Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: zGDICgxIKhBb3fM77T+T3kFINXv4huIR4NGxTBM1QKE=
Subject key identifier: C3:D1:79:F9:19:1B:54:E9:D6:ED:CB:F9:15:5F:8F:AA:7A:0E:36:7C
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 019E1DC71745ED307B5A0117F9C204EE5D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 20:00:47 +0000
Manifest this update: Tue 12 May 2026 20:00:47 +0000
Manifest next update: Wed 13 May 2026 20:00:47 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: 3IHyTCX0VLIKO0UFcVNZ2vAavXbVaj/H4dKtDFY77rE=)
2: Oigk8x42n2srDK0X7uF3mGQTa5U.roa (hash: XAfo6ieIhAzw5ZZ26D6D8t+cKnugPfgfyLO9JlIq68I=)
3: R48K96yi_NTgRX4KtqsQkdz8i00.roa (hash: bzu9ODXT9wqH3BYpXobenIQwAbgYpMNpV1lKwBLJTDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:17:45:ed:30:7b:5a:01:17:f9:c2:04:ee:5d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: May 12 20:00:47 2026 GMT
Not After : May 13 20:00:47 2026 GMT
Subject: CN=c3d179f9191b54e9d6edcbf9155f8faa7a0e367c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:61:07:87:35:d7:7e:15:18:3e:7f:35:5f:92:
5f:7b:79:8b:8d:53:ca:11:6d:f6:7e:86:cf:c6:43:
c3:53:ea:9b:04:6e:05:ea:56:b2:23:1b:17:f9:cc:
c3:3f:6f:6e:53:82:ab:4d:52:e7:42:85:49:21:0b:
a2:37:3e:aa:43:83:51:47:b1:b5:85:33:c9:d7:bf:
e4:2b:1f:c2:94:ae:c1:84:b4:1b:4b:f7:48:82:31:
07:9a:cf:3e:6e:e6:2f:62:93:a1:77:9a:a7:25:74:
dd:0e:d8:6f:18:1d:52:db:22:23:10:d5:91:84:24:
67:b1:5b:0b:89:06:2f:0e:a2:42:ae:43:78:00:98:
f9:6e:bb:86:f7:3a:2c:aa:5d:38:21:5d:4c:00:13:
c2:98:b7:8a:d4:86:46:b6:97:af:18:51:c9:4d:0c:
4f:19:00:99:4b:65:55:ee:fe:31:3b:50:c1:a6:ae:
02:1c:af:d6:6d:d4:83:3e:9c:9c:30:59:df:96:72:
8b:7e:75:06:db:fa:9c:0b:ac:ef:e1:94:2a:18:94:
51:ff:6c:80:53:e7:ed:1a:27:15:e5:12:12:a0:60:
af:ec:85:4c:56:63:78:7d:5c:6e:5b:6a:fc:5a:65:
80:ad:81:93:56:cc:c1:12:be:29:08:5e:0c:f5:64:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D1:79:F9:19:1B:54:E9:D6:ED:CB:F9:15:5F:8F:AA:7A:0E:36:7C
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:64:22:9d:b5:7d:16:b6:fa:28:eb:06:e6:4d:76:c9:cd:d5:
0c:e0:e6:14:ea:a0:ba:b0:0c:07:fb:c7:c0:bc:73:a9:bf:a4:
6e:31:16:76:76:61:1d:79:5a:53:2d:13:f9:db:86:bb:d3:49:
c9:e3:9e:40:1d:0c:e4:6d:be:e0:4a:27:e9:b7:d9:04:b7:65:
72:78:92:73:73:28:ee:51:4c:1f:0f:31:78:ff:c3:0d:27:eb:
e8:94:ab:40:51:fc:d8:01:4a:20:b7:4e:b7:9b:b1:fb:61:92:
f0:0f:51:42:51:dc:6d:2f:e0:9b:90:5f:dc:91:b4:72:e3:9f:
95:2f:77:cb:17:41:c0:d3:e3:e5:6d:52:ab:ee:8f:0c:cd:20:
e7:08:cf:1f:c1:d0:b5:08:dc:95:3b:1f:be:81:0e:28:21:35:
26:43:4f:1b:36:14:d3:c5:c6:4e:50:40:5e:b1:0c:67:3d:be:
1a:33:5b:34:a1:63:87:85:7a:85:c2:80:20:a8:b3:02:6a:24:
22:d3:12:a8:b4:ac:1b:c4:00:4b:2e:53:f6:d7:a5:bd:1c:34:
5e:37:77:72:3c:6d:ed:e2:6d:7c:a7:64:85:7f:55:b8:a3:ec:
a2:2f:38:b7:bf:00:b9:6a:8f:73:52:ca:2a:66:af:6f:f2:97:
be:86:9a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:51 2026 by rpki-client