Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: C8MV+jLT9SvUo6VKDDkxDPPp9HNTGIsWQlIMQl/G8Cs=
Subject key identifier: 4A:22:EF:C7:45:2A:42:35:19:4E:17:7E:F6:38:E5:66:08:71:5E:43
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 01A06EA8282A182FA7665BFDF6005D968645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 1A39
Signing time: Fri 04 Sep 2026 23:01:49 +0000
Manifest this update: Fri 04 Sep 2026 23:01:49 +0000
Manifest next update: Sat 05 Sep 2026 23:01:49 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: vo1Qh38YUnNxWKY1MidgE+VvWghlUfpi5BxEZ1gBvMw=)
2: Oigk8x42n2srDK0X7uF3mGQTa5U.roa (hash: XAfo6ieIhAzw5ZZ26D6D8t+cKnugPfgfyLO9JlIq68I=)
3: R48K96yi_NTgRX4KtqsQkdz8i00.roa (hash: bzu9ODXT9wqH3BYpXobenIQwAbgYpMNpV1lKwBLJTDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 23:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:a8:28:2a:18:2f:a7:66:5b:fd:f6:00:5d:96:86:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Sep 4 23:01:49 2026 GMT
Not After : Sep 5 23:01:49 2026 GMT
Subject: CN=4a22efc7452a4235194e177ef638e56608715e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:77:6e:0d:4a:98:82:16:9e:be:e0:6c:6c:
2e:e3:b1:84:b4:11:3b:c6:f6:62:ba:c7:62:b1:93:
1f:77:73:02:bc:17:d3:a3:d7:88:29:4a:77:16:7a:
0a:fc:48:8d:57:94:24:8d:01:ab:47:1a:86:87:33:
1e:00:75:7e:09:22:eb:3e:1a:1d:0c:f1:36:88:bc:
17:d9:1b:1d:7f:1c:73:66:f5:1f:39:7b:1e:cc:b5:
7c:28:e7:e2:1b:fe:bd:fe:48:8a:98:2b:85:c3:9e:
dc:dd:8d:57:9f:b6:2c:dd:93:ce:0e:c7:db:d5:8c:
e6:83:ce:a9:94:10:89:53:52:9b:a6:b7:ba:f5:0d:
be:10:38:2f:d1:ee:27:a3:14:a5:c4:30:97:c2:79:
6e:15:5e:e7:2c:9c:45:3e:b9:92:ee:e8:9c:ae:3a:
ed:45:3f:b5:39:7a:55:e4:29:d6:4c:7e:ad:a3:74:
1e:ad:f6:34:f0:ba:71:97:48:f3:53:f3:f3:11:0b:
89:d7:0c:ff:18:8e:8d:d0:e6:ea:79:41:f7:b2:0e:
9a:69:8c:d9:ec:e2:c1:34:fe:ef:b5:4f:54:93:4a:
cb:0d:6a:b8:65:14:c1:61:78:24:3b:97:e0:6a:fb:
fa:79:0e:b0:10:97:66:ee:db:b4:7b:9d:17:0e:5e:
42:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:22:EF:C7:45:2A:42:35:19:4E:17:7E:F6:38:E5:66:08:71:5E:43
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:95:f2:08:ce:d5:5b:ef:b5:d3:85:05:e8:22:ff:3c:f1:2c:
af:70:1c:b6:eb:62:6b:38:17:8d:0d:9a:33:60:a4:8f:91:a7:
58:b9:0b:be:31:90:4b:54:98:e9:f0:d2:53:0b:99:0c:84:37:
9a:6f:ec:ba:40:23:14:58:6b:f0:fd:96:cc:d5:18:c1:b3:01:
bf:5b:8f:aa:d9:4a:c4:e7:18:49:96:21:96:36:eb:d1:db:07:
6d:f2:b7:ab:ae:90:87:d0:15:47:a9:b8:1c:11:c0:32:ec:bd:
fe:b7:a7:a1:9a:79:66:54:bb:46:4a:9b:27:87:a8:fc:f8:81:
a0:46:f2:bf:dc:67:db:f7:55:6c:f5:de:a9:8a:97:2b:93:b4:
1d:79:10:61:50:43:86:3e:9b:64:47:d1:e5:f0:3a:f0:98:4c:
84:35:20:3f:21:9f:ec:e8:52:80:a2:04:bd:8a:36:6e:1b:8a:
71:3f:69:ba:84:f7:e2:a5:a1:8e:10:39:20:ff:f6:d1:6c:55:
f0:97:4a:33:dd:78:0c:b7:b4:94:0c:03:2a:ef:67:83:4f:91:
85:1f:29:53:93:2d:66:29:30:19:03:91:2a:ff:9b:9b:0e:dd:
28:a0:bf:ce:a1:59:c2:c2:28:4e:71:1e:ea:a7:14:c7:a2:ff:
89:86:3a:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBuqCgqGC+nZlv99gBdloZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTdhNWVjMThjNGYyYzQ0Nzg0YWRjNTAzODM1NmJlNWFl
ODk0MjkwHhcNMjYwOTA0MjMwMTQ5WhcNMjYwOTA1MjMwMTQ5WjAzMTEwLwYDVQQD
Eyg0YTIyZWZjNzQ1MmE0MjM1MTk0ZTE3N2VmNjM4ZTU2NjA4NzE1ZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V53bg1KmIIWnr7gbGwu47GEtBE7
xvZiusdisZMfd3MCvBfTo9eIKUp3FnoK/EiNV5QkjQGrRxqGhzMeAHV+CSLrPhod
DPE2iLwX2RsdfxxzZvUfOXsezLV8KOfiG/69/kiKmCuFw57c3Y1Xn7Ys3ZPODsfb
1Yzmg86plBCJU1Kbpre69Q2+EDgv0e4noxSlxDCXwnluFV7nLJxFPrmS7uicrjrt
RT+1OXpV5CnWTH6to3QerfY08Lpxl0jzU/PzEQuJ1wz/GI6N0ObqeUH3sg6aaYzZ
7OLBNP7vtU9Uk0rLDWq4ZRTBYXgkO5fgavv6eQ6wEJdm7tu0e50XDl5C2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEoi78dFKkI1GU4XfvY45WYIcV5DMB8GA1UdIwQY
MBaAFBgXpewYxPLER4StxQODVr5a6JQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC83NzM2NzgtZTIwMC00NmFmLTg2YzEt
NmJkODAyMmQyZWFlLzEvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC83NzM2NzgtZTIwMC00NmFmLTg2YzEtNmJkODAyMmQyZWFl
LzEvR0JlbDdCakU4c1JIaEszRkE0Tld2bHJvbENrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZXyCM7V
W++104UF6CL/PPEsr3ActutiazgXjQ2aM2Ckj5GnWLkLvjGQS1SY6fDSUwuZDIQ3
mm/sukAjFFhr8P2WzNUYwbMBv1uPqtlKxOcYSZYhljbr0dsHbfK3q66Qh9AVR6m4
HBHAMuy9/renoZp5ZlS7RkqbJ4eo/PiBoEbyv9xn2/dVbPXeqYqXK5O0HXkQYVBD
hj6bZEfR5fA68JhMhDUgPyGf7OhSgKIEvYo2bhuKcT9puoT34qWhjhA5IP/20WxV
8JdKM914DLe0lAwDKu9ng0+RhR8pU5MtZikwGQORKv+bmw7dKKC/zqFZwsIoTnEe
6qcUx6L/iYY61A==
-----END CERTIFICATE-----
Generated at Sat Sep 5 09:17:00 2026 by rpki-client