Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: azlCAPA3z76C1wG7yzyH0k2cUvYMQfzFiVHRRSCsS0U=
Subject key identifier: 8C:8B:52:08:42:55:B3:45:7F:0C:08:2C:AF:FA:B0:E6:79:03:42:76
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 019D273AA56CB7C2369C7FE7066BA38DAD86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 16FD
Signing time: Wed 25 Mar 2026 23:00:47 +0000
Manifest this update: Wed 25 Mar 2026 23:00:47 +0000
Manifest next update: Thu 26 Mar 2026 23:00:47 +0000
Files and hashes: 1: 4aCUeUm4DYpWSQ7MSed7gWheYek.roa (hash: 3dUedzWX4ggiRmXBQIk9G5+5iMNmw05uaAyT3EfChQQ=)
2: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: I/IaLsXrTvSik2pi+5C+c6shUwwoJ4zwKeHcRXkjqhc=)
3: LGAzazAsvBBjNUS-QipfT8L_rKc.roa (hash: D5sjWJz5RfyDQZFF/L4/mTT1RT97QDK5mPQgERHSqvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a5:6c:b7:c2:36:9c:7f:e7:06:6b:a3:8d:ad:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Mar 25 23:00:47 2026 GMT
Not After : Mar 26 23:00:47 2026 GMT
Subject: CN=8c8b52084255b3457f0c082caffab0e679034276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:21:b0:94:4a:7f:ac:a8:5c:4e:f1:4f:2b:1a:
40:2b:87:82:57:11:44:f9:aa:8b:ff:52:33:01:bb:
44:0a:a1:d5:c9:91:50:98:f7:0a:62:5f:50:4b:d3:
e1:17:13:91:6b:71:f2:9e:19:c7:45:7b:b7:7c:97:
9c:24:10:99:1e:19:f2:72:68:9b:4a:9f:25:59:87:
99:9e:2a:4d:59:b2:ea:f1:fe:b2:23:22:97:a8:ab:
b4:40:c1:49:52:18:a4:dd:3a:97:06:d0:05:81:46:
ed:c0:97:ed:85:a3:cd:48:ad:26:d6:00:03:08:ad:
92:f2:54:23:0d:b0:6a:b4:8b:af:b1:8f:94:64:d3:
3c:3e:7c:89:9d:c0:c3:0c:66:83:9c:7c:b1:7f:3c:
7e:1a:2b:ab:87:32:56:7e:b3:8e:0b:5c:9f:7a:63:
35:b7:1a:2e:6e:86:41:14:42:f9:c2:11:d5:c2:c6:
96:b1:5b:cb:0d:1b:03:1b:41:31:71:79:f5:d3:6a:
e1:6d:c9:5a:9c:5e:97:e2:db:90:13:b1:31:d5:bb:
0c:d7:03:0b:b3:cd:76:b3:3b:8f:a9:c2:da:96:46:
ac:e5:0b:9e:9e:2c:d0:88:df:62:cb:d7:c5:fa:8d:
2f:d5:52:8d:0e:5a:0c:11:44:12:fb:0b:99:58:57:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8B:52:08:42:55:B3:45:7F:0C:08:2C:AF:FA:B0:E6:79:03:42:76
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:97:30:17:45:1e:b7:39:f8:ee:9c:d0:10:94:bb:bb:a0:9a:
ad:71:03:96:e8:2f:a4:67:89:55:67:34:ef:6d:e0:8c:d0:99:
c1:53:55:e2:e5:2f:74:49:dc:57:41:14:d4:ec:3d:81:0e:59:
3e:07:7b:1b:0e:23:ad:0d:8b:4f:79:f0:bc:c7:9f:77:90:2f:
48:2b:5b:32:d4:f5:0f:2f:cf:dc:d4:98:8c:64:71:28:a6:8a:
60:87:96:02:ec:96:da:ab:58:b9:46:9b:e6:a4:62:cc:ff:a6:
88:a7:75:e1:6c:2d:46:76:00:74:df:c3:f1:29:3e:99:bc:8d:
8b:61:df:a7:5b:7f:59:8a:20:de:f6:08:76:fb:aa:90:c9:ae:
0f:fc:db:e8:4a:d1:05:06:0f:c6:78:09:50:96:17:3e:63:ec:
38:b3:18:d6:01:e9:bb:a3:30:6d:ad:82:e5:0d:c6:46:ea:e0:
68:4a:c0:ea:72:0b:0d:1d:8f:08:52:c8:56:e8:95:ab:64:21:
9d:a8:27:b6:fc:9e:1b:73:10:93:c1:58:91:90:50:d1:8e:65:
02:72:53:ff:d2:02:3e:95:4d:02:2d:98:7f:59:08:13:fb:f3:
cb:17:e2:57:52:a3:26:7c:35:3b:9c:63:45:ce:c7:d3:09:c6:
22:11:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:16 2026 by rpki-client