Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: q6Wguks9fxhHGOthjceXxPlVo6ujDHQL0p3IC7dDgvY=
Subject key identifier: C1:11:83:6A:89:1B:3E:AD:41:AD:5F:B9:16:54:D4:FE:9D:D6:E6:B4
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 019E91A5EACF5F79A1888EE0CA16DE4AADE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 1942
Signing time: Thu 04 Jun 2026 08:00:30 +0000
Manifest this update: Thu 04 Jun 2026 08:00:30 +0000
Manifest next update: Fri 05 Jun 2026 08:00:30 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: ZJVMP6t4Zv3oVGxv/wdF9M/E+lJjvI8GV7SK1CdiVS8=)
2: Oigk8x42n2srDK0X7uF3mGQTa5U.roa (hash: XAfo6ieIhAzw5ZZ26D6D8t+cKnugPfgfyLO9JlIq68I=)
3: R48K96yi_NTgRX4KtqsQkdz8i00.roa (hash: bzu9ODXT9wqH3BYpXobenIQwAbgYpMNpV1lKwBLJTDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:a5:ea:cf:5f:79:a1:88:8e:e0:ca:16:de:4a:ad:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Jun 4 08:00:30 2026 GMT
Not After : Jun 5 08:00:30 2026 GMT
Subject: CN=c111836a891b3ead41ad5fb91654d4fe9dd6e6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:02:25:4a:ba:b1:04:27:40:af:57:c2:29:16:
39:92:33:32:a6:5c:bc:d9:4b:63:b4:df:f1:91:79:
48:9d:1f:55:45:bf:b9:97:3d:31:95:81:bd:de:fa:
26:b1:bc:a8:fe:a2:cc:4e:2c:ce:dc:88:8c:41:ab:
64:c2:78:b1:33:ac:bc:57:07:80:a0:5d:e8:1a:e3:
72:75:7a:9c:b5:43:97:81:83:91:16:5e:54:2a:73:
ec:24:c4:04:b9:e5:0c:00:f7:36:09:7e:f2:3d:c7:
fe:4d:53:98:65:65:29:1d:73:e6:55:09:86:3e:34:
c7:59:2f:87:ca:d2:e9:40:1b:f1:85:43:8b:83:78:
fe:86:73:d8:2e:3c:ed:93:6d:69:a3:ad:29:48:a6:
d7:34:dc:c1:78:89:0b:e1:c8:b4:da:a9:dc:6f:fd:
e6:d5:91:b8:c4:d0:18:3a:a1:29:48:0d:e2:0a:4b:
2d:94:b4:4f:7c:71:e1:72:43:9c:2d:0e:6e:6d:73:
99:18:27:96:3d:31:6a:b7:54:2d:c1:1f:16:f1:50:
e3:98:ac:d2:73:8c:f4:de:c2:b5:a3:7f:36:49:36:
97:04:fd:96:dd:2b:d5:f2:18:92:7d:4a:6e:97:48:
69:82:71:66:73:2f:fa:68:93:89:47:85:cc:51:e9:
41:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:11:83:6A:89:1B:3E:AD:41:AD:5F:B9:16:54:D4:FE:9D:D6:E6:B4
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:68:bc:06:33:55:bc:43:ed:50:1d:b2:f5:db:c2:6b:6b:7d:
36:1a:92:05:99:45:9a:cf:ec:df:d4:79:6f:0c:06:6a:3a:1b:
82:53:7c:89:9c:9e:af:3c:5d:0f:08:cc:47:89:a3:f2:ed:40:
85:70:de:1b:87:30:06:88:fe:bf:35:1c:e3:b3:28:ad:71:2e:
f6:ee:2e:69:b1:4a:15:53:d3:ca:23:13:42:03:3e:77:3b:d8:
9d:e7:7c:17:89:3c:1b:c2:5d:a7:ed:4b:2a:fe:5d:7d:1f:7c:
ef:8b:8d:30:a8:d4:83:77:b0:cf:18:62:0a:92:8d:4c:42:85:
1c:b0:76:2e:52:dd:50:de:18:1b:37:09:93:c0:ad:c6:76:ac:
c1:c8:6d:ea:93:78:33:56:51:c7:2f:37:b8:44:92:d1:7b:df:
f0:0e:cc:80:a2:1c:ce:18:4f:41:0f:24:e2:db:c6:2f:66:c2:
5c:28:b6:e8:1a:9d:30:28:d7:de:0c:1c:ef:2f:9b:8e:1f:24:
b1:5b:9a:df:d1:fd:5f:f1:60:33:0f:fb:53:5f:8a:0e:5f:78:
1c:37:f6:db:37:bc:f5:10:e0:a3:68:d1:d1:8a:82:24:37:0d:
b4:dc:ac:9b:a4:f5:bc:a7:14:7b:fe:ff:69:61:89:37:07:97:
7f:86:80:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:25:39 2026 by rpki-client