Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: 3D7Qqcpx/AycOSw22RXtxhizpZzJh2i620aXv1TglRs=
Subject key identifier: A5:27:15:F7:A2:2E:6F:1E:A7:B1:F2:13:72:23:E0:A9:53:D8:89:B5
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 019D265FC144EC7C04DB4A78091D8E31574D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 19:01:42 +0000
Manifest this update: Wed 25 Mar 2026 19:01:42 +0000
Manifest next update: Thu 26 Mar 2026 19:01:42 +0000
Files and hashes: 1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: 05GlOa9HlCVgmzqcrho5ZzzEGadh5jrZ75OXXApEw8A=)
2: SiN-egvtwnZmsIkMnlS_ti2Z8oo.roa (hash: +a9n3GtFyFH5JC8/UIBQoBkf21E3Z0ZTMg3tsgsla2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c1:44:ec:7c:04:db:4a:78:09:1d:8e:31:57:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Mar 25 19:01:42 2026 GMT
Not After : Mar 26 19:01:42 2026 GMT
Subject: CN=a52715f7a22e6f1ea7b1f2137223e0a953d889b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:54:57:2a:6d:76:08:c6:bd:a1:e4:ff:fa:
bd:14:1e:1f:36:e2:75:c7:2e:1d:85:e6:fc:3e:2d:
48:d6:54:7b:0e:4c:f1:c3:66:e5:60:67:3e:48:2d:
7e:a4:3a:6b:a8:a1:df:c9:bf:72:70:79:f7:4e:0b:
67:22:58:08:14:bf:b6:72:86:ed:38:9f:c0:8e:dc:
51:15:e9:f3:f7:30:46:26:23:b6:61:3d:3a:26:78:
70:44:d5:d8:b4:44:0f:72:e1:9e:9c:95:55:78:87:
67:a1:50:d1:75:f8:19:21:f5:2d:54:92:c2:2c:78:
55:89:65:0b:3f:28:76:90:44:24:7d:cc:79:7c:e4:
8d:cf:bf:b3:10:ef:b2:ca:36:31:f4:fe:1d:e2:87:
ac:5a:1d:cb:f1:53:17:d4:1f:83:b3:2a:3b:41:4c:
a5:cb:e4:10:34:04:cb:89:3f:de:ae:33:7b:17:30:
9d:2f:09:f2:8b:bc:a0:33:54:c0:fb:75:7f:a5:97:
71:8f:9d:d5:29:10:07:ec:f7:4c:1a:ad:cd:31:cc:
55:75:3b:2b:1b:4b:7a:ce:99:8c:a5:b8:9e:40:b8:
83:6e:b0:a8:c4:d6:05:57:4d:b6:e0:de:ed:89:3d:
10:b7:86:fa:81:50:9a:6b:61:3e:58:63:d5:d8:1f:
30:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:27:15:F7:A2:2E:6F:1E:A7:B1:F2:13:72:23:E0:A9:53:D8:89:B5
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6e:a0:4c:09:52:ff:a2:c0:ff:32:3a:33:cf:67:d9:4f:5c:
55:be:36:7f:6e:3c:35:9b:4e:35:81:0f:f0:93:48:a2:b8:05:
67:a7:4d:55:06:ab:4d:00:07:c8:75:84:d1:ff:78:eb:17:3d:
5b:0c:ef:f2:67:91:1f:41:ba:04:2e:d8:a2:83:d8:fa:21:d2:
5b:2b:c6:96:0d:18:a8:72:cd:e1:d6:98:b7:56:9e:5e:0e:88:
05:0e:00:60:d3:18:55:8b:aa:2b:3c:64:20:78:70:0b:af:f9:
e8:a3:ad:84:fa:e6:8f:0a:2e:7f:dc:b4:0a:24:92:56:bd:ed:
3e:7a:86:04:59:3c:71:60:b9:3e:d4:6f:64:a1:f0:39:dc:3c:
cc:2a:5e:e1:43:5c:92:bd:b6:7a:6a:43:e5:ad:d9:d0:d7:ca:
13:65:fc:31:bd:ef:36:63:db:6c:40:93:79:71:73:29:00:bc:
9b:6a:09:ee:da:1a:a2:24:9e:e4:43:9c:54:84:1d:61:3e:98:
09:6e:1b:0e:88:95:64:ce:1d:61:4d:4d:67:e5:f9:80:e0:a1:
97:4d:08:9c:2b:0f:c9:91:5f:44:8f:15:a9:b6:3f:5f:07:b7:
c9:40:48:1b:67:2c:2f:a9:a1:3b:53:85:65:65:42:d1:9e:fa:
f7:bc:0a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:14:46 2026 by rpki-client