Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
File: GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json)
Hash identifier: 2fO8zqTmrIxvGDwXkdGPuT3NZFGFeuHarIcLn8RCop8=
Subject key identifier: C7:BE:39:5A:AF:96:5B:E0:7E:51:94:6F:14:70:AC:C7:7F:C7:43:E5
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Certificate issuer: /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial: 019D2997144BF3D22842F1D19F33E0EBB108
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
Manifest number: 115F
Signing time: Thu 26 Mar 2026 10:01:00 +0000
Manifest this update: Thu 26 Mar 2026 10:01:00 +0000
Manifest next update: Fri 27 Mar 2026 10:01:00 +0000
Files and hashes: 1: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: icigdqvRd+WmeCbYGDl5rtcC6e9Kv2G6m1V+VQCEt9o=)
2: ePI6xD2cfu7fzAdug0Km--LXZXw.roa (hash: A5otAx8dQYDetFTAWi3ze+gQMQ2WC4fRm0x+IwV20E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:14:4b:f3:d2:28:42:f1:d1:9f:33:e0:eb:b1:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Validity
Not Before: Mar 26 10:01:00 2026 GMT
Not After : Mar 27 10:01:00 2026 GMT
Subject: CN=c7be395aaf965be07e51946f1470acc77fc743e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d6:df:07:bd:db:d2:7b:0b:7b:78:80:f1:ed:
ba:3e:9f:9a:b8:41:18:81:e8:57:06:77:ad:28:ce:
28:b7:49:89:8b:41:3f:24:0e:45:a5:92:b9:30:5a:
04:0d:6e:04:e1:b0:e5:1e:b1:fc:6c:ea:61:d5:c5:
9a:21:88:56:e9:b2:62:44:ae:2c:c1:30:5a:21:dc:
43:3e:1d:e7:8f:09:8d:59:06:b0:cc:13:f9:e7:ae:
da:f1:cd:60:2c:91:b2:ba:8f:49:0e:2a:64:4c:bc:
3c:0c:ed:5c:03:40:9f:d2:5b:92:5d:3b:ca:9d:80:
12:ca:5a:2c:60:e3:01:2c:97:05:40:c3:bd:dd:9a:
5d:ce:d6:b6:9c:7e:8c:a0:92:aa:21:f7:99:24:39:
61:6b:0b:56:72:a1:d7:b0:d2:72:c1:b5:3e:04:c6:
3a:37:cd:be:36:ff:f7:50:b3:f3:13:c6:f0:c6:8f:
99:24:87:5d:e9:cd:ba:54:14:f1:60:f5:2f:c8:ca:
cc:75:8b:f4:4f:70:0f:ab:44:04:c3:65:ac:83:80:
29:02:18:de:19:37:75:7a:ea:8c:d8:12:e9:4f:e5:
e5:ff:10:6a:f1:40:aa:d9:fa:27:14:9e:0f:c3:81:
f1:9f:3d:17:20:76:59:64:02:b0:a0:c6:a9:99:c2:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BE:39:5A:AF:96:5B:E0:7E:51:94:6F:14:70:AC:C7:7F:C7:43:E5
X509v3 Authority Key Identifier:
keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a3:32:80:2b:3d:08:f3:1e:b6:7b:98:73:eb:fc:b6:c3:da:
fd:3d:8a:4d:57:6c:3b:f8:b4:52:c7:2b:45:3c:c3:51:a4:51:
5a:da:31:b1:ce:ad:83:0d:af:7e:eb:26:55:ee:a5:df:12:b2:
1a:a7:49:d7:0b:8f:97:82:63:6b:91:54:4f:cf:39:c4:dc:46:
73:81:66:09:c5:a1:be:f7:08:2f:de:83:18:2b:36:e2:a3:c8:
23:f5:38:db:31:cd:b2:3a:cb:d3:79:fa:b0:8c:d0:30:bf:eb:
a7:87:ae:aa:57:21:83:eb:a1:7f:66:79:a2:ae:3e:d7:00:43:
38:67:f9:73:a7:de:61:a6:08:47:b9:71:33:6c:1b:3c:1e:51:
f6:4b:32:a5:e3:5d:14:36:ce:7c:a1:78:f2:f6:ba:0f:28:88:
70:62:72:e6:63:41:20:af:e4:dc:fb:68:32:90:09:9d:0c:9c:
98:12:cc:a8:4b:8e:a8:7d:19:f2:03:41:d6:dd:19:21:7d:c3:
d3:51:da:3f:17:3d:db:e1:2b:68:9a:a8:b3:0f:58:68:2c:e6:
10:9f:80:d5:60:7c:79:32:78:57:fa:30:7b:2b:d5:31:fa:20:
dc:28:ba:05:dc:e3:42:bf:41:f9:e0:b7:62:a1:6e:17:a0:96:
0f:44:cc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:04 2026 by rpki-client