Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: B9tjPRBgMz8YOUIiI1bQbAlTljs+uZhK5QCgzV7ZUUQ=
Subject key identifier: 8D:EF:C4:C9:25:A8:7B:C1:F3:8B:C4:22:72:34:CC:10:16:82:C9:7A
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 019FAA88916E57265C3AF1F0F91E333C1FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 16B6
Signing time: Tue 28 Jul 2026 21:01:44 +0000
Manifest this update: Tue 28 Jul 2026 21:01:44 +0000
Manifest next update: Wed 29 Jul 2026 21:01:44 +0000
Files and hashes: 1: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: p2FNj+KaqGMfoIMvN9BFB4oE+zhitAVS7MVan+fl5Cc=)
2: m1RumSL2Lpkn5xSdos4UK5ogmGo.roa (hash: t8Fp9lqrvZa6bhqA8X/cu7LJ30Q8l1gfuatd+QQW+b8=)
3: tmAwZ9rp_6wm7u527HJaXsN99iU.roa (hash: RX2GBKLuRCt7FRxgKIFpvkG43EUbtKKHIwQ+YaosNiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:91:6e:57:26:5c:3a:f1:f0:f9:1e:33:3c:1f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Jul 28 21:01:44 2026 GMT
Not After : Jul 29 21:01:44 2026 GMT
Subject: CN=8defc4c925a87bc1f38bc4227234cc101682c97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:28:46:e9:7e:38:17:98:c0:33:48:e6:3a:81:
37:43:18:6d:7c:96:43:32:42:33:89:6f:9d:e0:8d:
10:5e:32:d9:70:92:af:5f:2a:73:77:9d:03:28:b1:
c4:5e:7c:f3:4a:c2:a8:e1:af:91:f0:98:49:6a:ef:
45:76:90:19:75:87:6d:29:ca:5f:ae:5f:da:fe:49:
f8:d8:8e:34:ff:4a:b1:40:3a:c5:36:59:3c:20:57:
ae:3c:7c:38:6b:28:61:be:bb:ff:9c:0f:26:f2:cf:
5f:02:99:d0:9b:c4:9c:e2:da:27:e7:19:85:fe:d4:
5c:43:02:33:0b:82:59:3b:f4:0f:cb:1e:fa:51:ef:
f7:89:6d:d2:a1:05:0e:0b:4a:4a:d9:6a:39:6a:17:
2c:5d:f7:e6:09:66:97:1c:5f:bd:81:a9:f9:22:9e:
7b:f5:9b:17:18:ee:89:9f:9d:b9:fb:09:4a:20:bc:
79:7c:b1:f4:3c:2b:8b:0e:47:22:f1:2c:12:b1:e2:
07:be:c0:78:3a:fc:a6:a8:55:8a:f4:89:e8:b4:14:
6f:f5:b6:6f:39:9f:35:85:41:8f:0b:60:c8:47:0d:
b6:18:f1:34:25:11:69:ba:e7:c0:5f:0d:f7:ba:1f:
2e:50:ef:6d:c5:61:81:e9:96:00:dc:ab:29:32:e9:
ab:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EF:C4:C9:25:A8:7B:C1:F3:8B:C4:22:72:34:CC:10:16:82:C9:7A
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:51:0f:78:78:bc:1e:f7:7b:f6:75:34:8e:9c:51:da:f6:94:
18:2d:37:5d:51:bf:e4:55:c1:06:d1:cf:6a:6d:30:d8:df:16:
61:9f:00:9a:a0:fa:37:63:0a:78:cc:4b:e6:92:ce:04:09:0e:
8f:1a:40:ce:7f:e5:f3:5c:76:7f:1b:49:d8:38:c5:4f:46:f4:
c4:35:b1:2c:a5:42:1d:9a:c3:89:c3:b6:a4:07:56:fd:6f:0e:
71:3b:98:d0:50:49:c3:0c:95:2b:c4:a6:c7:60:1f:d1:d2:4f:
64:d2:fd:ea:6c:c6:74:66:3f:98:fc:07:88:70:04:d1:60:ae:
9d:a8:60:0c:0a:6f:4e:1c:0a:c2:72:91:25:a9:32:51:0d:c9:
c8:c9:6b:e5:3b:d5:9b:7e:02:4d:7a:f0:61:d8:d5:f3:9d:96:
fc:96:91:d7:bc:ad:46:b4:72:4d:95:b2:ba:e9:f8:fd:1e:6c:
ef:64:a1:c0:9e:a0:b2:f2:d6:f7:f1:c9:af:b0:82:d1:32:e5:
d6:c1:3f:d3:17:2d:ab:17:d2:da:06:4f:66:5a:87:96:b7:b7:
8f:c5:9d:21:43:97:ab:b8:3e:67:e8:57:a2:43:ef:c6:50:3b:
ab:f4:71:ed:ce:38:67:2d:76:52:b7:53:1b:50:4f:40:89:73:
9e:99:54:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:42 2026 by rpki-client