Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
File: GbLh_EALv53LIGat49v-XJ6rLn0.mft (raw, json)
Hash identifier: FJNzeYrsYReCyxhoIUroDLks2RpEeZc0wI7iPpWNeCA=
Subject key identifier: 85:8F:9E:F0:18:DC:79:32:31:91:29:AD:3F:66:0D:3A:C7:79:50:D7
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Certificate issuer: /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial: 01A0D6151C4669E6B39A68EBC950DB688772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
Manifest number: 1346
Signing time: Fri 25 Sep 2026 01:01:42 +0000
Manifest this update: Fri 25 Sep 2026 01:01:42 +0000
Manifest next update: Sat 26 Sep 2026 01:01:42 +0000
Files and hashes: 1: GbLh_EALv53LIGat49v-XJ6rLn0.crl (hash: nVbamol4NbVvtZrferrsWGvnEQBZyq7lFENXXTPLQE8=)
2: ePI6xD2cfu7fzAdug0Km--LXZXw.roa (hash: A5otAx8dQYDetFTAWi3ze+gQMQ2WC4fRm0x+IwV20E0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:15:1c:46:69:e6:b3:9a:68:eb:c9:50:db:68:87:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Validity
Not Before: Sep 25 01:01:42 2026 GMT
Not After : Sep 26 01:01:42 2026 GMT
Subject: CN=858f9ef018dc7932319129ad3f660d3ac77950d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:11:f4:7f:cb:bc:40:1e:06:b8:52:5a:47:97:
b8:30:1e:66:df:1e:5c:82:55:4d:d0:e7:6c:d8:37:
dd:e4:61:d5:78:7a:ab:36:97:18:bf:59:eb:3a:bd:
12:89:91:e9:5d:8e:b7:5f:2e:50:d2:b3:96:fe:59:
c3:fd:2c:1c:9e:ad:87:64:c9:9b:f4:89:be:44:27:
7c:dd:bd:b1:58:2b:36:dc:6c:dc:bf:69:09:f1:a5:
56:01:cc:62:39:c6:68:9c:75:3d:3a:b0:f6:bd:2c:
6d:30:60:13:07:1b:fd:23:fd:be:95:57:66:0d:f2:
0b:40:86:f1:a9:98:49:1c:ed:82:d9:37:28:0a:62:
23:ad:6c:87:a7:93:f1:b7:19:59:ce:d3:58:cb:65:
4b:f3:b3:af:f3:c8:92:77:39:94:e9:5d:1c:cb:6f:
ea:dc:75:fe:27:84:83:34:aa:98:22:b0:d5:07:a3:
1e:28:5f:1c:24:a3:06:6b:92:20:de:d1:f8:e3:65:
33:a1:57:93:0e:69:9f:1d:2a:1a:bb:d7:96:74:d2:
ec:fd:e5:d0:f1:ec:a7:e2:18:53:a5:06:fe:87:33:
67:92:69:0b:f5:ab:e3:c7:c5:a6:02:2c:2b:5a:42:
51:9f:4f:19:5a:e8:0a:fe:ce:d2:96:2e:fc:07:49:
da:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8F:9E:F0:18:DC:79:32:31:91:29:AD:3F:66:0D:3A:C7:79:50:D7
X509v3 Authority Key Identifier:
keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ff:d5:7b:70:29:33:b1:e6:5f:7a:3b:74:b3:f7:25:99:8d:
88:71:26:1a:41:45:70:d4:44:fa:bc:ca:a8:d5:1d:71:d0:9e:
cc:3c:3c:85:4b:e4:8b:c2:a1:a8:d5:87:77:f3:5d:89:a9:ff:
d0:4d:b2:d3:ee:26:3f:5f:44:f8:19:0b:49:90:5b:80:a6:e3:
17:00:ae:ef:89:91:f9:0b:cb:eb:cb:2c:0b:63:39:b5:86:23:
bb:9a:0e:b0:56:87:4a:0b:f4:e9:f3:b0:e0:8b:53:17:38:a7:
fd:39:e7:9e:3c:13:23:73:f0:4f:01:43:57:9a:a0:8f:f5:a6:
13:c6:4c:94:f2:6c:3a:f1:d2:aa:80:be:38:53:76:07:10:48:
47:ee:a5:c8:66:1c:ac:a2:3d:fc:62:c4:38:46:af:96:b3:5d:
d2:6b:0c:0b:2d:16:4c:47:65:41:f1:69:28:0d:0c:a9:5b:5a:
0e:98:ad:51:4d:6a:6d:46:b6:71:cd:de:65:4e:a7:78:27:d5:
5a:82:d7:55:50:be:a8:1f:d7:43:79:8a:b5:d0:35:d4:4c:30:
63:06:71:8d:8d:e1:5e:ac:99:97:09:53:40:1f:7e:55:e6:d9:
52:55:0b:ce:b2:56:dd:1d:25:d0:f0:eb:26:a9:2e:ff:83:6a:
04:c7:4f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:51:22 2026 by rpki-client