Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
File: GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft (raw, json)
Hash identifier: mvTKqofU3RSmymDq9MUNMn5wKnG19FwumhPYp9l/r24=
Subject key identifier: 94:09:48:FB:E4:B6:0A:32:33:F7:7E:1F:79:90:C3:93:72:1B:1F:08
Authority key identifier: 1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6
Certificate issuer: /CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
Certificate serial: 019D28F235B76566E21D3691C700E0923358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
Manifest number: 13CB
Signing time: Thu 26 Mar 2026 07:00:55 +0000
Manifest this update: Thu 26 Mar 2026 07:00:55 +0000
Manifest next update: Fri 27 Mar 2026 07:00:55 +0000
Files and hashes: 1: GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl (hash: dDQAgruV03MWb1PsAge4rGkMFSX+0l+XOBl5jj6InLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:35:b7:65:66:e2:1d:36:91:c7:00:e0:92:33:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
Validity
Not Before: Mar 26 07:00:55 2026 GMT
Not After : Mar 27 07:00:55 2026 GMT
Subject: CN=940948fbe4b60a3233f77e1f7990c393721b1f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:66:78:1a:a0:f0:8b:39:f1:9f:50:03:1c:8a:
08:53:7b:b4:73:9d:c5:b7:37:08:2b:6e:46:7c:7e:
9f:d0:49:49:f3:15:63:02:18:5c:4a:21:e7:7e:a0:
6f:da:7e:20:29:e6:19:0c:30:87:fa:29:db:f8:40:
21:1f:a2:f6:48:eb:b9:5b:ce:f1:ee:43:fd:da:fb:
a7:3a:31:8d:87:14:2b:b4:49:05:dd:35:d4:6d:40:
b6:fb:a8:e5:01:7d:73:79:e6:b4:a7:e0:f0:4e:8a:
6f:48:6c:2d:19:9a:71:cf:31:9f:3e:bd:68:63:0a:
bf:78:23:8c:01:9c:f6:09:e4:80:bd:dd:48:6a:e2:
49:d6:8d:39:78:0b:9e:b8:f2:d8:55:ae:fe:cf:7c:
67:55:d6:b9:a5:68:aa:18:fe:78:46:10:7a:ad:55:
99:2b:da:e3:78:73:d1:c6:aa:44:69:3e:78:f5:c8:
06:92:df:b1:34:38:fd:b4:c2:74:b5:88:3d:d6:a9:
a1:69:d0:3a:df:de:a5:b6:fb:44:c2:63:84:6c:f4:
2e:13:e0:d2:54:a4:89:01:77:84:74:43:ca:90:e4:
c9:db:89:82:60:0b:ec:cc:66:de:1d:62:f7:87:66:
72:82:5b:e2:e6:1c:c2:77:f0:d4:5b:de:83:bc:9a:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:09:48:FB:E4:B6:0A:32:33:F7:7E:1F:79:90:C3:93:72:1B:1F:08
X509v3 Authority Key Identifier:
keyid:1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7a:ea:32:37:2b:92:1f:50:78:5e:65:8c:b1:35:4e:f2:b6:
f8:01:29:28:54:3e:2f:47:31:99:c5:7b:1c:55:81:c5:98:99:
d4:7c:ef:f6:3e:52:97:83:84:af:75:f3:a0:d7:19:67:6b:fe:
7d:a5:52:0f:7f:2c:07:ca:2b:de:5d:22:2e:95:67:30:85:ea:
f9:69:c3:f4:3e:91:ce:44:50:61:23:d5:41:08:92:62:fc:f2:
04:e1:3b:64:24:f8:99:43:97:e4:25:11:a8:8c:fb:95:a4:9a:
36:00:d8:75:f6:09:c1:4c:73:cc:b7:7d:73:02:62:5a:b4:14:
a0:1c:de:c2:c4:bc:d3:52:60:67:4b:ec:ba:d9:d2:c5:c6:94:
41:31:f5:ce:cf:9f:c1:6e:1b:14:dd:71:55:d9:ee:c0:c7:cd:
bc:ca:6f:24:4f:76:49:d9:35:00:74:b7:8d:11:1d:70:09:cf:
3c:db:b0:c5:01:71:41:89:59:e0:96:bc:ac:9c:7f:c3:1c:f6:
12:3c:c2:aa:44:a8:4a:d5:48:9d:90:11:98:81:a1:9d:1b:40:
11:e7:70:5a:ef:5b:1e:b6:4f:30:9c:17:c7:0d:c5:06:49:0f:
30:4e:eb:97:b7:c7:f6:df:49:ae:7b:45:d3:2b:7e:20:44:8a:
40:41:34:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8jW3ZWbiHTaRxwDgkjNYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNTViYWI0MjVlYWM0YjZhODI0YzY1MTYzZmE5ZWY1MDBl
OWY4YzYwHhcNMjYwMzI2MDcwMDU1WhcNMjYwMzI3MDcwMDU1WjAzMTEwLwYDVQQD
Eyg5NDA5NDhmYmU0YjYwYTMyMzNmNzdlMWY3OTkwYzM5MzcyMWIxZjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WZ4GqDwiznxn1ADHIoIU3u0c53F
tzcIK25GfH6f0ElJ8xVjAhhcSiHnfqBv2n4gKeYZDDCH+inb+EAhH6L2SOu5W87x
7kP92vunOjGNhxQrtEkF3TXUbUC2+6jlAX1zeea0p+DwTopvSGwtGZpxzzGfPr1o
Ywq/eCOMAZz2CeSAvd1IauJJ1o05eAueuPLYVa7+z3xnVda5pWiqGP54RhB6rVWZ
K9rjeHPRxqpEaT549cgGkt+xNDj9tMJ0tYg91qmhadA6396ltvtEwmOEbPQuE+DS
VKSJAXeEdEPKkOTJ24mCYAvszGbeHWL3h2Zyglvi5hzCd/DUW96DvJptAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQJSPvktgoyM/d+H3mQw5NyGx8IMB8GA1UdIwQY
MBaAFBpVurQl6sS2qCTGUWP6nvUA6fjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xXNnRDWHF4TGFvSk1aUllfcWU5UURwLU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi84YjQ2ZmItMDMxNy00NDNhLWI2MTUt
M2Q0MTllZDQzMTJkLzEvR2xXNnRDWHF4TGFvSk1aUllfcWU5UURwLU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi84YjQ2ZmItMDMxNy00NDNhLWI2MTUtM2Q0MTllZDQzMTJk
LzEvR2xXNnRDWHF4TGFvSk1aUllfcWU5UURwLU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACnrqMjcr
kh9QeF5ljLE1TvK2+AEpKFQ+L0cxmcV7HFWBxZiZ1Hzv9j5Sl4OEr3XzoNcZZ2v+
faVSD38sB8or3l0iLpVnMIXq+WnD9D6RzkRQYSPVQQiSYvzyBOE7ZCT4mUOX5CUR
qIz7laSaNgDYdfYJwUxzzLd9cwJiWrQUoBzewsS801JgZ0vsutnSxcaUQTH1zs+f
wW4bFN1xVdnuwMfNvMpvJE92Sdk1AHS3jREdcAnPPNuwxQFxQYlZ4Ja8rJx/wxz2
EjzCqkSoStVInZARmIGhnRtAEedwWu9bHrZPMJwXxw3FBkkPME7rl7fH9t9JrntF
0yt+IESKQEE03g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:13 2026 by rpki-client