Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
File: GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft (raw, json)
Hash identifier: ZXtZ312GnbivfLHweMPjhULZ3tTVJEjSiFpzMD5fI1o=
Subject key identifier: 3A:09:62:F5:39:A0:91:C2:BD:AB:AA:B1:D2:53:E9:5D:AB:01:A9:F1
Authority key identifier: 19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
Certificate issuer: /CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Certificate serial: 019F935BBB9F4BADCF774E68BEA2F7E5FC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
Manifest number: 16AA
Signing time: Fri 24 Jul 2026 09:01:30 +0000
Manifest this update: Fri 24 Jul 2026 09:01:30 +0000
Manifest next update: Sat 25 Jul 2026 09:01:30 +0000
Files and hashes: 1: GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl (hash: VEJbagsbfVsxF59PocradPyV391ZuaJzsKwRPKeAGXI=)
2: m1RumSL2Lpkn5xSdos4UK5ogmGo.roa (hash: t8Fp9lqrvZa6bhqA8X/cu7LJ30Q8l1gfuatd+QQW+b8=)
3: tmAwZ9rp_6wm7u527HJaXsN99iU.roa (hash: RX2GBKLuRCt7FRxgKIFpvkG43EUbtKKHIwQ+YaosNiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:bb:9f:4b:ad:cf:77:4e:68:be:a2:f7:e5:fc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b800c39126db3ca4e0d56910f0ad379257e4a0
Validity
Not Before: Jul 24 09:01:30 2026 GMT
Not After : Jul 25 09:01:30 2026 GMT
Subject: CN=3a0962f539a091c2bdabaab1d253e95dab01a9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:57:90:0d:04:94:d8:8d:fa:e8:b2:c1:a5:
10:8d:ae:c4:33:94:5a:4c:2b:c3:1c:61:94:8b:a2:
ee:9a:8d:8c:de:de:54:61:23:61:8f:a0:20:d3:af:
db:01:d3:7e:fc:bb:06:6d:23:58:0f:da:5a:bb:38:
3b:0e:ef:8f:de:42:85:2e:3c:b6:ac:4b:59:d7:6a:
37:3a:7a:69:21:2e:84:e6:ac:24:3a:3b:e0:bc:d9:
84:f8:07:16:01:d6:fd:17:57:1e:ff:fe:a4:8d:4b:
b0:fa:68:b9:47:ad:b4:59:22:e9:59:ef:e4:a3:1a:
28:84:18:f5:8d:d3:08:1e:1d:45:7e:96:f6:0c:1f:
0f:f1:c5:02:10:10:5f:cd:f7:25:4f:24:76:93:04:
1b:b2:11:ae:98:b4:b6:cf:f2:d7:cc:40:77:f0:42:
0e:28:7f:5c:a7:d3:66:38:11:54:99:90:22:80:48:
55:7e:62:11:c7:7a:63:0a:a4:72:bb:74:5a:a1:b8:
91:f4:3f:1f:da:27:8a:8a:23:5e:68:8e:3a:3e:96:
62:65:83:f0:81:cf:dd:79:63:a8:21:f2:e7:bb:da:
b0:74:81:6f:d3:79:23:ef:68:79:da:0f:ab:e8:de:
a0:98:78:6d:11:a5:c2:ca:7e:57:a3:19:44:ba:c5:
9f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:09:62:F5:39:A0:91:C2:BD:AB:AA:B1:D2:53:E9:5D:AB:01:A9:F1
X509v3 Authority Key Identifier:
keyid:19:B8:00:C3:91:26:DB:3C:A4:E0:D5:69:10:F0:AD:37:92:57:E4:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbgAw5Em2zyk4NVpEPCtN5JX5KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/84b489-8b6f-459d-9a31-f18ad9f4cc34/1/GbgAw5Em2zyk4NVpEPCtN5JX5KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:0f:57:52:05:8d:2f:e1:06:db:59:04:16:bf:b2:09:d0:5e:
f7:97:3f:a0:af:30:6e:f1:5e:0f:79:15:52:ab:42:71:fa:f5:
8b:be:27:3b:a1:df:a1:f3:53:be:35:70:f1:05:56:28:fd:cf:
d0:49:24:e1:fa:fa:18:ac:2a:d3:6a:06:da:2a:c7:13:6b:f2:
75:c1:4f:4d:56:a3:8d:f1:38:5b:04:cc:63:1f:64:19:c6:dc:
cb:16:2f:39:76:db:04:56:f9:b9:84:8e:7c:d0:e0:c9:3f:b8:
80:e0:46:fe:c4:36:5e:0e:90:b3:5c:82:7f:4a:4c:5a:c0:7e:
da:ee:e2:69:3c:20:db:ef:c5:e0:a0:d0:ce:1f:3f:60:21:22:
bc:e1:b2:a4:16:04:2d:1b:31:39:c4:f2:57:d2:6f:a3:16:60:
3f:7c:62:d1:f7:c3:4e:2d:91:0f:94:64:bf:d6:70:35:1a:96:
06:b1:a7:84:00:e0:6f:91:62:ad:d7:42:54:2a:e7:05:47:fa:
75:fb:86:b4:81:77:25:b9:ba:fd:be:b0:43:22:ae:0c:04:28:
06:66:e2:ee:fc:da:22:e4:f8:ea:20:c4:40:6b:a2:e0:19:83:
ed:92:d2:f9:6c:d1:46:a2:9c:d9:43:ae:aa:30:55:e4:42:27:
b1:99:7d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:51 2026 by rpki-client