Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier: H/CnoGDaTbqojI8HVpwqupOJLFpDJ1uqGD+QBK38fgk=
Subject key identifier: 1C:72:67:02:50:E6:2D:F7:71:4F:37:BF:4C:72:3A:E8:41:0B:A1:71
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial: 019D2961AD246617747327CAD8CA9D59C95C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number: 0F58
Signing time: Thu 26 Mar 2026 09:02:40 +0000
Manifest this update: Thu 26 Mar 2026 09:02:40 +0000
Manifest next update: Fri 27 Mar 2026 09:02:40 +0000
Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: 95pWn1mCDWWuij11hFtqE6VYa2LYH82X8ncgb1cJFX8=)
2: oKpdyGhKwucvVbjfDmdQz3gb4YI.roa (hash: 9OjwGsmzo/fuyo74pyHihTisees7cSNinSvlluRB8YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:ad:24:66:17:74:73:27:ca:d8:ca:9d:59:c9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
Validity
Not Before: Mar 26 09:02:40 2026 GMT
Not After : Mar 27 09:02:40 2026 GMT
Subject: CN=1c72670250e62df7714f37bf4c723ae8410ba171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bd:fb:07:a7:ac:2e:6e:4a:35:e8:be:73:d5:
bc:a5:2c:54:ab:1a:31:93:75:a5:ec:28:0a:a6:5e:
61:bf:30:67:39:01:33:6d:e6:f6:9b:c0:08:87:52:
19:b5:d2:c9:f2:f7:03:28:9f:56:fa:09:3a:cb:e8:
3c:a7:2b:a0:b1:22:41:a6:b6:7d:30:fa:13:3f:18:
17:28:66:1b:e2:bf:67:40:ec:48:46:3e:cf:c8:0f:
fe:3a:bf:c0:fc:03:75:b5:07:11:f9:b1:ad:d4:1e:
fd:92:08:7f:17:ee:87:07:a0:dc:b9:4f:1d:96:51:
20:fc:ba:5f:eb:f9:3a:a6:f7:24:46:41:25:71:1c:
a0:26:3b:69:f0:3a:93:b7:e2:04:46:0f:6b:e7:e5:
e3:de:ec:6c:42:32:fe:5f:97:93:ec:b2:6a:4a:f4:
c6:90:10:0d:31:a3:55:47:8e:ec:6f:4f:7a:f1:c5:
df:ef:4f:0e:ac:4b:26:06:f4:35:27:e9:35:9a:8d:
fb:2d:7f:39:9d:44:16:2e:59:73:b6:59:00:43:5e:
33:5a:2d:23:a9:30:f6:50:8b:eb:5a:ab:02:4b:db:
9a:6a:45:48:21:c6:4d:4b:8e:62:21:8b:05:9e:2b:
d2:37:42:fb:5a:0e:64:15:7f:3d:43:5e:16:d7:df:
64:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:72:67:02:50:E6:2D:F7:71:4F:37:BF:4C:72:3A:E8:41:0B:A1:71
X509v3 Authority Key Identifier:
keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7a:22:42:2c:bf:d0:c7:bf:7e:a1:3a:bd:68:e6:f6:54:7c:
70:f4:7b:8c:1a:9f:c7:16:86:4b:5f:72:6f:11:36:4f:42:16:
18:6b:6c:b1:fa:a6:d1:49:4d:3e:01:08:cc:4e:0b:7f:ef:fd:
37:b1:b6:27:32:21:ca:70:61:db:39:c1:bf:29:d9:e6:2c:e1:
a8:e0:66:fa:22:67:da:ff:07:9f:9d:df:a4:47:5a:c2:c7:a6:
d7:22:31:27:3a:de:8d:13:23:88:ca:e4:b1:82:55:a7:13:d8:
5d:90:a2:78:99:ad:29:1d:d3:5a:78:2e:e5:a9:c5:d1:c7:9d:
6f:83:78:c2:f9:e2:e6:9a:5e:63:69:ca:fd:a5:e6:8b:5e:24:
57:6a:53:b9:5c:c3:b4:12:48:00:33:7a:fa:12:4e:f6:22:35:
be:98:8b:da:bc:3e:2a:16:ed:d6:dd:30:e5:6f:5d:5d:2a:f0:
ac:d6:98:37:90:77:2d:17:e0:a5:1f:c8:3b:52:ba:e4:79:70:
41:72:4c:00:5a:65:d6:32:73:e9:ca:1f:95:93:d7:4c:c6:0e:
ec:30:27:3b:38:af:6a:1e:38:9c:9b:42:4c:90:ef:6c:64:32:
86:2e:01:32:62:d5:56:18:b0:d9:ff:ae:83:f1:0d:a0:e0:b2:
a6:14:16:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:25:17 2026 by rpki-client