Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
File: GbEF0UjemWA2_fIcsgijOKFYzto.mft (raw, json)
Hash identifier: ZxmqNB1//F+F2Flv+6aX5FYc4z9msEw9YCjATwzDQtM=
Subject key identifier: 16:5C:F3:4E:A7:51:01:D5:76:87:50:E9:70:8F:6F:47:7B:D5:72:C6
Authority key identifier: 19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
Certificate issuer: /CN=19b105d148de996036fdf21cb208a338a158ceda
Certificate serial: 019CABD98B7F41D91F2056DF95C3B9C8D05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
Manifest number: 07CA
Signing time: Mon 02 Mar 2026 00:01:26 +0000
Manifest this update: Mon 02 Mar 2026 00:01:26 +0000
Manifest next update: Tue 03 Mar 2026 00:01:26 +0000
Files and hashes: 1: GbEF0UjemWA2_fIcsgijOKFYzto.crl (hash: 34HRJAg63y/lDNvhXKVwUeux8no47Y6P2Kj9MojQo5I=)
2: dyUespYQq3mAO5ciQOI9W33sub4.roa (hash: f5ONEWQltft9lq7xj2n38xNWDCpMGTw5GICFFgsknX0=)
3: fSqawDgohGpuSmZo75yc0WkYeBQ.roa (hash: 8OxkTboICrI/6VG3FG9kRuzUoZMlBkjPOzPS7xwaWEU=)
4: nUmvBNvDTQXxBOq0CjmJmn5Dtmc.roa (hash: edmkHUr1mlIvRQnZS+9H+p7B//zDt6WSlQ6S+qA/Trg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:8b:7f:41:d9:1f:20:56:df:95:c3:b9:c8:d0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b105d148de996036fdf21cb208a338a158ceda
Validity
Not Before: Mar 2 00:01:26 2026 GMT
Not After : Mar 3 00:01:26 2026 GMT
Subject: CN=165cf34ea75101d5768750e9708f6f477bd572c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ff:e3:fe:54:72:42:58:d9:65:11:e1:4b:1c:
1c:c5:ff:8a:d5:27:ad:0e:77:79:51:3f:ee:6e:1a:
d3:34:cc:8f:dc:3e:61:8a:df:96:19:99:ac:20:84:
67:e0:d8:57:d0:aa:bd:74:aa:e9:3d:93:45:72:bb:
6d:6a:68:90:2c:91:33:71:bf:14:6a:cb:d9:d8:98:
42:b8:19:06:fd:2f:93:85:a6:10:d3:03:5b:13:e6:
cf:db:33:ed:ea:25:c7:06:ca:ca:f6:65:fb:b9:b5:
6e:40:4a:8c:0b:ab:ae:47:2c:3a:09:a7:c0:8f:10:
ce:8d:f8:85:f0:fc:a5:47:27:e3:35:73:80:1d:7c:
36:9a:f0:1b:22:5f:78:dc:0c:73:19:38:6d:89:e1:
67:33:8c:3d:93:49:ff:b8:52:e3:16:3f:b0:79:39:
21:35:86:e8:a3:d9:29:82:dc:74:5d:9e:1b:4e:8a:
f9:dd:6b:42:19:06:35:8f:46:3d:11:34:74:27:5c:
33:42:a4:4d:89:58:71:61:5a:c0:bd:e7:0d:fd:9b:
ae:7a:7f:43:28:c0:92:41:12:a8:fc:22:73:e0:39:
70:50:a6:48:13:9b:11:3d:ca:f0:77:4b:82:43:dc:
45:42:75:3a:dc:ba:46:7c:e2:2d:54:96:4f:cf:46:
25:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5C:F3:4E:A7:51:01:D5:76:87:50:E9:70:8F:6F:47:7B:D5:72:C6
X509v3 Authority Key Identifier:
keyid:19:B1:05:D1:48:DE:99:60:36:FD:F2:1C:B2:08:A3:38:A1:58:CE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbEF0UjemWA2_fIcsgijOKFYzto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/52cb8d-11d4-4f9c-8f92-26e64d78b0c6/1/GbEF0UjemWA2_fIcsgijOKFYzto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:72:c8:38:9c:45:55:a0:81:1b:07:b1:f4:f7:25:d1:e0:75:
3e:85:35:24:0e:a3:c3:65:0e:2c:9f:1e:51:6c:91:95:dd:2f:
35:66:06:1d:68:8b:65:f1:b1:d3:15:0e:81:c4:b8:3c:c6:44:
73:8d:b0:23:ab:a7:31:9d:44:07:59:b6:85:55:ea:7c:0e:f2:
25:a2:7b:18:29:3b:bd:87:99:95:25:50:f0:cb:02:07:59:bc:
6c:b9:40:b9:79:04:c9:4e:58:1e:db:04:09:5d:2e:5e:35:3b:
05:a2:2b:a0:aa:c3:5f:74:e7:1d:62:26:b8:68:59:f2:63:04:
36:17:4e:8e:79:0f:99:51:65:52:a1:ca:8f:3b:07:4f:0d:9c:
de:75:9f:a9:25:47:b0:d6:f7:1f:1a:96:f9:d5:7a:28:e2:cf:
a3:fd:cb:bc:41:a2:b8:57:50:8b:27:27:49:7a:ef:47:8c:83:
3d:a7:3e:3b:f5:c3:05:28:eb:73:83:05:de:e5:1f:b5:24:0e:
3b:0b:6b:d6:60:1d:d7:9e:d6:60:72:79:1d:23:d2:3a:69:74:
93:71:af:7c:18:17:53:f3:4f:e3:81:10:ef:67:3b:e0:b0:9d:
52:f9:65:cd:6b:e0:ff:f8:c7:00:f7:f9:01:5b:e1:f0:69:7c:
f9:1a:ae:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:01 2026 by rpki-client