Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: fntXO+vLmLKpK3lxkvAxn0RKJmjUaMebNKPgJGtmWJo=
Subject key identifier: 9A:F3:02:0D:D2:08:DB:26:5C:EC:65:29:C2:EF:98:9C:C8:C4:F1:FA
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 019CEB93EC40E4E9B038BC6E052141DF6C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 154A
Signing time: Sat 14 Mar 2026 09:01:05 +0000
Manifest this update: Sat 14 Mar 2026 09:01:05 +0000
Manifest next update: Sun 15 Mar 2026 09:01:05 +0000
Files and hashes: 1: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: h18qEShJjShbgdWvWVhOSFi0Di655gKiYM96Dv///hI=)
2: m1RumSL2Lpkn5xSdos4UK5ogmGo.roa (hash: t8Fp9lqrvZa6bhqA8X/cu7LJ30Q8l1gfuatd+QQW+b8=)
3: tmAwZ9rp_6wm7u527HJaXsN99iU.roa (hash: RX2GBKLuRCt7FRxgKIFpvkG43EUbtKKHIwQ+YaosNiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:93:ec:40:e4:e9:b0:38:bc:6e:05:21:41:df:6c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Mar 14 09:01:05 2026 GMT
Not After : Mar 15 09:01:05 2026 GMT
Subject: CN=9af3020dd208db265cec6529c2ef989cc8c4f1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:a3:4a:d7:7d:09:cd:e0:c3:8f:5b:20:87:
e8:88:f0:72:9a:11:a5:19:2d:a6:2e:36:70:55:5b:
df:34:29:45:c8:b4:6a:1c:0e:c3:f9:8c:6f:6d:90:
51:fa:be:62:76:b5:c5:e3:b4:d3:20:96:cd:47:fd:
a6:e4:35:36:02:5f:19:57:1b:f6:29:40:8d:f3:94:
99:76:2c:96:d2:b1:93:68:77:a9:44:56:ff:f2:ef:
a5:e4:77:3a:a1:b6:c5:47:aa:7d:c8:2f:2f:c3:18:
77:22:2c:5a:31:65:16:06:dd:20:0e:22:3d:a6:fc:
a0:7b:35:e8:94:54:b1:19:d7:1d:0c:ef:e0:12:5e:
01:59:77:e1:3d:64:a9:9a:48:83:45:23:e9:da:ca:
2e:1f:ca:c7:66:f6:7c:b0:32:f7:87:af:89:c7:11:
0e:1e:85:65:6a:37:99:fc:38:1b:f2:99:4f:df:06:
e3:08:9a:02:c8:0a:54:e0:4b:aa:4e:c0:9d:b4:2f:
6e:f1:2c:8d:2d:64:1e:00:77:8f:fb:b2:f3:3b:c7:
d8:66:9f:d9:e3:aa:7d:57:9f:f4:6a:02:21:bd:eb:
38:f9:99:44:36:2f:78:2b:94:50:69:e4:68:25:a9:
29:3a:c1:ab:a7:28:6b:3c:31:0f:93:d9:79:f0:2c:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F3:02:0D:D2:08:DB:26:5C:EC:65:29:C2:EF:98:9C:C8:C4:F1:FA
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:95:1f:80:3a:23:d3:4f:87:d1:61:fb:36:49:15:1b:7b:06:
92:ed:cc:86:80:1e:2a:62:aa:2e:24:53:96:1d:da:55:da:69:
c2:d2:ea:d6:79:68:60:ae:dd:48:7d:37:ec:94:65:35:2d:61:
49:67:ed:fd:02:19:e5:7b:93:20:d0:7a:ca:b3:40:57:6f:14:
a6:8c:cc:47:6c:e7:10:eb:69:b9:33:3c:d4:f5:5a:bd:c5:b5:
b6:6b:07:7f:f7:ad:c1:69:63:8a:a0:01:26:90:a1:e9:0d:25:
35:8c:c7:d5:e1:4b:9e:70:ef:62:d6:3e:60:a5:ca:bf:32:c4:
e1:ec:06:d6:34:ed:ae:34:61:f3:3a:e8:54:b2:86:14:9c:e7:
9f:92:4b:38:a5:24:12:54:bd:81:0f:5d:3f:0a:38:34:2e:77:
0d:d7:82:11:1d:25:d0:56:c5:57:fc:d9:61:72:19:d5:4b:9c:
6e:0f:e9:a1:d7:cf:5d:11:ab:72:35:c8:c8:0a:ba:54:86:0a:
55:8a:2a:ab:97:6f:27:1a:4e:d6:8f:60:b7:6d:c4:38:d6:a2:
42:3f:7e:4f:bf:97:86:74:0f:4e:c1:5c:e2:77:ec:19:52:01:
18:6d:5b:81:b2:4e:52:9b:43:52:0f:8d:42:5f:90:fb:e1:05:
ac:72:be:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 10:28:47 2026 by rpki-client