Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: d2t0CLliVlwhDot5FC6sfatLmgpPyiBCH44GwVaWtBA=
Subject key identifier: 60:F4:DA:44:C3:D8:16:B0:A0:1F:43:8B:F1:93:AE:FD:54:1D:7C:BC
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 019F9090879B251B323D795E62E09EB866BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 19C6
Signing time: Thu 23 Jul 2026 20:00:18 +0000
Manifest this update: Thu 23 Jul 2026 20:00:18 +0000
Manifest next update: Fri 24 Jul 2026 20:00:18 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: WipJfaMKFCSoP5w2fj2qlOIRpBU+wdbw8Cb8ZX2wmgw=)
2: Oigk8x42n2srDK0X7uF3mGQTa5U.roa (hash: XAfo6ieIhAzw5ZZ26D6D8t+cKnugPfgfyLO9JlIq68I=)
3: R48K96yi_NTgRX4KtqsQkdz8i00.roa (hash: bzu9ODXT9wqH3BYpXobenIQwAbgYpMNpV1lKwBLJTDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:87:9b:25:1b:32:3d:79:5e:62:e0:9e:b8:66:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Jul 23 20:00:18 2026 GMT
Not After : Jul 24 20:00:18 2026 GMT
Subject: CN=60f4da44c3d816b0a01f438bf193aefd541d7cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:31:63:1b:f5:35:12:41:9e:cd:35:be:18:
cd:c6:58:33:27:d7:a5:39:4c:f8:23:21:54:e9:68:
d7:32:48:cd:9a:df:c9:f0:10:01:ec:bf:30:76:a3:
12:93:26:9d:b9:db:25:c9:d7:42:14:e4:3f:ca:1d:
a8:ae:29:24:85:1e:9d:65:76:df:af:c5:b9:c9:41:
ef:8c:60:ff:86:c2:b8:13:c5:23:68:84:1e:a7:58:
ae:6b:2d:7e:ff:99:51:f6:8a:fb:23:77:17:2e:93:
b0:7f:87:33:cd:83:3d:b4:2b:b5:8a:f6:9a:b2:d8:
37:bc:29:cf:0a:d9:a1:58:64:56:02:50:4b:86:fb:
fb:17:7b:2f:ab:40:d2:bc:17:91:d0:d4:af:b1:04:
76:b3:1e:2f:7e:68:81:52:d6:3a:ae:98:96:4c:00:
cd:17:3e:ec:09:c1:6a:5b:48:dd:01:db:69:88:e8:
d2:67:5d:69:fc:6c:48:1d:fb:4e:d1:f1:d7:e6:7e:
a6:99:33:b8:e0:c2:64:98:12:9d:1a:5e:91:ff:c8:
5f:45:b3:53:7d:7b:9d:22:d9:96:ca:df:96:c8:2e:
85:03:02:8c:83:71:71:22:e6:17:62:14:d7:8f:73:
1e:da:6f:b0:2c:03:c2:19:56:35:9a:bd:d7:10:a1:
4e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F4:DA:44:C3:D8:16:B0:A0:1F:43:8B:F1:93:AE:FD:54:1D:7C:BC
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:d0:2d:f4:12:65:c6:c8:2c:b1:c0:a7:ce:d3:e2:2a:ab:b2:
2b:ca:9c:de:66:f5:2a:a0:99:69:e9:ec:79:ff:81:f4:17:09:
1a:b1:8c:4b:82:da:9b:de:7f:c6:71:0b:0d:d4:45:2c:df:e1:
c3:46:79:b2:71:2c:2b:6c:bf:27:c4:9a:77:96:34:ac:cc:79:
37:ad:28:b4:a7:49:71:40:43:74:45:dd:46:40:1f:a9:64:9c:
93:21:64:e8:90:bf:20:a8:dc:3f:45:54:97:0c:c1:79:d1:3e:
0c:b5:ac:2e:98:d7:5f:96:c7:89:d9:a4:81:fa:5e:cb:91:3c:
a8:ba:5a:e6:65:64:8b:ac:70:78:5c:cb:fe:0f:cb:63:e1:14:
83:8e:5b:43:49:a6:f9:b7:9b:e3:de:ce:9c:14:2e:b1:d3:27:
6a:44:d2:95:c9:5c:58:07:77:eb:07:5c:65:63:4c:9e:fa:89:
21:a4:9f:34:7c:90:4b:75:9d:f4:93:f6:24:b8:96:50:1f:70:
1d:ec:70:da:05:a5:f3:e9:b6:9f:d7:2b:34:4b:fc:1b:fd:79:
b5:98:d1:a7:19:6d:75:8f:e2:c5:ad:fa:b7:df:07:a8:6d:86:
a5:74:3e:df:2f:4d:b8:db:cf:6d:f4:8e:11:80:d2:b9:57:5c:
d4:fa:d8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:34:05 2026 by rpki-client