Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: uGrBg4Kg/moIoxnYluhGbvI0DoZS5ZF93ehQaMB8BMw=
Subject key identifier: 8E:33:EC:29:79:49:75:D3:DE:5C:68:80:B8:E8:F3:25:CE:6D:8B:28
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 019EB62035EEF7E36A0980AFD4411BF0F0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 10:00:24 +0000
Manifest this update: Thu 11 Jun 2026 10:00:24 +0000
Manifest next update: Fri 12 Jun 2026 10:00:24 +0000
Files and hashes: 1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: ouJDEri8agOpyecClOSlFHmDiJ1WqXhamVGyf8Lv/xk=)
2: SiN-egvtwnZmsIkMnlS_ti2Z8oo.roa (hash: +a9n3GtFyFH5JC8/UIBQoBkf21E3Z0ZTMg3tsgsla2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:35:ee:f7:e3:6a:09:80:af:d4:41:1b:f0:f0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Jun 11 10:00:24 2026 GMT
Not After : Jun 12 10:00:24 2026 GMT
Subject: CN=8e33ec29794975d3de5c6880b8e8f325ce6d8b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:b4:b4:4f:20:04:58:1b:57:de:c2:13:84:
3d:70:b8:9b:92:b3:6b:22:ad:07:bc:09:5a:82:2e:
07:47:a3:71:6e:51:52:b7:09:4d:38:57:93:20:b5:
46:05:5f:e8:8e:17:a5:13:b1:40:5f:89:4a:e3:fe:
39:d4:63:04:df:24:5a:30:5a:8c:a5:d2:21:1c:c3:
a3:7f:ef:28:46:9f:64:47:83:27:b6:75:bb:59:83:
73:95:e0:aa:dd:a0:38:f5:a1:46:29:57:cf:85:57:
0b:73:72:19:32:42:63:b0:94:98:22:00:89:a6:29:
7a:89:3e:d7:17:98:ba:32:e3:73:d5:04:c8:88:6f:
40:1d:cb:1e:04:e7:66:d8:24:36:6e:8e:9d:ad:6a:
70:2a:7e:71:cb:8f:60:6f:15:92:ea:9c:36:57:66:
be:d5:5f:8a:c2:59:4d:ba:08:ca:b8:ae:ed:d6:94:
f3:bf:0b:04:cb:08:07:8b:69:ae:67:17:9f:74:f8:
a3:82:0b:b0:aa:e7:03:1e:63:4e:0a:29:31:cf:f4:
82:35:e2:57:f0:06:43:49:bc:e6:8f:a1:18:34:d2:
18:22:0e:ab:80:d2:32:12:dd:4c:c7:41:fa:d2:7a:
0f:32:a2:1a:bc:2b:a4:72:23:84:b3:69:21:61:33:
dc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:33:EC:29:79:49:75:D3:DE:5C:68:80:B8:E8:F3:25:CE:6D:8B:28
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e3:ee:10:3b:e1:32:43:12:43:d4:bf:e3:cd:0b:69:c7:25:
4b:c9:0f:33:62:63:15:4f:af:0b:20:a5:de:18:e0:d7:f5:b0:
50:70:52:5a:a8:25:d2:72:d1:5d:3a:37:14:b1:b2:33:81:0b:
18:9d:42:e8:32:e1:5d:d3:f4:b4:6f:25:3a:56:43:ba:43:71:
25:7d:a9:ca:94:04:4b:f6:51:b4:56:2e:62:2d:ff:52:3f:46:
18:a6:df:57:cd:a3:15:75:80:5b:f9:61:f5:7d:c1:74:16:6c:
04:23:0a:d1:d0:a0:17:a6:17:1a:7d:3a:ab:8d:28:d5:84:72:
9c:53:34:07:ec:5f:5a:79:95:cd:a5:11:ac:37:ae:4d:31:34:
68:03:9f:f1:9b:46:d7:a4:07:29:8d:a8:89:ee:95:db:67:7a:
94:70:2e:cb:ae:24:b9:0d:17:7f:88:e6:47:a1:29:23:24:c7:
59:30:83:9f:78:c5:a6:da:08:76:c8:03:e6:fd:fc:2d:c6:0e:
0b:f5:ff:20:5f:a5:e3:89:93:4c:fc:e4:98:0e:ec:8b:97:3d:
1f:89:db:15:5e:b5:3e:e7:9c:96:f4:12:79:ee:fc:08:18:5d:
98:c3:29:dc:ae:e0:0d:2d:53:d1:a5:a1:4c:b6:b8:a5:61:bd:
a4:44:9c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:00:24 2026 by rpki-client