Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: AQbj+qAanTn7WXrn6aelKY61wcarJUKXbQg3dqZqT1o=
Subject key identifier: 32:A3:98:57:71:31:9A:9A:3D:E8:7A:4A:30:20:9D:77:3C:04:61:73
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 01A17702F0CF5ED7A9CE8D6AE16A4D7CE508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 1AC2
Signing time: Mon 26 Oct 2026 07:00:43 +0000
Manifest this update: Mon 26 Oct 2026 07:00:43 +0000
Manifest next update: Tue 27 Oct 2026 07:00:43 +0000
Files and hashes: 1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: U/q75d7Nfn/yydvzTRxJXWQFnQ3bW/hXhDHdctjN59c=)
2: SiN-egvtwnZmsIkMnlS_ti2Z8oo.roa (hash: +a9n3GtFyFH5JC8/UIBQoBkf21E3Z0ZTMg3tsgsla2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:77:02:f0:cf:5e:d7:a9:ce:8d:6a:e1:6a:4d:7c:e5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Oct 26 07:00:43 2026 GMT
Not After : Oct 27 07:00:43 2026 GMT
Subject: CN=32a3985771319a9a3de87a4a30209d773c046173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:b1:7d:96:c2:d7:6f:58:3c:3a:da:22:3e:
9c:ef:48:97:e5:21:46:f5:e7:17:f3:f2:d6:9b:00:
87:9a:36:a5:db:71:1c:17:e1:b2:4d:54:e2:fb:23:
c2:8f:e3:65:b2:2a:6b:72:0f:29:a5:d4:75:50:23:
c4:b6:d3:17:01:f7:06:03:15:67:be:80:2f:5d:52:
b7:f8:59:8c:e0:a8:b7:f7:c1:e1:9d:4e:20:ac:a6:
67:04:b3:3d:ba:5d:90:cb:c2:7a:94:7f:2d:45:28:
86:d9:48:0c:2e:3b:89:a3:d6:40:87:30:14:10:c2:
9a:5f:a5:26:95:62:54:97:2a:c8:86:15:c5:f2:c8:
46:0b:ef:26:70:0e:ab:63:ef:d2:7c:55:5a:c8:a2:
ac:9d:62:03:25:26:ea:1d:f0:44:86:48:9f:e0:fb:
98:1e:b4:0d:93:aa:d5:7c:23:93:ad:ed:75:01:1c:
f2:c1:29:7f:88:fe:c7:26:f9:85:60:89:37:02:ae:
c1:c2:06:19:5e:17:43:29:66:dd:1d:01:8e:4d:c0:
c2:65:c7:fd:57:cc:58:5b:65:60:36:c8:0a:d6:57:
16:26:0a:99:75:91:ee:33:6d:b7:69:21:3a:9e:8f:
03:46:1a:0f:57:d5:64:68:b3:d9:95:9c:59:43:61:
9d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:A3:98:57:71:31:9A:9A:3D:E8:7A:4A:30:20:9D:77:3C:04:61:73
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:80:45:a3:73:5a:c2:a0:29:a2:af:17:fd:d1:89:0d:0a:b9:
e5:43:23:87:4f:9d:54:e8:db:f1:f4:02:32:2f:b4:b3:b6:24:
c2:b1:a8:7b:89:f0:0a:72:73:73:34:b2:63:bd:a4:d3:53:99:
d2:d7:1b:cc:c3:d0:f5:f7:0f:f6:84:06:e5:74:a7:29:d4:30:
72:b8:86:fb:be:ab:15:d8:07:90:49:3a:2f:3b:11:47:cf:31:
06:6c:72:b1:e9:b1:b0:70:d7:7d:dd:5f:96:7a:28:6e:d2:d1:
53:b4:9e:8e:e3:c0:3e:66:b0:1d:a9:c7:ec:eb:2c:8b:77:b0:
f1:f7:f5:3d:b8:c9:a9:7f:1d:f1:22:49:76:a1:8f:de:70:5e:
51:a2:11:05:f4:70:41:63:99:51:76:08:57:e1:c6:0a:25:2c:
ce:a5:13:26:fc:31:f0:cb:06:db:d8:b4:4c:fd:48:9f:df:87:
eb:bb:41:4d:e8:c0:e6:48:01:0f:3b:0b:b3:c1:10:cd:8b:f4:
93:d2:af:f0:e5:81:e5:9d:07:6c:ab:07:6c:ba:db:53:43:c5:
d7:43:4e:94:70:78:68:f8:bf:26:60:e7:ca:26:bb:a9:6a:fc:
be:9e:ef:ae:98:d7:90:12:a0:b2:23:13:aa:35:ce:91:63:cb:
d1:59:be:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF3AvDPXtepzo1q4WpNfOUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YmNjNDA3YmYzODgxZTI5NjZhNTQ4YzQzMmIzZjA0MDE0
Njk5ZGQwHhcNMjYxMDI2MDcwMDQzWhcNMjYxMDI3MDcwMDQzWjAzMTEwLwYDVQQD
EygzMmEzOTg1NzcxMzE5YTlhM2RlODdhNGEzMDIwOWQ3NzNjMDQ2MTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuexfZbC129YPDraIj6c70iX5SFG
9ecX8/LWmwCHmjal23EcF+GyTVTi+yPCj+Nlsiprcg8ppdR1UCPEttMXAfcGAxVn
voAvXVK3+FmM4Ki398HhnU4grKZnBLM9ul2Qy8J6lH8tRSiG2UgMLjuJo9ZAhzAU
EMKaX6UmlWJUlyrIhhXF8shGC+8mcA6rY+/SfFVayKKsnWIDJSbqHfBEhkif4PuY
HrQNk6rVfCOTre11ARzywSl/iP7HJvmFYIk3Aq7BwgYZXhdDKWbdHQGOTcDCZcf9
V8xYW2VgNsgK1lcWJgqZdZHuM223aSE6no8DRhoPV9VkaLPZlZxZQ2GdxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKjmFdxMZqaPeh6SjAgnXc8BGFzMB8GA1UdIwQY
MBaAFBm8xAe/OIHilmpUjEMrPwQBRpndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYt
NDQ5NzdkN2FiOWNhLzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYtNDQ5NzdkN2FiOWNh
LzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYBFo3Na
wqApoq8X/dGJDQq55UMjh0+dVOjb8fQCMi+0s7YkwrGoe4nwCnJzczSyY72k01OZ
0tcbzMPQ9fcP9oQG5XSnKdQwcriG+76rFdgHkEk6LzsRR88xBmxysemxsHDXfd1f
lnoobtLRU7SejuPAPmawHanH7Ossi3ew8ff1PbjJqX8d8SJJdqGP3nBeUaIRBfRw
QWOZUXYIV+HGCiUszqUTJvwx8MsG29i0TP1In9+H67tBTejA5kgBDzsLs8EQzYv0
k9Kv8OWB5Z0HbKsHbLrbU0PF10NOlHB4aPi/JmDnyia7qWr8vp7vrpjXkBKgsiMT
qjXOkWPL0Vm+Aw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 12:40:20 2026 by rpki-client