Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
File: GbsyomYvkFwNi_JH7ODbxnmha4Q.mft (raw, json)
Hash identifier: f8c16UpGpZDODWMqkBAy/PHVo2Swp3dT3iEat4JRvgQ=
Subject key identifier: B6:5E:EE:20:6A:63:A9:6A:E8:B9:4D:40:23:FC:D4:42:23:B4:32:B5
Authority key identifier: 19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
Certificate issuer: /CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Certificate serial: 019CF384A344D45564AA4E0671A38BEC5570
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
Manifest number: 058C
Signing time: Sun 15 Mar 2026 22:01:21 +0000
Manifest this update: Sun 15 Mar 2026 22:01:21 +0000
Manifest next update: Mon 16 Mar 2026 22:01:21 +0000
Files and hashes: 1: GbsyomYvkFwNi_JH7ODbxnmha4Q.crl (hash: n+P0k4LZC8OqKOCF52DosIy0mMdLDMKYPDU8Ki7YiIo=)
2: Ip5f-rtoZ2VJ7SiwM6fpe8-kxhs.roa (hash: VpZtyINbjieT/4qcJpty0j6h8djbUlkDrnIQP/pseyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 22:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:84:a3:44:d4:55:64:aa:4e:06:71:a3:8b:ec:55:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bb32a2662f905c0d8bf247ece0dbc679a16b84
Validity
Not Before: Mar 15 22:01:21 2026 GMT
Not After : Mar 16 22:01:21 2026 GMT
Subject: CN=b65eee206a63a96ae8b94d4023fcd44223b432b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:86:59:f1:e5:b0:b2:3c:3d:f8:c6:b9:d9:7b:
dc:83:14:a8:a6:09:5c:1b:f8:1b:d5:30:45:84:a3:
5b:68:c7:ed:f5:94:93:26:c1:4b:46:70:a8:d7:1e:
e8:78:10:69:a7:a9:8b:75:34:2a:d4:9e:cf:2b:88:
83:e6:e1:a5:fe:71:27:5b:76:99:4f:24:5f:1d:41:
60:b7:df:e3:3a:1d:a6:a1:b3:35:68:c3:3d:8e:53:
92:95:16:1e:65:97:e1:a5:95:59:31:33:fc:56:f5:
9b:fc:6f:16:07:59:c1:7c:7e:22:73:5f:01:3f:4d:
49:3c:73:35:e8:2f:6a:8d:cd:68:58:7e:79:20:26:
7b:ac:49:c3:b5:9d:ef:65:58:42:76:28:97:ac:59:
b0:84:e7:bb:a9:b1:69:dc:0b:46:e0:19:14:31:1e:
58:99:9b:57:a5:e6:69:91:ab:99:b9:ec:05:37:6c:
da:3f:ad:67:90:77:60:b0:34:50:6d:95:d2:34:77:
b6:2d:96:dc:51:10:df:3a:cd:4d:90:a2:db:9b:9c:
fe:f3:44:74:83:a3:34:ca:37:f8:56:bd:5c:11:e8:
4a:b3:95:b5:27:6b:79:ba:b3:21:67:7e:00:87:02:
51:17:2f:6e:54:38:8c:8a:c7:0f:53:69:c9:b4:08:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5E:EE:20:6A:63:A9:6A:E8:B9:4D:40:23:FC:D4:42:23:B4:32:B5
X509v3 Authority Key Identifier:
keyid:19:BB:32:A2:66:2F:90:5C:0D:8B:F2:47:EC:E0:DB:C6:79:A1:6B:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbsyomYvkFwNi_JH7ODbxnmha4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c68e30-3aa1-4435-a89b-c4214c79c8b8/1/GbsyomYvkFwNi_JH7ODbxnmha4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b9:b8:16:f4:45:11:3d:2d:f1:2c:c1:73:d8:1a:78:f2:d0:
53:f5:80:9c:0b:14:31:0d:ed:a3:5d:51:4b:aa:78:e7:23:3c:
7d:7d:2f:e8:c4:05:1d:47:75:93:7e:35:92:3a:1c:3b:ac:e7:
3d:a3:9e:f2:2e:c1:00:62:4e:ec:81:ac:b7:a9:e8:a1:71:58:
cd:c9:89:e0:0c:f4:0c:00:f6:6c:97:c0:fc:ab:35:fa:ed:09:
00:8e:7c:1f:65:bb:1c:bf:e4:9a:d1:22:3a:f4:3c:04:a9:13:
62:65:73:15:1f:2c:95:96:9a:af:54:b0:67:9f:7d:38:20:64:
4a:2f:60:db:60:a6:3e:4f:29:18:d5:ca:57:db:f8:88:26:d9:
af:35:10:33:1b:a4:a4:f4:08:fc:08:00:4b:e8:a1:1e:fb:c5:
38:9d:38:f8:7a:4c:ec:75:51:03:06:26:fe:a8:c5:20:c0:53:
b9:94:64:ea:24:e2:2f:b7:dd:60:7d:ce:26:b1:e7:f7:ec:01:
e4:ca:e6:e2:2f:26:66:64:4b:0a:04:bf:48:0e:0b:34:56:cc:
d3:a1:54:59:7c:2b:02:59:14:f1:05:d3:86:c8:25:74:5b:ac:
34:56:12:33:11:1a:dc:84:b3:4b:24:25:75:b0:d7:9a:8f:7e:
5f:8f:c3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 01:50:25 2026 by rpki-client