Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: PkbgyXl34NLrkv7EAK1fH4E6VXVvbPVulxVNTF76MZM=
Subject key identifier: 45:56:14:E5:14:91:74:78:DD:30:D6:1D:75:A1:6E:D2:6D:C6:13:55
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 019EBFFF71D0C376336A5F1F38D28FD49725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 08:00:49 +0000
Manifest this update: Sat 13 Jun 2026 08:00:49 +0000
Manifest next update: Sun 14 Jun 2026 08:00:49 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: lEcp4MBOXn3oYw/JbQlkFJMdURhomECLvHDCcTBx4x4=)
2: Oigk8x42n2srDK0X7uF3mGQTa5U.roa (hash: XAfo6ieIhAzw5ZZ26D6D8t+cKnugPfgfyLO9JlIq68I=)
3: R48K96yi_NTgRX4KtqsQkdz8i00.roa (hash: bzu9ODXT9wqH3BYpXobenIQwAbgYpMNpV1lKwBLJTDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:71:d0:c3:76:33:6a:5f:1f:38:d2:8f:d4:97:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Jun 13 08:00:49 2026 GMT
Not After : Jun 14 08:00:49 2026 GMT
Subject: CN=455614e514917478dd30d61d75a16ed26dc61355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:32:e3:b1:37:91:a2:46:10:46:6e:bd:45:3d:
10:1d:fc:0e:e8:86:90:29:b3:d1:29:5c:30:af:44:
f3:f4:b9:59:ab:90:bf:63:74:8f:d6:a8:30:ff:35:
33:dd:c5:29:a5:1d:a6:2a:80:8f:c5:31:3c:9c:cf:
47:5d:57:17:ed:4d:53:5c:3d:8e:f5:1b:10:ff:99:
bd:29:32:69:0f:b2:67:81:a6:3c:69:db:41:24:33:
df:28:4b:af:bf:4c:1a:d2:ba:54:b1:6a:6e:fb:44:
09:73:e3:20:31:bc:5a:72:5d:63:76:3c:b4:2f:5c:
a0:53:ad:fb:6a:90:91:40:30:05:de:50:86:16:09:
df:87:b9:ba:76:87:82:64:28:9a:79:c5:78:b0:12:
60:68:72:bb:77:09:f4:82:e6:bc:af:09:ad:dc:6f:
fd:05:d8:6e:d1:4d:6d:be:a5:81:f6:86:f9:1c:11:
c5:f9:73:04:31:25:72:8f:fc:25:2d:6f:4b:30:40:
52:4e:ce:b3:4e:bc:97:aa:0b:27:e9:6d:f0:85:67:
17:10:c6:5b:50:9a:7b:a0:ed:f7:90:51:63:ed:93:
d1:54:bd:d1:ae:f7:8b:8f:df:6b:51:69:4c:8c:2c:
82:a0:dc:28:ad:13:60:d5:4b:aa:92:bf:ec:dc:68:
43:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:56:14:E5:14:91:74:78:DD:30:D6:1D:75:A1:6E:D2:6D:C6:13:55
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:36:b0:ac:f7:c1:d9:a6:67:2f:ab:9d:32:e4:97:d6:57:48:
97:0a:4b:13:62:f0:f5:b5:ca:ed:e1:0a:2a:27:78:a0:28:e8:
d1:eb:2b:42:da:2f:cd:63:f8:5f:d7:7f:89:91:83:a7:66:42:
f0:33:66:60:70:3a:37:8c:71:42:d7:92:0d:da:48:25:15:84:
26:be:51:4d:98:26:56:72:c2:e7:85:d3:72:ca:19:a4:62:a5:
6e:37:c0:3e:2d:fd:a3:92:c3:6c:2e:4a:61:9d:de:c5:28:a7:
36:4c:df:0d:e7:0c:d2:9a:62:68:dd:ad:2b:f1:22:9d:6b:63:
25:39:61:5d:84:54:e7:05:f9:eb:56:57:5b:29:59:03:f7:75:
8c:f6:7c:3d:fb:46:02:1b:df:80:7e:35:90:12:79:8f:07:a1:
cc:31:4a:0a:47:89:9f:c5:88:5a:86:1b:ac:70:fa:63:81:92:
1d:6e:60:93:25:db:85:4a:3f:55:9d:eb:b3:81:c6:22:54:a4:
c6:e5:45:ab:2c:98:ca:4e:1e:ff:67:9a:6d:ba:2e:b1:dc:9e:
d8:4e:73:b7:a6:c8:a8:fd:ae:66:2f:a5:b7:79:4a:c8:02:69:
19:95:4a:f1:94:e1:92:78:70:ad:e3:ad:3c:18:30:64:7a:2c:
a3:9d:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:32:24 2026 by rpki-client