUsgxybk/XJJMVWd3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHySnErUZxexU3PLWo/SoQioZVQKMB8GA1UdIwQY
MBaAFBm4AMORJts8pODVaRDwrTeSV+SgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEt
ZjE4YWQ5ZjRjYzM0LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS84NGI0ODktOGI2Zi00NTlkLTlhMzEtZjE4YWQ5ZjRjYzM0
LzEvR2JnQXc1RW0yenlrNE5WcEVQQ3RONUpYNUtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgu6vBOeX
8pDVlLkwa1M0TSgEHH3WDn9vwxtFbo+TTpTjTBh+vvS6XIf9nWhki7RJDnNQRAY4
I4WDvky4Fspxm9AQh89ZjQAD/L9ehNzAxHP/zrEiPWHyjpobZmBB8bZ8JyJnw1MV
WVbNcMQxLF73MmivQ2LpC/pMSVAMwyUOSMCjGYH3EJHfKE+p1Ww2y/opY9U/jJxc
0YvAtQwDTxt0RuWapVPLbB332t+/DMsM85dqHm5nLc/IsEcaElA97wUZSBspZ33H
E7HMvHuKT7kaMEUbY3MWn5SU+VuTw+uZfu1yj9ZsN+LOfvSMnFBrxFo2I8H3Xr1f
EfNPt1mzOlsxSQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:47:01 2026 by rpki-client