Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: 7C47v1LugCOiTN7/HXQAMBYcPyITzeSKGp53jgCfwpA=
Subject key identifier: 5A:4C:33:FF:36:15:8C:90:E6:5D:6F:78:68:49:41:2B:65:B0:96:37
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 01A0F6B2038748F53E437A43177BF48F0773
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 1762
Signing time: Thu 01 Oct 2026 09:00:56 +0000
Manifest this update: Thu 01 Oct 2026 09:00:56 +0000
Manifest next update: Fri 02 Oct 2026 09:00:56 +0000
Files and hashes: 1: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: 9f9IDwLucl+rWA5io60eoz4e5gPmYriOcWP6lg2xEVI=)
2: m1RumSL2Lpkn5xSdos4UK5ogmGo.roa (hash: t8Fp9lqrvZa6bhqA8X/cu7LJ30Q8l1gfuatd+QQW+b8=)
3: tmAwZ9rp_6wm7u527HJaXsN99iU.roa (hash: RX2GBKLuRCt7FRxgKIFpvkG43EUbtKKHIwQ+YaosNiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:b2:03:87:48:f5:3e:43:7a:43:17:7b:f4:8f:07:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Oct 1 09:00:56 2026 GMT
Not After : Oct 2 09:00:56 2026 GMT
Subject: CN=5a4c33ff36158c90e65d6f786849412b65b09637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b1:5c:16:52:2c:e2:26:69:bc:aa:31:d3:11:
1d:5f:33:da:77:9b:12:19:97:d2:4d:9f:f8:a9:a4:
91:d5:80:bb:13:46:35:30:fd:07:29:1a:d1:82:80:
cc:a2:0c:dd:1a:cc:ed:93:38:85:fa:2a:15:d9:59:
8f:61:42:8d:bb:4d:89:63:c8:b5:4a:28:7a:64:85:
90:d9:c5:7a:2f:3f:8e:40:5b:67:cb:7f:9b:82:7d:
0e:a2:4a:0f:68:2d:d5:0c:1d:91:fb:9d:9e:d4:62:
1f:9a:72:e4:48:19:14:10:40:41:a4:8d:83:af:25:
2e:af:9e:44:e5:7f:03:3d:76:1b:ce:4f:2f:4c:1e:
b5:42:57:58:cb:80:86:42:2d:f2:2c:5e:de:07:c7:
87:bc:55:f2:9c:c3:1a:a1:15:f7:43:2c:16:c7:88:
cb:a8:0a:74:30:7e:2e:e5:10:4f:2a:a8:1f:c9:f3:
6d:c5:8c:e6:f8:9e:4f:10:82:f7:31:eb:8e:19:8e:
00:ca:f5:ee:f5:35:00:90:01:53:20:73:63:6e:a9:
04:01:0c:7a:f1:f1:48:cf:8b:16:95:61:d0:35:7b:
f6:a9:12:33:b1:8a:35:3d:40:ba:02:8c:f3:4c:20:
93:3c:7f:59:06:a4:61:cc:7e:1a:f8:7b:26:7d:b1:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4C:33:FF:36:15:8C:90:E6:5D:6F:78:68:49:41:2B:65:B0:96:37
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6c:22:33:59:20:92:74:c7:f5:3d:ac:bc:16:75:2c:50:9b:
3d:2f:cd:f2:ee:7f:29:2f:56:6c:35:57:cb:13:ba:3c:0b:6d:
ea:14:cd:55:91:44:6e:69:0e:69:07:ce:dc:1e:90:91:ca:2c:
70:01:dc:74:73:14:d0:13:d4:b7:8a:b0:ea:06:cc:1c:40:36:
84:33:bb:18:23:b3:a8:d6:ba:5a:bc:93:d8:55:7a:3a:37:b6:
f1:e7:e4:21:65:bb:5b:70:e5:4a:2a:22:fc:f4:76:94:3c:2c:
98:c1:76:1a:cf:10:84:33:c9:d8:0e:62:0d:51:b5:cd:f5:6e:
64:11:76:e9:b7:0d:d9:6c:16:0c:df:ea:d8:53:c7:ea:76:dd:
e1:4a:b1:9f:32:4c:de:31:5e:6d:8c:60:a3:20:eb:52:40:f1:
f4:ef:11:e6:c5:e2:d7:0c:3e:5e:60:9b:6a:1f:62:e3:f1:c1:
5b:c8:c9:f1:34:6a:1c:60:86:ec:3e:c7:cd:0a:61:ca:0d:a2:
e9:16:08:38:98:20:e2:29:07:c4:c0:e1:2b:d9:67:dd:d9:5c:
bd:91:c9:4c:33:70:4d:10:6e:ec:f6:bd:58:9d:18:6d:e5:85:
11:91:cc:27:f5:c5:60:8a:34:73:71:2f:b4:f1:fd:21:6d:03:
96:51:c6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 15:13:03 2026 by rpki-client