Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
File: GdlgBYpVOz9d-f5ychkDfEirUOE.mft (raw, json)
Hash identifier: McQfEnSdyDPTQCG5ZaFeOm3W8/q9An7ZOHlyTKulmDo=
Subject key identifier: AE:F4:2E:9F:11:0A:4D:6C:DF:12:30:A6:2D:7C:17:48:A7:79:F6:87
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial: 01A0E173F19B66C9F42FF503823EF7506D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
Manifest number: 1145
Signing time: Sun 27 Sep 2026 06:01:07 +0000
Manifest this update: Sun 27 Sep 2026 06:01:07 +0000
Manifest next update: Mon 28 Sep 2026 06:01:07 +0000
Files and hashes: 1: GdlgBYpVOz9d-f5ychkDfEirUOE.crl (hash: t2XLk4nF/08V3gtgdqa354IlFn0UE+dj1F9Vvh+P150=)
2: oKpdyGhKwucvVbjfDmdQz3gb4YI.roa (hash: 9OjwGsmzo/fuyo74pyHihTisees7cSNinSvlluRB8YA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:73:f1:9b:66:c9:f4:2f:f5:03:82:3e:f7:50:6d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
Validity
Not Before: Sep 27 06:01:07 2026 GMT
Not After : Sep 28 06:01:07 2026 GMT
Subject: CN=aef42e9f110a4d6cdf1230a62d7c1748a779f687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:09:05:94:6f:d0:15:f7:f3:28:31:f5:44:2b:
31:c6:b1:f4:4a:58:30:a2:18:17:63:a0:5e:d0:10:
d9:5c:78:82:ef:01:c0:1a:8d:96:b4:ab:13:7b:5f:
1d:c1:0b:18:c8:b5:33:ea:b2:30:16:44:44:e9:0e:
fa:bb:7b:80:30:5e:0a:f1:6a:61:97:32:43:c6:ff:
10:59:a5:4a:21:ce:38:78:a6:f2:66:54:dd:4e:e1:
dd:67:2c:87:2a:06:9e:2d:c9:4c:ef:39:b1:55:e1:
26:2a:0a:13:83:2b:7a:b8:6e:5f:8a:c5:cc:36:03:
25:95:96:46:98:88:eb:43:e2:fa:02:c2:bc:11:a5:
e2:0d:05:21:77:d3:05:0c:79:f5:72:a1:94:f3:27:
b3:5d:fd:4d:50:96:e6:af:a5:32:07:2a:44:c7:c4:
bd:23:09:b6:7a:19:ab:44:36:04:df:02:97:7c:a8:
96:7e:15:8c:8c:29:d1:e4:7f:ea:a3:3e:7d:d0:21:
45:bf:18:47:ca:e6:03:7f:9e:23:6c:fc:26:db:52:
e6:90:ef:9e:a0:07:ee:fb:89:f0:de:6b:13:31:35:
3c:a0:ab:b1:7b:1e:51:6b:c3:92:88:ff:ef:e0:7a:
19:5b:52:64:23:be:ac:dc:fe:e4:0a:b8:7f:59:e8:
b2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F4:2E:9F:11:0A:4D:6C:DF:12:30:A6:2D:7C:17:48:A7:79:F6:87
X509v3 Authority Key Identifier:
keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:e4:9e:5f:97:74:9d:be:ab:27:c7:35:17:01:fd:b4:d8:b5:
1f:4e:82:15:fd:98:a4:cd:eb:52:ed:8c:66:c8:f5:45:e1:cc:
60:17:07:76:8d:63:06:ab:2f:a7:5f:fe:c5:4f:1c:28:4c:83:
e5:be:46:8f:dd:9a:42:70:9b:c4:96:a2:65:a8:ff:e0:dd:6d:
77:81:c6:9b:c8:ed:97:19:cb:2e:96:0e:08:c8:65:39:0b:45:
db:64:93:9c:c8:69:35:74:5e:70:c2:a0:79:bc:bb:d4:e6:5f:
55:87:c1:ec:9e:fc:01:a4:07:df:19:56:e1:af:83:ea:f0:a1:
19:12:99:29:a9:e1:cd:ea:e8:e1:a1:9e:3c:af:b6:a6:fe:d5:
47:8f:37:0c:4a:f4:85:cd:bc:42:d5:ef:8d:e2:93:81:5e:88:
55:ab:74:59:28:9d:20:cf:02:c6:1b:4d:ce:47:44:0e:1b:af:
71:8a:a2:bf:c4:6e:bc:c8:15:93:56:3d:38:04:2c:47:16:06:
0c:16:76:e0:55:eb:d0:9b:33:45:22:ac:f8:02:2f:f1:31:8c:
87:cd:ab:64:25:d3:40:6e:84:ed:fc:52:b8:22:9a:d5:b2:e5:
7d:dd:aa:7e:7f:37:89:69:53:1c:16:ab:ec:6b:d7:45:fc:3d:
b7:db:e7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:19:42 2026 by rpki-client