Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
File: GBTcobly3pEWdeoi0vvNvgG4MLw.mft (raw, json)
Hash identifier: PkKq/y885dJQoZXoZHl4X1LdTRXHJxvaiFGMbU1r5oc=
Subject key identifier: B5:B1:BD:B5:24:8A:4E:BD:FE:39:70:3D:27:52:A9:E3:68:C2:73:45
Authority key identifier: 18:14:DC:A1:B9:72:DE:91:16:75:EA:22:D2:FB:CD:BE:01:B8:30:BC
Certificate issuer: /CN=1814dca1b972de911675ea22d2fbcdbe01b830bc
Certificate serial: 01A0D0491FF2EEEAE15066D881CAD3B17914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
Manifest number: 025B
Signing time: Wed 23 Sep 2026 22:00:48 +0000
Manifest this update: Wed 23 Sep 2026 22:00:48 +0000
Manifest next update: Thu 24 Sep 2026 22:00:48 +0000
Files and hashes: 1: GBTcobly3pEWdeoi0vvNvgG4MLw.crl (hash: Ace6mDJszwgbkZJTXNS6BeWgVO3XcH84wto6jI5Uq7c=)
2: TJsdk6GlDGwNFsPogQM6Er0LdIs.asa (hash: uIr8DFmzh8tTb+dANLrMQVRmc/br/v70MLXUCo4zCNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:49:1f:f2:ee:ea:e1:50:66:d8:81:ca:d3:b1:79:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1814dca1b972de911675ea22d2fbcdbe01b830bc
Validity
Not Before: Sep 23 22:00:48 2026 GMT
Not After : Sep 24 22:00:48 2026 GMT
Subject: CN=b5b1bdb5248a4ebdfe39703d2752a9e368c27345
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e2:07:c2:0c:5b:ec:23:c6:da:ee:42:a1:af:
b3:23:6d:ec:99:be:55:e1:36:bf:69:17:ad:8c:f7:
fe:bb:fd:7b:1f:fa:07:be:fd:b2:4b:fa:62:e7:c4:
ed:19:fe:e6:a4:09:6a:86:7e:35:a9:a9:16:e7:1b:
90:f6:3e:ed:45:82:32:d3:8d:05:9a:1d:c8:e7:5a:
1c:fd:c9:5d:f0:f1:77:c0:df:02:7a:d4:2d:bf:2a:
04:91:1e:c0:9b:88:61:5a:77:f8:9c:8f:2b:dd:4b:
b5:7c:55:25:c9:3a:43:91:12:7e:eb:df:a0:dc:cb:
86:ba:f2:f3:a0:87:f4:b3:c0:9d:05:53:68:bc:5c:
b8:0e:0d:ba:ca:a4:ce:97:2f:99:95:a0:7d:fe:bf:
1c:03:3e:9e:08:f9:65:f1:9e:cc:bd:1f:39:9d:8b:
c8:e9:9f:ce:34:ad:eb:ce:5a:b9:b2:3e:d2:d6:ea:
f2:dd:5d:2a:b6:e3:93:a6:2d:b3:27:43:de:ce:e4:
21:21:5e:00:1d:5b:bf:1d:49:34:66:ce:f9:80:71:
71:fb:5c:95:b2:2a:e2:a8:58:24:32:7d:9a:3b:b6:
8a:b2:f9:56:49:fe:1b:38:df:c9:fb:c1:22:c0:c1:
39:1b:be:c5:4d:3a:89:f0:c3:61:20:78:aa:4d:29:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B1:BD:B5:24:8A:4E:BD:FE:39:70:3D:27:52:A9:E3:68:C2:73:45
X509v3 Authority Key Identifier:
keyid:18:14:DC:A1:B9:72:DE:91:16:75:EA:22:D2:FB:CD:BE:01:B8:30:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBTcobly3pEWdeoi0vvNvgG4MLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/2deafb-0135-4645-b0d9-1e08abbb748c/1/GBTcobly3pEWdeoi0vvNvgG4MLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:c7:00:bf:d6:20:c0:1c:54:4d:c6:23:a0:c4:87:c8:80:b8:
35:74:6e:a3:54:2e:bd:e7:c4:0a:ae:f1:16:87:16:9f:3f:12:
51:9a:5f:13:a7:a0:f7:a5:c6:7d:ca:b7:3f:cd:b2:0b:bd:c6:
6a:4b:9c:9f:11:f5:b3:78:6e:7b:1b:ad:7d:ef:74:b1:1a:15:
6e:9f:6a:20:47:22:4f:48:a5:09:ab:be:b2:cc:31:36:07:5d:
93:58:ba:b4:47:37:59:5a:e4:1f:2e:ca:88:ad:29:ef:f8:29:
11:22:4f:ec:0c:e0:d9:c4:64:9e:5d:59:4a:28:d0:11:27:7d:
c9:e4:d9:f1:ab:59:e0:3f:cf:c2:c5:66:ef:68:44:a3:d0:c9:
27:35:09:23:66:9c:3d:fe:9a:12:d1:4e:1a:9a:1d:8a:33:a0:
2b:c8:f3:58:c9:75:0d:33:8d:38:cb:5c:9c:f6:cf:60:0e:e5:
8b:e2:14:01:71:17:f0:4c:4b:2c:3a:21:c0:bd:26:1d:d6:cf:
41:e6:25:a5:4d:aa:70:59:e7:6d:99:38:2c:3b:a6:46:5f:ab:
3e:94:89:dc:03:58:c7:60:3e:9c:d7:ff:c4:30:94:1d:65:60:
5f:bd:64:a4:a1:ae:6c:75:30:9f:cd:ef:d5:4f:ee:0e:b2:05:
25:0a:27:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:34:32 2026 by rpki-client