Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: STT8ZT8if7N7KHvEzbz8ObXqOaBS2XcxQtfiBVCde6s=
Subject key identifier: 86:98:8F:5D:18:33:4C:AD:6D:61:96:5F:99:46:66:BC:53:71:E1:0D
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 01A0DCBBB09B70EA470AA8328B7601C8B9AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 08:01:22 +0000
Manifest this update: Sat 26 Sep 2026 08:01:22 +0000
Manifest next update: Sun 27 Sep 2026 08:01:22 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: OURSqE61FemqosJNtmKsWde/pTkJCq4UQy0Vnn6GIQo=)
2: Oigk8x42n2srDK0X7uF3mGQTa5U.roa (hash: XAfo6ieIhAzw5ZZ26D6D8t+cKnugPfgfyLO9JlIq68I=)
3: R48K96yi_NTgRX4KtqsQkdz8i00.roa (hash: bzu9ODXT9wqH3BYpXobenIQwAbgYpMNpV1lKwBLJTDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bb:b0:9b:70:ea:47:0a:a8:32:8b:76:01:c8:b9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Sep 26 08:01:22 2026 GMT
Not After : Sep 27 08:01:22 2026 GMT
Subject: CN=86988f5d18334cad6d61965f994666bc5371e10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:57:9d:0c:72:0c:b7:85:6d:15:bb:8b:09:
70:8a:d2:38:66:93:f9:a7:c7:6b:3f:fd:cd:05:b2:
68:b2:45:c8:23:68:b2:98:1a:b3:a9:b2:e2:a8:9b:
1f:1c:da:5d:92:86:7a:20:7d:0b:86:1f:26:c3:41:
b6:92:9e:33:e8:1a:24:15:c6:28:9f:63:77:00:b5:
2c:4c:a7:32:d6:c6:39:3d:2b:60:6a:7a:75:c4:5e:
04:41:62:3f:0f:63:bd:f0:d6:8f:31:e9:36:f3:e6:
ce:32:cb:7f:73:49:c1:46:a4:3e:6b:17:eb:db:39:
ab:78:b2:47:48:c2:d1:72:61:f7:03:24:77:71:03:
55:47:bb:2a:ee:03:8d:4d:d2:8c:16:f8:0a:8a:a6:
71:ba:39:33:b6:4c:47:e5:89:3f:36:da:84:34:49:
de:79:2c:e4:b2:a2:e6:8b:b2:d3:94:de:48:16:2b:
d3:f7:b5:52:86:4c:44:37:da:8e:6d:70:2b:69:ff:
46:b5:6f:0a:2e:0d:e5:8b:12:47:92:5b:38:55:98:
b5:84:47:58:55:ad:57:2b:e3:97:2f:1b:26:e3:24:
62:17:93:3a:a0:a1:8e:4e:7d:2b:af:04:2f:7e:b6:
48:0b:02:cc:e8:72:ff:17:1e:8b:11:e5:5b:47:28:
dd:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:98:8F:5D:18:33:4C:AD:6D:61:96:5F:99:46:66:BC:53:71:E1:0D
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ed:8d:b3:a1:a4:9d:12:6d:f6:54:3b:e2:cf:8c:fc:d4:9c:
6d:c5:58:eb:20:6b:5c:32:ca:de:b6:37:c7:1c:c7:8e:b8:d5:
b1:d7:d4:33:b2:d5:8b:bd:f4:c5:77:ef:d5:3c:03:75:38:c2:
97:9e:29:9d:a4:b2:ab:69:ba:c8:16:5b:c8:7a:36:39:e6:a4:
63:89:8d:85:36:cf:92:3e:74:9c:50:d8:ba:b8:6f:e5:37:30:
4d:c8:a8:eb:ae:52:71:ba:71:1e:42:49:e7:d6:91:aa:a8:83:
cd:c3:4f:97:56:e8:e2:cf:9a:3d:9c:ea:90:b3:f2:d2:0b:a7:
3e:de:3d:a8:ca:3c:20:b0:c5:89:ed:99:06:0c:66:cb:73:f2:
86:28:5e:fe:fa:46:07:b0:81:71:1e:49:50:40:fd:ed:9b:9f:
3f:9a:0e:8d:1d:35:85:34:2d:76:f5:a2:e2:ab:4e:03:f4:3d:
ce:bb:d8:00:31:ee:92:0c:2b:c5:70:87:41:98:49:89:4a:e8:
b5:7b:50:77:11:9b:64:65:d1:76:f4:12:0b:23:9d:52:7d:ca:
69:b0:13:40:2a:dd:b3:78:51:24:71:77:31:41:e0:61:bb:2f:
78:cd:1e:72:1f:38:fd:a1:46:24:53:fe:9c:2e:51:f1:1a:8f:
40:54:bc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:59:04 2026 by rpki-client