Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier: sL4O8YB78gdosTFFpr2MmMEq2E4BYdZHtmDMW0GWn/I=
Subject key identifier: B6:7E:2F:FD:8F:3C:22:A4:C7:BE:60:0D:DC:5C:B6:F8:BD:AD:21:44
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial: 01A178156671F88EFEE998DAA4157CFBB65E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number: 1193
Signing time: Mon 26 Oct 2026 12:00:30 +0000
Manifest this update: Mon 26 Oct 2026 12:00:30 +0000
Manifest next update: Tue 27 Oct 2026 12:00:30 +0000
Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: z2oHfRtkw2p/wwinXY0sh8SL1BL7vyLKTgNitvszl84=)
2: oKpdyGhKwucvVbjfDmdQz3gb4YI.roa (hash: 9OjwGsmzo/fuyo74pyHihTisees7cSNinSvlluRB8YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:15:66:71:f8:8e:fe:e9:98:da:a4:15:7c:fb:b6:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
Validity
Not Before: Oct 26 12:00:30 2026 GMT
Not After : Oct 27 12:00:30 2026 GMT
Subject: CN=b67e2ffd8f3c22a4c7be600ddc5cb6f8bdad2144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:d6:4c:5f:47:0e:0d:81:ab:88:65:93:15:
6c:1b:63:c8:3b:99:df:6d:af:6a:98:0e:fb:b5:92:
c2:a1:2a:f0:51:b1:8e:80:38:42:34:e2:8d:e1:6d:
4f:bd:8d:ff:86:36:0a:8e:b2:d0:87:f4:7e:0b:cc:
ae:54:27:b3:59:8d:25:c6:f9:9f:81:c2:e6:78:cc:
db:aa:44:30:9d:16:21:b6:2d:2c:5d:39:bc:28:c4:
e2:54:dd:0b:5d:be:8a:8c:67:1f:a0:16:3b:a2:fd:
9c:87:b0:6f:33:24:79:f8:1d:8b:10:71:41:11:5c:
02:d9:46:5c:43:2a:88:30:a0:50:9f:9c:7c:04:65:
17:2e:dd:4b:c1:c3:ec:ba:32:4a:d2:8c:e8:a5:94:
5a:8b:48:0b:93:07:6b:2a:f5:cf:07:b6:b1:a3:e2:
23:53:d6:22:ac:70:d3:11:a2:b7:e0:e7:82:7e:ad:
4d:b0:1f:c1:74:17:a8:e3:e3:d4:99:8c:b5:aa:30:
c5:84:dd:03:aa:0b:69:76:f6:0f:09:77:a5:66:32:
d8:35:23:86:4b:f6:b2:af:40:5b:77:28:8b:a4:23:
04:5c:f9:15:39:de:6d:58:e6:40:d0:b6:2d:ec:c0:
1b:80:b2:39:74:ed:0c:db:ea:c6:66:e8:fa:d5:6b:
08:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7E:2F:FD:8F:3C:22:A4:C7:BE:60:0D:DC:5C:B6:F8:BD:AD:21:44
X509v3 Authority Key Identifier:
keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cc:0d:08:f4:94:cb:eb:42:7d:72:bf:e5:8e:51:ed:5c:94:
52:34:81:75:2d:42:c5:58:17:56:a5:7f:e2:6d:ab:96:e9:f8:
da:a4:4a:80:25:aa:a6:c0:49:25:6a:97:62:9e:54:2a:0d:1f:
7c:82:eb:5e:70:b3:c4:04:48:fd:0a:33:3a:d8:bf:ba:8a:74:
d7:0f:d5:89:62:30:5b:8a:90:e7:b7:33:e5:8e:ed:e0:52:17:
75:7b:36:01:b7:a2:29:7a:18:45:90:5c:da:6d:77:64:25:50:
03:2e:91:cd:6d:d9:34:46:2c:e3:4e:05:6d:a1:73:73:2b:be:
3b:1d:01:70:d2:d0:6a:3a:01:79:5b:34:15:8c:7d:6b:e7:22:
70:8d:b4:5e:ee:1d:ff:67:7f:92:1d:a9:8e:23:46:45:b6:5e:
50:73:a6:9c:ca:11:b2:f4:f4:90:6f:ba:cc:c6:45:b1:12:72:
3e:0a:bb:0e:ac:7f:d8:a9:f7:5b:86:a2:60:d0:05:be:fb:20:
43:2d:8f:64:9c:ba:59:35:67:85:bc:f5:fc:02:24:52:2d:9a:
af:3c:cb:bc:1d:d2:aa:ba:99:2f:62:dd:ed:46:ea:0f:8e:ec:
52:2a:5f:0f:43:56:7f:f1:3f:25:34:2a:9b:17:c3:43:01:18:
cd:cb:2d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:10:53 2026 by rpki-client