Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: 7Q+L8HhSQ7CKlVKoyOMn7F/USs2n3DnlJAYh9heRSdQ=
Subject key identifier: 67:6D:58:88:F9:E3:D7:92:CE:ED:92:C5:18:98:05:A2:76:92:BB:ED
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 019D9B50C8353057EAE2BFACC10D7B7C9B99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 15A5
Signing time: Fri 17 Apr 2026 12:00:55 +0000
Manifest this update: Fri 17 Apr 2026 12:00:55 +0000
Manifest next update: Sat 18 Apr 2026 12:00:55 +0000
Files and hashes: 1: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: Rfpi1ESr1Qr7rtU1tQVbHT1zr6D0TOkLQ1VyixI4cwE=)
2: m1RumSL2Lpkn5xSdos4UK5ogmGo.roa (hash: t8Fp9lqrvZa6bhqA8X/cu7LJ30Q8l1gfuatd+QQW+b8=)
3: tmAwZ9rp_6wm7u527HJaXsN99iU.roa (hash: RX2GBKLuRCt7FRxgKIFpvkG43EUbtKKHIwQ+YaosNiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:c8:35:30:57:ea:e2:bf:ac:c1:0d:7b:7c:9b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Apr 17 12:00:55 2026 GMT
Not After : Apr 18 12:00:55 2026 GMT
Subject: CN=676d5888f9e3d792ceed92c5189805a27692bbed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f0:6f:aa:74:76:59:6b:d1:e4:94:99:6f:be:
8e:74:62:b3:00:00:9b:74:91:0d:52:81:42:9f:f6:
15:32:f8:09:b0:ba:3b:40:a5:77:9b:26:08:77:cc:
26:8b:76:5f:35:0e:56:f5:6e:ad:75:0b:67:17:03:
f1:70:d2:0b:f2:cb:95:49:c9:d9:95:16:b1:5a:8e:
a3:50:00:85:02:51:4e:0a:c4:1c:b1:8a:b5:15:44:
b9:56:c1:f3:15:22:a8:11:ba:7f:22:da:08:76:1c:
06:69:b8:fa:ac:53:58:51:14:9b:8e:1d:3e:97:69:
8a:1b:b4:b8:b2:01:8c:31:3b:b9:93:3c:68:fc:4a:
71:ef:2b:30:85:b1:38:4d:6d:c1:bf:e0:58:ef:cd:
e9:24:26:75:88:d1:1d:91:59:b9:f2:46:38:78:99:
2c:ac:eb:a5:2b:fc:7b:fa:17:58:08:1a:41:3c:0d:
44:57:73:7e:50:d0:d8:5b:e9:82:82:a6:40:6a:59:
3c:d6:cd:28:bb:44:49:01:7b:6e:b0:c6:1b:08:fd:
3b:96:0c:44:28:8c:ff:ca:de:1e:8f:49:ce:6a:02:
c2:30:14:be:bb:c2:06:b3:7c:18:26:98:5f:71:53:
fa:d6:36:64:c2:84:9e:f0:93:8a:21:2a:1c:c7:d2:
3f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6D:58:88:F9:E3:D7:92:CE:ED:92:C5:18:98:05:A2:76:92:BB:ED
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:a0:03:89:34:72:34:e2:1a:54:9e:6d:ed:16:d5:af:6d:c9:
89:3a:d8:9e:97:8a:4c:08:37:da:6b:80:58:1a:20:fd:02:d6:
d9:e1:6c:22:8a:37:b2:dd:e7:3f:b7:97:50:6a:20:a8:9e:9b:
c2:89:d3:e3:2f:8b:c7:7c:20:a3:02:a5:fe:f2:1e:94:72:07:
f2:90:54:7c:ee:c9:11:90:32:1f:3d:b1:f8:da:89:42:5f:54:
b7:3e:ab:e9:9d:f0:29:d3:8f:12:db:c2:6d:31:d8:51:7b:07:
dc:14:d8:0e:fb:c0:e1:c9:9c:62:27:04:a9:fd:3b:62:04:3f:
74:81:e1:98:0d:32:01:f2:04:62:4b:28:cf:8d:dd:cd:1c:a1:
82:79:a9:f6:f3:aa:b1:56:cf:12:83:99:19:d8:9b:10:ec:ea:
7d:ba:c6:59:bf:a6:6b:20:2d:fe:8a:a8:a2:51:f8:ba:79:e1:
5d:18:17:6b:a8:c1:78:a3:1f:41:3e:78:8e:b3:b4:e4:e6:44:
7b:d3:0e:d3:35:f7:c8:84:c5:17:1e:3e:53:37:11:65:44:8a:
7f:52:80:fd:16:2e:c6:43:7a:de:d0:2a:d4:94:20:fe:9b:c6:
a7:05:14:e8:5a:0f:0b:94:33:3f:4b:99:96:3b:c4:f9:2e:0e:
89:5b:c4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:34 2026 by rpki-client