Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
File: GbzEB784geKWalSMQys_BAFGmd0.mft (raw, json)
Hash identifier: dL4rOPX+qIGB5K8BpqWTx8Kb3RRBtJAMJbtPy19p1IU=
Subject key identifier: 84:91:87:F7:EF:9A:93:34:F7:71:A9:F0:77:72:E6:88:83:05:39:DE
Authority key identifier: 19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
Certificate issuer: /CN=19bcc407bf3881e2966a548c432b3f04014699dd
Certificate serial: 01A0D2DEE18084B6AE42A54ADAE13BFE0F27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 10:03:37 +0000
Manifest this update: Thu 24 Sep 2026 10:03:37 +0000
Manifest next update: Fri 25 Sep 2026 10:03:37 +0000
Files and hashes: 1: GbzEB784geKWalSMQys_BAFGmd0.crl (hash: 5d3dR2BKGQfWEcs/d91nQk1dczRzFYJi5+KTRVDIB1I=)
2: SiN-egvtwnZmsIkMnlS_ti2Z8oo.roa (hash: +a9n3GtFyFH5JC8/UIBQoBkf21E3Z0ZTMg3tsgsla2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:e1:80:84:b6:ae:42:a5:4a:da:e1:3b:fe:0f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bcc407bf3881e2966a548c432b3f04014699dd
Validity
Not Before: Sep 24 10:03:37 2026 GMT
Not After : Sep 25 10:03:37 2026 GMT
Subject: CN=849187f7ef9a9334f771a9f07772e688830539de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f2:a9:51:40:a8:f8:37:5e:1a:f0:99:1f:8a:
c8:fd:e7:75:c8:00:b5:08:88:bf:9c:82:3e:c7:27:
51:a0:a9:d6:db:f7:92:b5:04:8f:2a:19:f0:3a:dd:
df:b8:42:0b:12:fd:9c:ca:04:2f:7f:eb:a4:02:04:
d4:e5:c0:3d:2a:63:c0:6b:9b:af:0b:6b:28:b2:f9:
13:5a:dc:ad:07:d1:e6:f7:57:b4:03:25:8b:32:9b:
59:85:57:bd:62:97:fb:38:74:af:85:35:4e:89:61:
c6:5e:0b:54:dd:92:f6:14:2b:a8:22:e6:25:40:eb:
71:99:2e:c4:1a:cb:4e:70:ee:60:62:f3:af:64:ab:
17:93:85:92:8c:31:9a:8a:32:05:eb:9f:59:fd:a2:
26:2d:0c:34:5c:d0:f9:cb:10:a8:b5:f3:8d:9b:be:
f1:c9:cd:33:c2:7f:35:c8:8a:27:5d:3f:b2:4f:88:
e5:b7:32:b8:7b:d3:f8:db:c3:9f:a4:78:5f:a3:0f:
b8:98:09:8b:87:69:e3:3d:25:d5:16:f8:06:62:4d:
eb:62:41:f5:ad:08:55:c4:6b:fb:d8:46:74:cb:13:
ca:71:48:d5:ac:9b:19:25:59:f6:6d:a1:95:fd:8a:
e2:d3:1d:1f:bd:b9:f6:09:4c:24:73:9f:44:a3:d3:
80:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:91:87:F7:EF:9A:93:34:F7:71:A9:F0:77:72:E6:88:83:05:39:DE
X509v3 Authority Key Identifier:
keyid:19:BC:C4:07:BF:38:81:E2:96:6A:54:8C:43:2B:3F:04:01:46:99:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbzEB784geKWalSMQys_BAFGmd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/4eca5e-4343-46fe-bbb6-44977d7ab9ca/1/GbzEB784geKWalSMQys_BAFGmd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:58:a0:2c:df:4d:92:ac:c9:8a:74:80:80:c7:ec:47:b1:e8:
31:c4:bc:cb:e7:2f:8d:c5:bc:c1:97:1c:f3:56:93:f0:a2:4d:
4c:7a:de:bb:ba:a0:d1:2d:b9:8a:80:d8:df:46:01:6c:4e:bf:
b5:53:a5:7c:6a:5f:13:37:67:5d:b1:3a:bd:8f:d6:64:df:c9:
5b:2f:00:e2:b4:41:3f:c9:28:6c:70:d3:fc:98:b1:f7:90:61:
20:05:60:7a:2a:88:81:9b:13:2e:0f:85:c6:6b:54:97:72:3d:
28:d1:e7:94:6e:b4:bb:0b:ec:99:78:94:b5:7e:9e:6b:57:13:
77:df:21:4a:3b:ff:33:ec:17:5a:42:e1:c5:95:c4:ef:bb:55:
00:18:e0:eb:23:6b:1e:a2:ae:1a:6a:ed:86:c8:cd:6c:c3:49:
b5:ea:55:5c:0e:1f:3d:08:dd:b5:47:30:6a:69:0b:98:f9:93:
5b:9a:6d:2b:2a:05:b3:1c:d7:b9:c3:24:7c:55:89:90:ab:84:
5c:05:28:e2:5b:dc:36:c2:ca:78:9a:f5:87:1c:55:b4:38:d0:
52:20:ce:07:90:0e:b0:42:7d:a8:18:90:89:37:04:47:89:d3:
4e:bb:b9:68:70:b9:30:8b:66:bd:89:ec:85:bb:83:28:e3:0c:
54:e9:7b:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDS3uGAhLauQqVK2uE7/g8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YmNjNDA3YmYzODgxZTI5NjZhNTQ4YzQzMmIzZjA0MDE0
Njk5ZGQwHhcNMjYwOTI0MTAwMzM3WhcNMjYwOTI1MTAwMzM3WjAzMTEwLwYDVQQD
Eyg4NDkxODdmN2VmOWE5MzM0Zjc3MWE5ZjA3NzcyZTY4ODgzMDUzOWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/KpUUCo+DdeGvCZH4rI/ed1yAC1
CIi/nII+xydRoKnW2/eStQSPKhnwOt3fuEILEv2cygQvf+ukAgTU5cA9KmPAa5uv
C2sosvkTWtytB9Hm91e0AyWLMptZhVe9Ypf7OHSvhTVOiWHGXgtU3ZL2FCuoIuYl
QOtxmS7EGstOcO5gYvOvZKsXk4WSjDGaijIF659Z/aImLQw0XND5yxCotfONm77x
yc0zwn81yIonXT+yT4jltzK4e9P428OfpHhfow+4mAmLh2njPSXVFvgGYk3rYkH1
rQhVxGv72EZ0yxPKcUjVrJsZJVn2baGV/Yri0x0fvbn2CUwkc59Eo9OAJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISRh/fvmpM093Gp8Hdy5oiDBTneMB8GA1UdIwQY
MBaAFBm8xAe/OIHilmpUjEMrPwQBRpndMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYt
NDQ5NzdkN2FiOWNhLzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy80ZWNhNWUtNDM0My00NmZlLWJiYjYtNDQ5NzdkN2FiOWNh
LzEvR2J6RUI3ODRnZUtXYWxTTVF5c19CQUZHbWQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkVigLN9N
kqzJinSAgMfsR7HoMcS8y+cvjcW8wZcc81aT8KJNTHreu7qg0S25ioDY30YBbE6/
tVOlfGpfEzdnXbE6vY/WZN/JWy8A4rRBP8kobHDT/Jix95BhIAVgeiqIgZsTLg+F
xmtUl3I9KNHnlG60uwvsmXiUtX6ea1cTd98hSjv/M+wXWkLhxZXE77tVABjg6yNr
HqKuGmrthsjNbMNJtepVXA4fPQjdtUcwamkLmPmTW5ptKyoFsxzXucMkfFWJkKuE
XAUo4lvcNsLKeJr1hxxVtDjQUiDOB5AOsEJ9qBiQiTcER4nTTru5aHC5MItmvYns
hbuDKOMMVOl7Bw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 17:02:55 2026 by rpki-client