Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier: Mb9PKGp5SEcaISNCrEvTB/wFI4Oien/nIpSzr57345k=
Subject key identifier: 9D:62:B4:D7:A9:17:45:65:0E:DB:0C:ED:C8:D2:13:82:95:DD:A6:14
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial: 01A08A8C7CAF03EFDAB382B0FA0BA9775CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number: 1118
Signing time: Thu 10 Sep 2026 09:00:57 +0000
Manifest this update: Thu 10 Sep 2026 09:00:57 +0000
Manifest next update: Fri 11 Sep 2026 09:00:57 +0000
Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: c1Y6ROMvyqnmk/SUD9X9iNy4Z5eORfp/wP9JHMQP4Rs=)
2: oKpdyGhKwucvVbjfDmdQz3gb4YI.roa (hash: 9OjwGsmzo/fuyo74pyHihTisees7cSNinSvlluRB8YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:7c:af:03:ef:da:b3:82:b0:fa:0b:a9:77:5c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
Validity
Not Before: Sep 10 09:00:57 2026 GMT
Not After : Sep 11 09:00:57 2026 GMT
Subject: CN=9d62b4d7a91745650edb0cedc8d2138295dda614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:f5:c8:26:a6:7e:73:4a:6b:55:d9:f0:95:
94:07:6c:1f:8f:ad:58:d2:c4:8b:8f:e3:2b:62:21:
df:e4:28:ce:7a:c9:0b:4b:65:b8:02:31:2b:5f:59:
ce:c6:41:af:f6:98:dd:ef:e3:37:8f:fe:d3:6d:fb:
f3:3b:22:13:64:97:a3:26:db:33:ca:6e:ac:79:4d:
09:c7:3e:e2:4e:59:c9:08:1f:af:c2:3e:8a:54:05:
20:83:62:0d:9d:79:d9:5f:f4:dc:a3:28:c8:97:a5:
ae:b4:21:e9:a5:19:7c:97:b6:18:7c:d9:87:40:f6:
5b:ef:85:bf:c0:5d:76:6b:3b:d0:a8:47:a1:e9:3f:
ea:70:e6:f8:d3:41:f6:a6:61:88:f0:17:2d:8b:a6:
a9:e7:23:df:43:a7:c6:1c:6b:8a:e9:b1:89:66:65:
81:a0:ef:24:12:0e:07:d4:f7:45:7e:00:9b:88:37:
75:29:f8:e9:5e:94:68:14:2d:99:d0:d5:8c:6e:3c:
aa:8b:1a:df:0f:b0:8a:5a:c3:9a:9a:c0:04:46:92:
35:e6:c3:b8:3f:83:38:66:91:88:0d:75:d2:d1:d7:
98:7d:9a:ff:f2:b9:8c:c4:e9:50:53:cd:df:c3:bb:
bd:24:54:5a:24:b9:81:02:c9:5a:03:2d:f4:40:48:
cc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:62:B4:D7:A9:17:45:65:0E:DB:0C:ED:C8:D2:13:82:95:DD:A6:14
X509v3 Authority Key Identifier:
keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:60:b0:ce:14:92:1a:e5:dd:ce:e2:4d:06:6d:b6:64:ca:a4:
e4:cb:75:e3:23:8d:f3:e6:c9:f8:4b:e9:ba:8e:36:fe:28:52:
0b:9e:f7:8f:64:a4:59:4b:af:64:7d:8a:b6:12:71:80:c0:ec:
17:f7:40:33:c3:19:83:f2:ec:d0:6f:91:05:1d:17:ef:99:0c:
cc:d3:c9:04:ab:1d:cc:89:b5:99:5b:73:0e:54:02:4a:b2:cf:
84:74:e9:86:53:04:d8:ba:42:51:ca:c5:02:a7:aa:5f:f6:f1:
04:8f:42:a4:21:c5:9d:3f:a7:c4:01:22:a3:d1:3b:42:c8:d6:
5a:72:a6:0a:2b:7f:8b:f4:4f:88:88:fa:66:90:c8:a7:70:8b:
68:f1:66:e2:6e:e3:27:57:88:e0:ca:d8:14:5c:e4:c0:76:2a:
50:1f:0b:23:56:bd:96:3c:a8:6b:fd:15:07:ad:3d:b6:55:10:
d5:39:d9:dd:85:a7:f8:04:01:f7:00:54:22:35:b7:33:13:29:
fd:fe:f3:5a:99:18:f7:c8:05:14:32:b3:28:fc:42:3d:9a:01:
d8:40:cd:f6:4a:e6:05:33:08:ef:a3:0a:74:32:91:7e:e7:a5:
3c:79:7e:8f:ee:55:be:06:4c:40:2f:6e:fa:a1:da:94:e0:67:
93:01:16:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:27:24 2026 by rpki-client