Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: 6LrZJyEckJkl1CHD9KDv4n36DaTx8StNeeftia9QQP0=
Subject key identifier: DA:5F:6C:3C:48:B4:60:FF:48:8E:23:78:84:DF:DE:F7:64:ED:22:00
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 01A0D50261F169EAFD60198E752B335B4BFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 1A6E
Signing time: Thu 24 Sep 2026 20:01:38 +0000
Manifest this update: Thu 24 Sep 2026 20:01:38 +0000
Manifest next update: Fri 25 Sep 2026 20:01:38 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: DJ8hfUdAbV5lOTUfRRAcDK/ZNGnqpvCL5pMD/GYjYwA=)
2: Oigk8x42n2srDK0X7uF3mGQTa5U.roa (hash: XAfo6ieIhAzw5ZZ26D6D8t+cKnugPfgfyLO9JlIq68I=)
3: R48K96yi_NTgRX4KtqsQkdz8i00.roa (hash: bzu9ODXT9wqH3BYpXobenIQwAbgYpMNpV1lKwBLJTDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:61:f1:69:ea:fd:60:19:8e:75:2b:33:5b:4b:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Sep 24 20:01:38 2026 GMT
Not After : Sep 25 20:01:38 2026 GMT
Subject: CN=da5f6c3c48b460ff488e237884dfdef764ed2200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8a:6b:a1:35:78:c9:81:48:e7:9a:cc:b3:b3:
41:7c:4f:33:4b:80:78:48:36:99:f4:08:b8:04:8e:
55:24:ef:c1:d9:11:ed:2c:80:b1:ac:95:b9:f4:5f:
7d:41:dc:27:6e:ce:78:bd:4a:66:5c:99:52:68:e6:
e1:e4:62:36:f5:f9:ed:4b:e7:b6:92:aa:9b:85:c9:
46:53:0e:c3:06:8f:cd:bb:67:55:7f:73:71:0e:87:
83:6d:f3:52:02:a1:b2:8d:1d:b2:b3:bb:1d:8b:c3:
cc:2f:3a:04:da:68:6f:52:d6:f6:b9:77:65:ab:6b:
22:eb:3f:8f:97:18:38:80:cd:f6:18:76:3f:61:92:
e7:87:5d:8f:0e:67:32:a3:00:5e:2f:45:80:c1:a6:
00:d0:46:97:40:1f:13:44:21:a0:e3:b1:ae:82:22:
79:4d:42:81:3c:f9:ee:a5:6f:78:8a:1d:e9:8b:5f:
2a:5c:97:6c:bf:07:b4:5b:60:ea:1a:bf:b8:7d:c6:
4f:27:b8:6b:e6:54:0a:82:74:d4:42:28:5c:92:b2:
d8:dc:a6:d8:44:0a:28:b0:0f:8d:70:a1:c0:cc:19:
8a:83:4e:18:55:4f:6f:c9:50:f0:67:23:8f:dd:95:
05:c3:85:17:9c:b9:f4:75:19:9d:cb:5e:05:17:17:
97:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:5F:6C:3C:48:B4:60:FF:48:8E:23:78:84:DF:DE:F7:64:ED:22:00
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:31:e3:55:01:2e:1a:23:fd:88:5d:cd:85:a3:3e:35:8d:74:
5f:45:b6:b2:76:71:c2:a3:e7:9c:df:47:55:29:bf:c8:61:d7:
03:c8:8a:83:6c:4b:8b:67:72:98:b1:fb:44:f3:aa:c3:6b:dd:
fb:29:76:da:4f:d6:8b:43:1a:9a:c1:d5:d7:e9:27:e8:5d:61:
e1:b0:6f:75:94:79:70:c4:35:bf:6a:4a:11:bf:ae:19:05:98:
d5:4e:3a:c8:a3:f6:83:c8:3b:72:c7:fd:5a:f6:54:89:c1:41:
2c:c3:5c:98:d7:7b:df:b5:44:c8:2c:ae:7e:1b:7a:49:7c:58:
9e:97:48:12:91:98:ba:45:e7:00:a1:99:f6:39:0e:b4:5b:e7:
7f:ed:e0:7b:97:c3:f0:80:b2:a7:50:08:6b:2f:7f:2e:76:d5:
26:76:e5:f2:8a:ca:4c:8d:f8:f7:cc:f9:67:a4:9b:9a:64:fe:
05:b6:55:44:32:1b:d9:8b:6d:1f:1d:30:62:ef:52:21:62:f1:
fd:b0:f3:60:0a:b2:d1:63:53:ce:d8:94:bc:16:ae:d8:f5:87:
93:48:27:1f:f0:80:e2:6d:ec:76:4b:7c:81:34:53:eb:24:31:
34:57:28:a2:40:96:ff:4b:11:f3:85:fc:fc:67:ba:62:fb:43:
77:40:7a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:03:11 2026 by rpki-client