Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
File: GBxTLx_zEilN0RxRGxd80zyDBFY.mft (raw, json)
Hash identifier: SZZHgPh69HE+5Jhyej6lqWMTYiCwLk4RZ4KVBrlNbNQ=
Subject key identifier: 7A:09:CB:12:81:AF:13:8B:23:FE:17:12:05:C6:36:5D:C6:F6:7B:B7
Authority key identifier: 18:1C:53:2F:1F:F3:12:29:4D:D1:1C:51:1B:17:7C:D3:3C:83:04:56
Certificate issuer: /CN=181c532f1ff312294dd11c511b177cd33c830456
Certificate serial: 01A180AB09014686E12E191051F491EC05C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
Manifest number: CE
Signing time: Wed 28 Oct 2026 04:00:54 +0000
Manifest this update: Wed 28 Oct 2026 04:00:54 +0000
Manifest next update: Thu 29 Oct 2026 04:00:54 +0000
Files and hashes: 1: GBxTLx_zEilN0RxRGxd80zyDBFY.crl (hash: N2ZZDRjmG2Iob3PZtBriEiZmsJlt6IWXmWkP2ZqXAlw=)
2: SmH0Y2akj9BXoPJsoCRP_5Abq_4.roa (hash: noEFjTcJ4li+Z5lYJLyOd4NFqf9iNEJOmVPDK4Ua36c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:ab:09:01:46:86:e1:2e:19:10:51:f4:91:ec:05:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=181c532f1ff312294dd11c511b177cd33c830456
Validity
Not Before: Oct 28 04:00:54 2026 GMT
Not After : Oct 29 04:00:54 2026 GMT
Subject: CN=7a09cb1281af138b23fe171205c6365dc6f67bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b4:82:8b:d7:74:8a:f5:1d:fe:69:c3:23:2a:
5c:58:eb:a8:d0:da:b9:9a:2c:fe:4b:fc:27:90:36:
a0:64:22:4a:e6:a5:b3:05:77:0d:b1:fa:4b:17:b4:
06:1e:07:dc:db:79:59:a6:e6:8e:f9:46:96:3a:de:
50:a0:9c:a9:ab:48:22:6d:14:ae:7d:cc:1c:aa:d1:
fa:25:94:da:39:d4:43:d5:06:1f:02:b7:f4:7b:eb:
2e:0e:39:be:03:37:78:96:db:f5:7b:b8:c7:44:85:
e1:ae:f1:08:f6:d9:d1:82:1b:21:b8:80:f5:46:1f:
b3:cb:4d:20:12:58:34:a3:d3:3f:f1:0f:b3:bc:97:
b5:1a:c3:af:f2:29:08:c4:6e:d0:56:7a:7d:cb:bc:
22:4b:01:96:7a:77:02:07:37:e4:a8:39:d2:b9:75:
84:92:06:ba:14:d6:2e:ef:81:3e:ba:fa:22:4a:45:
cf:43:c0:b1:4f:91:73:0a:68:d6:39:ed:33:28:6d:
09:74:e6:2b:06:50:a7:fa:98:d8:e7:cc:d1:41:db:
b7:ce:bb:6e:e2:bb:89:d0:3c:73:bd:80:c2:be:d6:
47:eb:e7:37:26:c5:08:ab:3d:f3:e2:6a:cd:f2:76:
21:ba:5a:11:a7:0e:15:5e:3f:e0:3a:4e:f0:90:68:
fe:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:09:CB:12:81:AF:13:8B:23:FE:17:12:05:C6:36:5D:C6:F6:7B:B7
X509v3 Authority Key Identifier:
keyid:18:1C:53:2F:1F:F3:12:29:4D:D1:1C:51:1B:17:7C:D3:3C:83:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBxTLx_zEilN0RxRGxd80zyDBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2dd792-7cca-4946-a02c-189541b636c7/1/GBxTLx_zEilN0RxRGxd80zyDBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:62:39:7b:59:95:60:e8:83:d9:1d:a3:09:f9:7e:0f:3a:00:
32:c3:ea:fc:cc:26:77:cb:a9:c7:0f:95:88:39:c6:2d:50:37:
9c:6b:59:f9:82:e6:61:a8:07:d1:d7:60:44:ad:64:41:93:7d:
23:92:47:ee:b6:03:31:80:fb:37:92:ad:9c:74:90:0e:27:d1:
ed:b6:d3:17:eb:46:54:03:11:73:67:74:b9:65:62:67:d7:ab:
7e:c3:7a:1e:88:8d:a7:d5:23:7b:3a:20:80:a9:df:26:d8:f5:
da:3f:a9:c3:e5:e8:b9:0e:76:46:03:ac:e2:9d:57:89:49:cb:
07:df:8c:94:f7:b1:7f:21:81:6b:d0:1f:14:a6:b5:31:2b:d7:
4a:3a:fa:b7:25:c5:c0:95:92:b5:8a:b0:9f:40:78:c8:f7:34:
8e:bb:cf:c8:63:c3:34:f5:5f:b7:ae:28:3b:8d:4b:83:bd:c8:
5e:31:6d:5f:58:05:9f:54:03:5c:7c:9d:a9:64:81:fb:8b:59:
60:93:23:17:fa:2d:1b:11:29:d6:13:f2:20:80:23:6e:82:7e:
bd:4a:0a:9e:4b:64:81:bf:9a:72:b5:1d:42:f1:9f:b4:c1:22:
5c:6a:12:c7:6a:95:f2:0b:c7:52:2a:9c:11:b6:18:2c:27:d0:
f2:6b:49:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:14:58 2026 by rpki-client