Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: XorEBBP1uIV6tNxAJfMbIGk9YQXNlJSHy9IfvhOXBrc=
Subject key identifier: DF:7A:64:D9:40:2E:CF:D8:2E:B8:F2:85:CC:2F:DE:03:F8:6D:51:F8
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 019DDB0BF250A345FEDD1BAD9B85EA0B2AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 15C6
Signing time: Wed 29 Apr 2026 21:01:26 +0000
Manifest this update: Wed 29 Apr 2026 21:01:26 +0000
Manifest next update: Thu 30 Apr 2026 21:01:26 +0000
Files and hashes: 1: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: rQUhNQ3iX4MTuav4svYr3bqWz2ezHW3ARdTp/x2k0SM=)
2: m1RumSL2Lpkn5xSdos4UK5ogmGo.roa (hash: t8Fp9lqrvZa6bhqA8X/cu7LJ30Q8l1gfuatd+QQW+b8=)
3: tmAwZ9rp_6wm7u527HJaXsN99iU.roa (hash: RX2GBKLuRCt7FRxgKIFpvkG43EUbtKKHIwQ+YaosNiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 16:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:db:0b:f2:50:a3:45:fe:dd:1b:ad:9b:85:ea:0b:2a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Apr 29 21:01:26 2026 GMT
Not After : Apr 30 21:01:26 2026 GMT
Subject: CN=df7a64d9402ecfd82eb8f285cc2fde03f86d51f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:41:5f:02:67:da:3d:60:f7:fb:41:fb:23:16:
16:32:33:b4:d5:90:7a:1b:4a:a0:b0:45:ac:14:36:
79:75:e9:25:f4:2e:25:87:15:b2:27:27:80:40:60:
2c:ec:20:ed:9a:6a:cb:86:53:f1:77:30:59:b7:47:
97:15:44:7e:01:7b:18:c3:cc:85:14:f5:40:80:88:
e3:82:d4:fc:38:68:a7:a6:24:32:9e:0e:e1:80:d6:
27:6b:a3:91:c2:e2:7d:2e:11:9a:ae:d2:a7:53:7a:
d3:22:7b:d4:e2:d2:74:49:c3:ed:68:8d:df:11:14:
62:38:90:54:bd:89:fe:a1:f3:37:85:ed:66:ec:a0:
d1:58:5e:f7:16:e1:ef:40:4e:e5:39:e3:ed:0e:85:
8d:a9:8d:da:2e:93:b3:9a:df:1c:44:78:a8:02:6a:
2e:08:09:09:dc:e9:fd:a2:ac:2f:8a:55:07:0d:46:
9e:9e:b6:b2:51:97:97:64:fd:fc:b3:1d:7c:ca:84:
69:8e:84:24:36:62:9e:f7:b0:38:de:d9:ed:4b:8a:
53:51:e2:6a:3f:9e:19:cc:90:77:cf:43:8a:a1:2e:
72:b5:5d:db:54:ca:6c:73:b8:0e:3d:ad:87:c1:10:
28:f0:58:40:17:45:64:96:8e:6e:dc:d3:52:a9:66:
7b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7A:64:D9:40:2E:CF:D8:2E:B8:F2:85:CC:2F:DE:03:F8:6D:51:F8
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:8e:6d:ab:ea:6e:bc:47:18:c4:06:80:f6:8d:cd:85:be:92:
79:05:4d:9e:fd:cd:5a:f7:09:64:6f:96:9c:7a:0f:01:c1:2c:
92:96:2a:64:41:7a:c8:70:74:a0:ad:f1:d9:cd:00:55:f4:3f:
42:b9:1a:c7:b4:e0:73:61:43:4e:e9:02:6e:5c:31:a9:5b:19:
dc:8c:af:de:51:55:2d:ce:d3:31:54:3a:f4:28:73:47:46:64:
6e:13:74:69:b6:58:c2:b4:b9:65:ef:ac:88:81:6e:05:17:52:
56:ad:83:02:64:5d:4b:f6:6c:7d:50:67:fb:f4:bb:aa:8a:22:
d6:2d:34:c8:6b:a1:e5:eb:2f:3a:00:8a:21:e4:a1:6c:c7:ed:
a1:fd:a1:63:e1:4d:0d:d6:c7:40:ec:e6:d5:0b:63:f7:c4:a3:
8e:e0:21:b9:1f:51:8a:15:49:29:87:7f:c5:ee:18:dc:b7:9b:
a7:12:51:a0:ab:bd:e6:d7:7a:25:6f:dc:77:f7:0a:3a:77:04:
92:63:29:8b:b5:b5:82:36:05:7e:16:c9:85:86:6a:a0:2c:e8:
2f:3d:85:01:c4:50:b4:76:40:19:0b:6d:2b:cf:b5:2a:f7:49:
b9:a1:8c:07:b1:34:d9:25:69:5c:c7:5a:d9:83:ff:60:a1:35:
e3:a4:22:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 00:14:29 2026 by rpki-client