Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: 1KxCHf9IjZ6bjk9y4jZQ/bk9gOr4hW962MNaHh+BNIs=
Subject key identifier: DF:84:4E:EF:2E:6A:04:A6:42:11:C4:82:9A:D5:92:B5:95:FC:7C:59
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 019DA9E811684A36F4AD0608FD605B297691
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 18CA
Signing time: Mon 20 Apr 2026 08:00:51 +0000
Manifest this update: Mon 20 Apr 2026 08:00:51 +0000
Manifest next update: Tue 21 Apr 2026 08:00:51 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: ygHH32rzqy9bq6cahAxBpm7rILpRtTE7R97cMx9XUZ8=)
2: Oigk8x42n2srDK0X7uF3mGQTa5U.roa (hash: XAfo6ieIhAzw5ZZ26D6D8t+cKnugPfgfyLO9JlIq68I=)
3: R48K96yi_NTgRX4KtqsQkdz8i00.roa (hash: bzu9ODXT9wqH3BYpXobenIQwAbgYpMNpV1lKwBLJTDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:e8:11:68:4a:36:f4:ad:06:08:fd:60:5b:29:76:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Apr 20 08:00:51 2026 GMT
Not After : Apr 21 08:00:51 2026 GMT
Subject: CN=df844eef2e6a04a64211c4829ad592b595fc7c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:da:6c:8f:d1:7a:e6:04:40:00:8a:e8:12:
c5:56:de:5c:2e:c0:0c:9b:1f:f5:20:5d:57:7c:d1:
64:12:e8:95:5e:e6:e6:76:31:00:c3:44:9c:eb:91:
9b:9c:2e:f6:7c:6f:bb:ae:f4:5a:76:4b:8c:58:b1:
f6:fd:37:e6:6c:15:b6:2a:a9:02:f8:f8:8d:ec:c0:
5b:4b:53:f5:e6:a0:20:25:53:6f:9e:5f:b9:55:52:
02:18:13:43:de:46:27:bf:a8:68:f8:cd:fe:2e:ba:
d0:c0:84:62:c3:81:1e:ce:19:bc:75:f8:4e:90:b8:
00:b6:ad:82:f2:27:45:58:e0:be:46:b8:c8:8b:39:
ae:bd:ec:47:43:81:72:93:05:53:75:83:91:95:21:
4c:3d:ad:b9:c7:fb:f2:73:05:84:7b:86:cb:e7:42:
bc:26:28:d1:7b:31:7f:f4:1e:4d:a1:dd:cc:4d:d2:
d8:2e:9b:d0:b8:bc:62:3e:ff:34:ec:57:55:f7:a9:
5c:ca:02:f6:bf:92:47:7f:c1:92:75:e1:65:cd:cf:
c4:8d:c0:64:60:c0:0a:2a:54:95:71:70:a4:f0:ab:
ce:57:8f:d7:a5:7b:33:3b:03:33:14:98:6e:77:cc:
d7:89:10:5a:e7:6e:88:c6:bd:ea:d5:40:6f:bd:fa:
24:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:84:4E:EF:2E:6A:04:A6:42:11:C4:82:9A:D5:92:B5:95:FC:7C:59
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:48:4e:cc:d1:a7:b3:67:dd:65:55:68:24:67:0f:93:5a:c5:
5c:76:41:cd:d3:b9:e3:d8:62:fa:cb:6a:03:5a:7e:b8:ef:89:
22:cb:d5:25:63:35:e5:3a:21:da:4a:e1:ef:19:28:a5:46:b0:
b2:3c:f2:a4:1a:c7:9e:40:59:15:e9:1c:8d:55:be:0e:e6:2b:
9a:ed:53:d2:dc:5c:a5:22:9a:2e:b9:9a:89:44:f9:92:56:e9:
65:16:f6:28:30:96:34:cb:9c:28:91:b5:48:8f:a5:15:e3:65:
2b:a4:46:21:78:9a:a5:aa:67:26:db:13:8f:66:00:46:f2:0e:
cf:91:f1:40:37:76:98:db:e0:77:05:bb:87:13:8e:16:e4:bd:
ca:65:ea:79:91:12:d8:af:92:e3:0a:d2:cf:90:6f:90:b6:08:
53:59:0a:94:a5:cd:53:ab:99:53:5c:4b:39:5f:47:4b:e0:fd:
14:60:79:dd:27:ac:13:19:08:8a:d3:ab:4b:27:68:bd:f7:10:
00:53:98:a3:ed:9b:ca:0e:57:be:78:a6:fb:6c:00:e6:63:66:
c9:10:9c:5e:15:0a:58:c7:f5:8f:29:20:25:6d:2f:32:31:14:
84:4f:6b:2c:fd:f5:e0:e7:d4:e9:9e:10:c5:05:7a:f7:8b:bc:
0e:f0:6d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 11:21:46 2026 by rpki-client