Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier: yizcd1pzWktw7mluj9UvdnW+MiZlDb4JREU3ADpTIpk=
Subject key identifier: 58:B3:51:B1:CE:44:C6:A1:20:B7:B7:0F:90:FD:06:AB:1C:60:1E:77
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial: 019E1EA346ADB4EEB07AC49AA7A84E1C9169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number: 0FD7
Signing time: Wed 13 May 2026 00:01:17 +0000
Manifest this update: Wed 13 May 2026 00:01:17 +0000
Manifest next update: Thu 14 May 2026 00:01:17 +0000
Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: 8ytbyMaL3w7Oiq5ArZYkfpmJCxyh/ARasLCWvj4+S4o=)
2: oKpdyGhKwucvVbjfDmdQz3gb4YI.roa (hash: 9OjwGsmzo/fuyo74pyHihTisees7cSNinSvlluRB8YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:46:ad:b4:ee:b0:7a:c4:9a:a7:a8:4e:1c:91:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
Validity
Not Before: May 13 00:01:17 2026 GMT
Not After : May 14 00:01:17 2026 GMT
Subject: CN=58b351b1ce44c6a120b7b70f90fd06ab1c601e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:ae:bd:b0:ff:df:6c:3e:6d:c1:dc:5e:ff:
18:a6:dc:84:6d:56:cf:02:d3:37:fa:84:3e:b4:56:
2c:54:c1:81:48:f0:1f:63:08:86:cc:57:23:95:92:
e8:db:54:05:3a:0d:e9:d9:0d:6d:f4:2c:84:93:4b:
a2:f3:c6:fd:51:44:e9:00:0d:22:4b:ec:ae:33:32:
fa:a3:44:87:d0:7d:dd:9a:39:d6:03:0c:78:16:27:
05:f1:3c:ad:ad:9f:ca:a1:97:ad:0a:aa:47:ae:fd:
44:11:c4:b2:47:c6:0d:aa:c4:8c:2f:eb:bd:25:a5:
01:2b:2a:d1:8b:a5:66:43:66:e9:89:6a:01:6b:f0:
64:a2:96:c9:1e:79:0e:64:fb:c3:66:34:a4:cb:a9:
a7:15:06:bf:61:33:41:68:26:18:94:e5:28:8a:4f:
82:fa:6f:fd:d1:dc:70:85:26:72:3d:ea:cc:7c:e0:
6e:e0:d6:65:a6:4d:11:8f:d9:8b:94:ad:84:dc:b9:
c9:29:12:2b:cb:76:14:f4:4d:9a:6f:97:c8:f8:45:
22:cf:ff:60:8b:1e:04:0f:ad:d3:0c:fd:45:ff:9d:
88:1e:e6:a2:db:c5:db:a3:7d:c4:9d:00:0e:8b:3c:
1b:2d:0c:e9:d9:5a:78:04:ea:37:1c:72:d0:8d:4f:
b5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B3:51:B1:CE:44:C6:A1:20:B7:B7:0F:90:FD:06:AB:1C:60:1E:77
X509v3 Authority Key Identifier:
keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c3:eb:a6:ca:34:7b:85:43:08:c8:ef:25:b8:8e:91:1c:8a:
ce:98:bd:57:70:4e:ae:b3:75:9b:7f:cb:e2:fd:4b:0e:7d:7f:
17:d2:17:e2:72:68:63:ff:78:5d:dc:f4:60:23:55:bf:db:7a:
e3:59:9d:87:72:0c:4a:d3:78:12:fb:8f:e7:09:1b:95:37:67:
77:83:a0:64:75:eb:aa:5b:ca:f7:fd:fe:5a:31:09:62:65:f3:
ea:ca:80:20:4c:ae:8c:34:72:dc:2c:23:22:74:f1:fe:ca:97:
67:30:5d:86:72:ec:e9:37:a0:36:99:dc:49:7a:a2:22:46:64:
20:04:e3:0d:45:c4:8f:b2:97:e7:ca:4c:d6:81:be:01:9a:07:
c9:a0:bf:f7:b3:d7:ab:a7:06:01:0c:2e:1b:20:78:92:86:f7:
c6:28:6a:bb:2b:38:08:8a:b7:68:67:57:0d:0f:34:ad:c3:ee:
df:b5:77:e2:02:21:4b:4f:f5:13:44:a5:29:29:0f:fb:50:41:
1c:0e:94:5b:5e:7e:0a:e0:d9:49:95:74:7a:e5:e9:b4:9e:c8:
63:ca:e7:1a:61:83:9b:e7:21:51:d7:d3:af:f9:0b:65:26:7f:
7a:ab:70:5b:91:b1:f2:96:a4:07:75:24:56:ad:91:bb:84:db:
ba:52:57:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:55:52 2026 by rpki-client