Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: XpXTpuzWEF1kTCLJJrpBgZx589vXmesuAGJv7+mZTI4=
Subject key identifier: B5:8C:DE:A0:15:73:4A:62:CB:F5:82:5F:27:F9:D4:00:66:97:B9:62
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 019CAEDA0A39BDE947D5CF340F4399C60CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 14:00:50 +0000
Manifest this update: Mon 02 Mar 2026 14:00:50 +0000
Manifest next update: Tue 03 Mar 2026 14:00:50 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: cyTUto8ZEb3yvpaNqDwGw2iKPyEOI7MTFfeM2rEKK6E=)
2: Oigk8x42n2srDK0X7uF3mGQTa5U.roa (hash: XAfo6ieIhAzw5ZZ26D6D8t+cKnugPfgfyLO9JlIq68I=)
3: R48K96yi_NTgRX4KtqsQkdz8i00.roa (hash: bzu9ODXT9wqH3BYpXobenIQwAbgYpMNpV1lKwBLJTDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:0a:39:bd:e9:47:d5:cf:34:0f:43:99:c6:0c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Mar 2 14:00:50 2026 GMT
Not After : Mar 3 14:00:50 2026 GMT
Subject: CN=b58cdea015734a62cbf5825f27f9d4006697b962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:94:da:b5:bc:0c:ec:a5:66:2a:0b:57:dd:4d:
e4:fb:90:08:3d:a3:07:80:c1:b3:38:e3:35:4d:3a:
b4:11:14:27:b3:eb:e8:7d:a0:70:d0:c5:3a:ba:5c:
0c:fb:94:a7:2b:eb:b6:57:e6:f3:d6:a2:cc:1c:e8:
6c:4c:ef:d3:dd:ea:dc:cc:e9:fd:3f:6b:bb:2b:d0:
ff:77:c1:dd:e3:62:0c:76:fb:f4:33:7c:11:66:a4:
64:51:b2:91:67:eb:e3:1e:2a:37:4b:0e:6c:bc:93:
a8:6f:b4:bc:f5:c5:7d:2f:92:41:ba:48:8e:47:93:
e6:18:90:0e:2e:c5:23:74:e5:06:88:99:aa:c5:ad:
5c:96:eb:e7:5c:c9:c6:36:64:9f:6e:a4:4a:dd:78:
d0:c7:c0:7c:24:6d:f6:9a:29:94:46:5b:1c:02:cd:
33:92:49:50:f2:75:65:4c:f1:d6:98:60:de:be:11:
56:40:21:b5:da:9c:fe:df:41:40:1b:e5:c9:ac:ab:
c6:9d:fb:4d:df:d6:34:e2:7e:af:06:d0:d8:c0:0d:
80:28:29:67:28:17:69:6a:a8:69:09:cd:b9:4f:41:
4a:de:4c:79:66:5e:bb:70:cf:c3:e5:1f:e9:63:2a:
dc:8d:29:f1:a6:12:89:37:c9:19:8f:85:cf:a6:00:
a2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8C:DE:A0:15:73:4A:62:CB:F5:82:5F:27:F9:D4:00:66:97:B9:62
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:a4:5a:a0:fd:4c:eb:f0:58:e1:1c:b3:60:3c:de:35:5e:c7:
aa:53:bf:a4:59:1b:77:1b:1a:b1:74:97:0e:8a:cd:ee:70:e6:
85:96:f7:16:e0:33:71:52:24:89:b1:46:a7:54:7f:1c:a6:7f:
ce:27:71:b7:d5:ae:fe:46:97:6a:9f:28:9a:96:70:73:15:0b:
5c:4d:1b:99:be:e3:6c:57:4c:44:0b:94:ae:57:da:e9:7f:fa:
1a:43:07:99:ee:ee:01:bb:2f:6e:41:b2:a1:45:7c:00:0b:09:
66:64:9b:be:bc:77:60:48:9f:a7:88:73:b9:13:75:b9:1d:f5:
28:5e:1f:14:dd:98:58:89:79:87:00:be:a8:af:25:8e:9d:09:
b7:df:be:cf:28:d5:69:45:ec:de:e3:42:60:b4:b0:69:14:3a:
6b:74:3e:e1:02:31:86:b8:ac:36:0d:00:3d:68:5d:5d:5c:ad:
a1:b8:b7:f2:6b:ce:18:74:5d:02:b3:d4:73:bd:2a:a5:8c:86:
9a:10:39:c6:3b:47:54:ab:46:ac:fd:c8:3d:74:a6:93:10:f0:
67:87:c3:aa:74:37:97:96:11:f5:da:a9:f8:df:66:70:eb:f6:
5f:07:7a:82:3a:39:87:25:0a:b5:bc:b0:e5:de:24:61:8a:7f:
62:97:85:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:49 2026 by rpki-client