Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: jSvXm6Ulg4pUm94252K1pztyxoYmvyvfckz51mHSZrM=
Subject key identifier: 81:55:9C:19:9A:E6:FE:FF:19:32:55:53:F0:3A:40:DE:08:5F:85:B7
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 019F830BCF21B5B70640A0B953E2FB60B5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 19BF
Signing time: Tue 21 Jul 2026 05:00:16 +0000
Manifest this update: Tue 21 Jul 2026 05:00:16 +0000
Manifest next update: Wed 22 Jul 2026 05:00:16 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: OxIuNc159R54zB2WS52nVabys2NcBXX2u3b9UUd11kI=)
2: Oigk8x42n2srDK0X7uF3mGQTa5U.roa (hash: XAfo6ieIhAzw5ZZ26D6D8t+cKnugPfgfyLO9JlIq68I=)
3: R48K96yi_NTgRX4KtqsQkdz8i00.roa (hash: bzu9ODXT9wqH3BYpXobenIQwAbgYpMNpV1lKwBLJTDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:0b:cf:21:b5:b7:06:40:a0:b9:53:e2:fb:60:b5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Jul 21 05:00:16 2026 GMT
Not After : Jul 22 05:00:16 2026 GMT
Subject: CN=81559c199ae6feff19325553f03a40de085f85b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d6:1a:8f:78:cb:d6:44:d7:ce:c6:ad:df:91:
84:b0:53:34:a8:75:90:4a:86:c2:0c:0e:1f:4d:5b:
f4:65:f8:04:1d:ef:e2:8e:a4:a7:0a:f1:0e:e8:e5:
88:3a:4e:9d:b9:59:04:0b:63:07:3f:3c:b5:ff:86:
07:18:03:9f:d3:88:1b:57:41:32:48:a7:9a:05:06:
2c:8a:88:08:1d:fd:f1:5e:c8:52:3a:7c:a1:c4:30:
c6:75:9e:c9:00:ff:46:85:7b:12:70:40:93:ec:6d:
f9:f0:3f:42:ac:af:07:d1:0c:9b:04:ab:cb:02:6e:
b4:a0:55:8a:b7:2a:f5:29:31:ed:28:b0:af:88:bf:
fa:fa:cf:b1:a4:0b:ec:18:4a:53:b9:0e:f7:18:15:
59:d5:8f:e2:b8:c4:16:f0:4c:71:5a:17:dc:fd:b2:
83:db:07:0c:99:ec:ff:d5:f1:a9:ca:80:19:a8:74:
6e:8c:02:ab:c0:f2:54:22:3b:02:a6:0a:ff:43:32:
ae:77:9d:93:7f:68:99:5c:92:38:7f:97:b7:34:b1:
85:92:46:06:17:60:f6:db:06:c9:93:59:d1:54:96:
7c:1a:32:54:61:0a:d7:80:69:cb:1f:bd:d2:bd:0b:
79:9f:7b:3f:04:19:81:15:33:91:a1:1c:df:97:97:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:55:9C:19:9A:E6:FE:FF:19:32:55:53:F0:3A:40:DE:08:5F:85:B7
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:9b:6c:82:88:06:88:23:49:9e:aa:42:fe:96:c3:0d:a1:95:
66:10:0f:79:e4:67:04:d1:f2:d7:cd:3b:5e:ab:f0:26:0c:36:
d5:51:7b:29:a1:24:d6:f9:53:90:ce:82:78:46:9d:dd:2b:eb:
0c:74:82:08:9f:e1:2e:dc:f6:5e:24:6c:b2:ea:14:2f:c9:e4:
0b:0a:f4:4f:17:27:1a:b4:c2:a7:95:f4:bb:5b:e3:21:5a:a4:
fd:1c:40:6c:bd:5f:ac:f1:fc:43:5c:38:de:db:b4:39:ae:f0:
79:10:c3:1e:0a:95:96:a5:d9:ba:f2:fc:51:00:b1:8e:61:4e:
58:3c:a0:77:f8:ac:aa:1f:74:97:85:89:a1:15:8d:ab:8f:2a:
54:3d:cb:25:e4:a3:cf:8a:f0:10:15:46:b0:d7:2c:32:d7:e7:
11:e1:c7:42:01:19:c6:e4:53:e9:98:46:34:46:25:0d:13:fc:
13:dc:29:10:87:b0:50:1c:71:8d:d4:69:67:3c:78:df:09:b5:
c0:f6:5f:ff:84:b1:ef:1e:53:fd:ec:f6:12:5c:82:34:14:3d:
6d:d7:38:05:ea:26:51:97:95:d2:31:76:f2:50:f7:b3:ff:33:
23:7d:07:37:c2:d3:89:67:dc:f9:ac:cc:76:bf:ea:0e:1f:41:
b4:b5:f4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:07:42 2026 by rpki-client