Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: onq/lIlO2HkB3CMsT4ww5VIEuv5GNF7XL5IDdqMUnIU=
Subject key identifier: 36:E8:4D:19:52:58:9C:BE:F3:2A:50:9B:9B:66:94:C2:26:E0:FA:1D
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 019CABD8FFD998F96730B2BF7925D917BDFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 1529
Signing time: Mon 02 Mar 2026 00:00:51 +0000
Manifest this update: Mon 02 Mar 2026 00:00:51 +0000
Manifest next update: Tue 03 Mar 2026 00:00:51 +0000
Files and hashes: 1: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: wQVdhiyekbNhqjemhLCvQnu8/LRkpzCP+3lWz2pdZYo=)
2: m1RumSL2Lpkn5xSdos4UK5ogmGo.roa (hash: t8Fp9lqrvZa6bhqA8X/cu7LJ30Q8l1gfuatd+QQW+b8=)
3: tmAwZ9rp_6wm7u527HJaXsN99iU.roa (hash: RX2GBKLuRCt7FRxgKIFpvkG43EUbtKKHIwQ+YaosNiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:ff:d9:98:f9:67:30:b2:bf:79:25:d9:17:bd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Mar 2 00:00:51 2026 GMT
Not After : Mar 3 00:00:51 2026 GMT
Subject: CN=36e84d1952589cbef32a509b9b6694c226e0fa1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ab:a6:a8:37:42:b7:b8:ae:d3:87:80:be:1d:
a8:d5:63:34:c3:01:65:ea:45:81:8a:f4:cc:51:99:
03:b6:80:bc:4a:ca:ce:a8:2f:6e:90:21:e2:7d:13:
c2:39:cc:df:c9:87:aa:a5:f1:59:43:c3:26:12:c6:
df:b8:41:4f:ad:1b:03:cb:5d:3a:69:b1:b4:06:e4:
db:bc:73:0a:35:aa:d7:97:f7:9c:49:53:0a:25:c4:
d6:04:2c:f2:bb:dd:30:f1:eb:48:a1:92:1f:34:3d:
8c:8c:4e:3d:9e:62:ad:57:a4:3a:91:d7:c0:8d:cc:
2f:d3:35:fa:ee:2b:91:34:af:fd:80:94:52:ac:0f:
98:ec:5f:8b:ab:23:6e:bb:14:48:62:de:d1:d2:aa:
f5:c7:85:31:f4:16:f0:7f:dc:b2:63:47:62:99:73:
71:ea:14:11:43:99:24:6f:b2:2a:f8:f9:bc:0f:73:
d2:cb:6c:3d:4a:bc:f9:07:a0:75:a0:f4:a8:28:0b:
03:a5:9b:e6:15:9b:53:42:d7:af:2f:ea:6f:4e:97:
9d:22:cb:7e:29:14:a6:bb:c7:07:d9:68:68:eb:cd:
84:4b:23:69:33:d0:f8:33:45:9b:eb:df:18:3b:f7:
b9:7e:84:db:92:95:93:46:c6:6e:52:76:8e:a1:af:
15:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E8:4D:19:52:58:9C:BE:F3:2A:50:9B:9B:66:94:C2:26:E0:FA:1D
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cb:06:77:55:ab:89:09:bb:e6:0a:c4:fe:4f:07:ae:94:ae:
74:81:f1:2b:86:4b:7f:48:72:d4:97:07:bf:07:43:d9:e8:15:
8a:b7:b2:9d:af:b5:51:27:43:fc:87:b2:04:56:c8:74:3f:4c:
73:7b:72:11:13:1f:53:b3:50:ad:66:fb:44:bd:f1:e0:61:f8:
53:62:e3:93:f5:d0:af:05:c6:7d:f5:fa:4f:4e:d7:81:d9:55:
80:e8:1e:64:9f:c9:b7:93:4a:ae:b2:7a:b2:c6:8a:7d:fb:60:
df:f9:a6:22:90:0a:f5:86:eb:ed:ae:25:2e:8e:67:e8:0b:69:
bf:a3:fc:20:aa:6c:25:f8:ca:54:cd:ae:ef:7d:af:5d:b0:66:
34:0d:e2:42:ab:59:72:a2:93:b6:f2:c3:e3:fa:59:47:38:83:
22:83:c8:39:61:b3:00:ac:9c:a3:d8:1c:a0:2b:9d:c2:16:fb:
64:af:ea:2c:39:4a:26:22:a9:81:fa:40:2e:c4:17:60:26:d7:
96:59:e1:b9:e5:79:52:a6:2a:3d:e7:ba:50:ff:3b:7f:5c:41:
da:fe:35:98:97:ec:10:f0:55:f0:58:e2:54:45:9e:6c:62:4d:
de:c5:7e:49:e6:08:f1:6a:fb:a2:02:41:70:dd:64:7d:49:ab:
72:4d:15:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:57 2026 by rpki-client