Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: 2kBgpnd6C2Ew6DBxPxJDQVTbXShq1EsR6AwKEULh4r4=
Subject key identifier: 7D:07:4F:ED:E6:87:B4:D8:F0:46:60:A5:9B:88:0C:F3:BD:B5:71:DB
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 01A1DB6FAC0A460D1A664359C0D6FB0F8E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 1AF6
Signing time: Sat 14 Nov 2026 19:01:31 +0000
Manifest this update: Sat 14 Nov 2026 19:01:31 +0000
Manifest next update: Sun 15 Nov 2026 19:01:31 +0000
Files and hashes: 1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: fcsh4m/NjgzBn8csceWTDHwmqCcSeaiJwqYSaqDmyGs=)
2: SiN-egvtwnZmsIkMnlS_ti2Z8oo.roa (hash: +a9n3GtFyFH5JC8/UIBQoBkf21E3Z0ZTMg3tsgsla2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:6f:ac:0a:46:0d:1a:66:43:59:c0:d6:fb:0f:8e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Nov 14 19:01:31 2026 GMT
Not After : Nov 15 19:01:31 2026 GMT
Subject: CN=7d074fede687b4d8f04660a59b880cf3bdb571db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:30:68:07:a6:95:c0:89:58:c4:50:5c:60:
14:98:58:72:f4:c9:37:9f:96:16:d5:d6:af:49:bd:
6d:f4:2c:aa:c7:35:e5:21:61:b2:5c:ff:02:79:59:
82:b4:f5:d1:62:d1:c9:33:2d:6c:57:34:10:19:a1:
9d:b3:1e:ab:37:1d:a3:49:40:92:0d:7e:02:15:3e:
ca:84:36:3d:d1:65:ff:80:75:c7:be:51:63:f6:7d:
6d:e0:c9:61:c4:9c:7a:ab:cd:04:c0:bc:43:a2:95:
75:81:8d:20:e9:5f:c9:f1:23:29:9c:a6:24:01:1b:
d9:23:2c:e0:ee:7e:6d:cb:e4:a3:7b:0e:3b:d0:4e:
e5:47:77:eb:ac:c3:94:38:8b:23:96:9f:88:d0:d5:
65:6b:14:0f:78:ed:fe:7a:6b:6a:d2:50:36:7b:bc:
d7:95:98:95:ec:7f:83:46:0d:9e:61:b0:44:d3:14:
44:9c:58:62:72:8c:03:e3:17:e2:54:95:97:38:e2:
b8:a5:52:42:51:7b:96:68:41:6e:38:1d:2e:72:e0:
21:a9:be:9d:25:10:be:00:9d:d5:a1:c8:59:db:78:
8b:75:19:c9:1b:e8:95:ad:7d:c7:01:da:72:c9:5b:
9a:55:80:8b:c1:72:7c:86:ca:03:f8:01:a4:96:d2:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:07:4F:ED:E6:87:B4:D8:F0:46:60:A5:9B:88:0C:F3:BD:B5:71:DB
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:59:ca:3a:37:1b:eb:a4:05:fa:d9:1f:23:f9:c3:13:47:16:
65:df:6d:23:76:24:80:83:7d:51:ae:c5:16:c8:03:1e:f0:5e:
17:17:24:06:10:b6:15:9f:10:62:7d:f0:01:bd:a7:d7:76:fa:
7f:71:c5:fb:8f:43:4a:22:2b:0e:6b:c4:e9:f1:82:af:59:26:
2f:d9:0f:13:de:cf:94:e5:49:4a:b7:b7:7f:99:9a:6b:52:37:
c3:f2:95:61:17:78:1d:ce:9d:f1:90:b2:32:d6:10:09:28:e5:
5b:87:09:92:af:95:9c:12:2b:13:3f:82:ef:f6:9e:b1:ce:4b:
fb:5d:75:26:bd:af:17:26:47:95:1f:29:03:e0:c0:85:07:3a:
8c:9c:70:8d:70:fd:45:61:b7:b0:77:3c:72:70:8e:52:d3:5f:
d2:cb:57:2d:7b:3a:e1:e2:39:89:0a:9e:9d:23:7d:a2:dd:4d:
d7:90:ed:d7:dd:9e:bb:e3:0b:64:75:e8:e4:79:a1:f3:a8:9b:
95:50:2b:1b:b6:90:63:95:bb:c9:dd:51:e8:77:24:f4:5f:20:
0b:86:d1:f7:1c:44:05:9b:8d:54:7b:76:97:5f:cf:cc:d4:56:
4b:54:ad:7e:f2:d3:64:07:27:fc:2e:a6:c9:a2:6e:c5:92:95:
22:a7:cd:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:08:08 2026 by rpki-client