Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: aIsEo/jTrvlhElYE6l7+8du3uMdPNPcUigd/cXTrgc8=
Subject key identifier: BE:98:A3:9F:15:11:5A:EF:2F:84:F9:16:8C:7D:E7:FE:D1:16:51:F1
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 019FAC7620EF36A184F102298A013E9C758C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 16B7
Signing time: Wed 29 Jul 2026 06:00:50 +0000
Manifest this update: Wed 29 Jul 2026 06:00:50 +0000
Manifest next update: Thu 30 Jul 2026 06:00:50 +0000
Files and hashes: 1: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: v4pyOQrUaM/n5R1f8B4nCLKnpcIa2I5hlW0i+xUh5mE=)
2: m1RumSL2Lpkn5xSdos4UK5ogmGo.roa (hash: t8Fp9lqrvZa6bhqA8X/cu7LJ30Q8l1gfuatd+QQW+b8=)
3: tmAwZ9rp_6wm7u527HJaXsN99iU.roa (hash: RX2GBKLuRCt7FRxgKIFpvkG43EUbtKKHIwQ+YaosNiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:20:ef:36:a1:84:f1:02:29:8a:01:3e:9c:75:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Jul 29 06:00:50 2026 GMT
Not After : Jul 30 06:00:50 2026 GMT
Subject: CN=be98a39f15115aef2f84f9168c7de7fed11651f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:42:39:49:1a:95:58:06:75:6d:63:ec:89:
f9:41:6a:59:5d:01:1e:c0:89:ac:f2:df:cc:46:88:
f6:14:37:57:51:8b:48:71:79:fe:32:43:e6:82:70:
2a:53:0d:38:e4:4b:e4:c4:8c:31:0e:32:c8:4c:0d:
66:37:b2:71:6d:76:eb:7b:60:21:2a:90:6f:ca:42:
3c:ad:96:6b:44:02:b9:03:f0:25:1b:f3:14:d1:ba:
e9:12:74:6a:44:9d:b7:0a:66:f8:1e:e8:fc:3e:f6:
ba:94:4a:07:d9:ec:65:ff:ce:17:c1:88:2b:80:c4:
33:5e:f9:93:da:d1:84:7b:c8:75:c4:d6:50:dc:fa:
ea:8e:4f:04:66:30:85:65:8e:93:91:77:77:25:bf:
2c:7a:8d:a8:42:40:e0:db:b0:aa:76:6b:d1:f3:3a:
c2:a8:6f:f7:a3:e3:41:2c:32:0c:9d:66:68:af:98:
a8:da:eb:a3:45:c6:b9:2e:3a:70:a8:14:4f:f6:e1:
ca:18:df:a7:7e:17:18:65:1b:00:bf:f2:d7:61:55:
e2:c0:5d:ec:1d:65:7f:61:ae:ff:97:aa:dc:9c:5a:
4f:55:ec:c6:40:b8:c9:f1:15:58:8a:73:6c:1e:a2:
f5:84:f3:97:ba:c0:29:a4:61:c3:38:21:33:37:e7:
48:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:98:A3:9F:15:11:5A:EF:2F:84:F9:16:8C:7D:E7:FE:D1:16:51:F1
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3b:d2:fb:59:92:a6:0b:48:4f:34:4d:28:5b:51:92:d3:63:
d7:c0:97:50:3e:71:b3:32:06:93:0c:fc:28:24:18:ca:6f:9a:
57:87:89:09:46:a9:ad:a7:1f:7e:a2:75:74:de:5a:c9:8e:c4:
e1:99:ad:d2:01:e8:de:5a:9a:f2:09:7a:fb:ba:c0:74:00:4e:
91:69:25:70:6e:b9:1a:0e:d5:a6:f2:76:33:38:94:01:81:c6:
12:5e:0e:d9:6a:19:29:49:dc:b6:5b:8d:1f:eb:a0:f7:f3:f0:
02:01:f7:5e:ff:dd:fc:fe:1f:4d:8c:07:8d:93:95:94:d0:1c:
37:43:bd:5c:ff:ff:6d:42:40:cc:3f:bf:16:a8:f2:fb:85:17:
52:ca:83:59:3d:56:0a:f7:b4:f8:aa:d4:26:99:fe:22:29:c9:
c8:cc:71:4c:0c:0a:5f:52:88:39:de:d5:2c:7f:a3:b7:a7:2b:
ba:d6:fc:44:10:af:5b:50:88:e5:d7:fc:d1:0f:7e:8a:37:22:
31:40:f1:bb:76:27:c5:02:67:aa:db:cd:41:28:b9:7e:fa:00:
e7:0c:fd:e0:24:2f:39:6f:b9:00:ab:fa:b7:cb:5a:d9:bf:b0:
a1:11:fd:1a:ab:4b:4d:5a:9c:08:d7:85:a5:d3:8e:74:7a:dd:
af:1a:85:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:15:45 2026 by rpki-client