Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
File: GBel7BjE8sRHhK3FA4NWvlrolCk.mft (raw, json)
Hash identifier: WMnf2wtv3vH7oHuuXKXiTCeWVO7t1sunlM1GOw82ZXA=
Subject key identifier: F8:9A:9E:AE:0D:A5:42:F9:3A:70:9E:C0:4B:1B:2F:57:2C:81:4C:CB
Authority key identifier: 18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
Certificate issuer: /CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Certificate serial: 019D269671119C1EB40C06D24684BF28D229
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:01:26 +0000
Manifest this update: Wed 25 Mar 2026 20:01:26 +0000
Manifest next update: Thu 26 Mar 2026 20:01:26 +0000
Files and hashes: 1: GBel7BjE8sRHhK3FA4NWvlrolCk.crl (hash: OYh5UL37Kx1xG4G8SqErW1ke5TEhwFrL2MzoOdnaW5M=)
2: Oigk8x42n2srDK0X7uF3mGQTa5U.roa (hash: XAfo6ieIhAzw5ZZ26D6D8t+cKnugPfgfyLO9JlIq68I=)
3: R48K96yi_NTgRX4KtqsQkdz8i00.roa (hash: bzu9ODXT9wqH3BYpXobenIQwAbgYpMNpV1lKwBLJTDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:71:11:9c:1e:b4:0c:06:d2:46:84:bf:28:d2:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1817a5ec18c4f2c44784adc5038356be5ae89429
Validity
Not Before: Mar 25 20:01:26 2026 GMT
Not After : Mar 26 20:01:26 2026 GMT
Subject: CN=f89a9eae0da542f93a709ec04b1b2f572c814ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2c:6a:56:8b:d7:91:62:fe:db:46:4c:8b:69:
00:6b:21:aa:66:46:27:4d:3e:1c:a9:e7:bd:17:db:
54:2e:26:37:9f:d5:d2:3c:ef:ad:46:4b:88:26:bc:
59:4b:31:6e:f2:b3:d2:3c:8f:f0:84:52:75:85:8d:
df:84:3b:d4:43:8d:e6:0f:00:65:59:5c:5a:0b:28:
1a:b9:0a:c7:c2:90:da:2f:c7:d5:39:dc:6c:e1:3b:
f4:50:8f:ed:03:5b:9d:8f:f4:93:1b:75:86:6f:f6:
b6:d4:bc:59:34:90:8c:92:6c:1b:78:e2:c0:e5:6c:
58:18:7e:01:37:62:4b:08:86:1d:76:50:b6:d8:fc:
05:00:a3:d3:ad:6b:da:d6:7c:56:f0:e0:38:7b:25:
95:87:a8:47:a3:df:6a:65:d9:01:50:5b:e0:bd:0e:
40:c2:dd:43:15:3b:59:fb:e4:3a:7e:4d:d3:e3:51:
da:26:06:e1:47:06:7a:32:c9:0c:c5:35:c3:78:ec:
f2:2b:14:b5:63:18:22:00:fd:4f:c2:fc:bc:74:bf:
4a:37:39:5c:f9:c3:01:14:07:80:87:1a:0d:2c:8b:
a6:04:0a:c7:14:56:2f:1a:01:35:d4:0d:d5:3b:b3:
87:16:c7:d8:02:fd:95:50:ae:e9:0d:4e:5e:09:90:
83:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9A:9E:AE:0D:A5:42:F9:3A:70:9E:C0:4B:1B:2F:57:2C:81:4C:CB
X509v3 Authority Key Identifier:
keyid:18:17:A5:EC:18:C4:F2:C4:47:84:AD:C5:03:83:56:BE:5A:E8:94:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBel7BjE8sRHhK3FA4NWvlrolCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/773678-e200-46af-86c1-6bd8022d2eae/1/GBel7BjE8sRHhK3FA4NWvlrolCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a6:ed:62:a5:41:da:66:67:6a:8c:ca:62:73:ac:90:9f:78:
84:1d:0e:ef:b9:4f:62:6d:e3:89:ae:0f:42:96:8f:cb:24:1d:
de:94:d1:0f:b2:93:6a:e7:a6:4b:5f:1a:5a:69:1c:e2:57:32:
3f:31:85:e0:0a:6b:5a:f9:b1:e2:a4:f7:2c:6c:d9:7d:9c:be:
89:1d:5d:93:32:5a:5c:5f:82:23:ce:73:86:e7:fa:59:d4:4e:
ae:aa:34:94:d4:a0:dd:bd:11:5d:dc:f3:7a:57:aa:3e:10:ea:
79:c0:52:c5:11:42:fb:51:7c:1e:c5:a7:30:18:b1:96:60:62:
6c:0e:6e:b3:5d:aa:28:7e:68:20:b8:64:ec:99:1b:fc:6b:cf:
a6:77:c2:c7:c6:7a:b5:91:48:70:4d:50:0d:34:89:6a:a9:65:
74:3b:87:49:7a:52:35:32:4f:ed:a8:2d:b7:80:d6:bb:9f:d6:
8f:77:76:da:11:b0:80:ed:1e:85:49:3c:7a:4b:1e:91:a4:1b:
25:51:92:de:a1:43:ed:d9:cd:7e:d9:b7:7a:47:f1:53:a9:1c:
e8:16:30:50:8f:36:d5:3c:b5:51:ae:72:dd:03:e1:63:b2:24:
a8:91:7c:0b:24:aa:27:79:10:f7:ad:0c:9e:80:c3:88:60:13:
ea:10:4f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:54:11 2026 by rpki-client