Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
File: GLIwW_twBOUp1iOkd3G45uzQUdY.mft (raw, json)
Hash identifier: ZRcY/jYWntt7tf3KTU9YEN/61N+g0R3S0e6CoyyScyM=
Subject key identifier: 9D:FB:44:76:D8:96:A4:B9:C0:62:17:41:09:B5:AF:23:4C:F9:48:4D
Authority key identifier: 18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
Certificate issuer: /CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Certificate serial: 019D26CD04B48B57086217FD71B367A9A2E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
Manifest number: 0253
Signing time: Wed 25 Mar 2026 21:01:03 +0000
Manifest this update: Wed 25 Mar 2026 21:01:03 +0000
Manifest next update: Thu 26 Mar 2026 21:01:03 +0000
Files and hashes: 1: BsB1weTRtbb_w5a2aWqr7c8Cgpg.asa (hash: HwOzHFJxF3HhEQ9N7dXbh3+iApRhiXxh7m6fcvockMY=)
2: GLIwW_twBOUp1iOkd3G45uzQUdY.crl (hash: 126O2zbHALKv8qhtIXMwqQqneocrOjOClSjVEHA6XmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:04:b4:8b:57:08:62:17:fd:71:b3:67:a9:a2:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Validity
Not Before: Mar 25 21:01:03 2026 GMT
Not After : Mar 26 21:01:03 2026 GMT
Subject: CN=9dfb4476d896a4b9c062174109b5af234cf9484d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a1:21:9b:28:09:69:26:c8:23:3e:0b:0f:38:
d3:9f:05:13:c0:bb:6c:14:c8:2f:6b:3a:01:c0:80:
02:6a:b0:70:ea:35:d9:15:74:48:19:a3:85:5f:e5:
90:28:87:00:fe:1a:ab:10:31:62:29:69:e0:b1:c0:
bf:d5:ac:b0:01:77:80:46:8c:81:6e:aa:ac:56:08:
fa:4b:d2:17:19:c2:10:2b:6f:2a:2a:b9:be:a6:ee:
80:49:90:f2:f6:67:88:dd:85:d0:99:15:63:66:06:
74:27:6b:9e:af:b1:ee:64:91:db:b4:67:bc:bd:9b:
a4:23:8d:b6:3e:d3:88:c7:3b:69:43:3a:67:e5:4d:
f7:19:bb:48:1f:cc:df:4a:d4:fb:97:33:c6:91:ac:
fa:7c:2c:cb:b0:ed:1f:d8:94:65:a9:f0:86:ed:68:
0d:ed:0b:08:56:0f:c5:53:1c:55:80:d2:df:d7:b1:
7f:bc:75:28:4c:52:47:80:17:71:6a:9d:99:47:f5:
96:f1:0e:a3:58:85:78:a7:5c:07:cd:52:73:cc:15:
f8:40:7b:84:47:c2:f8:51:2a:f4:f8:8f:59:9a:84:
53:69:3d:e8:7b:31:72:03:9b:c8:2b:24:ae:55:11:
dd:0b:e9:af:ea:93:d5:11:d9:6c:7f:2d:e2:68:c0:
a0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FB:44:76:D8:96:A4:B9:C0:62:17:41:09:B5:AF:23:4C:F9:48:4D
X509v3 Authority Key Identifier:
keyid:18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:52:4c:3f:88:1c:47:04:9e:c5:d4:d2:aa:04:cb:68:c5:81:
e7:f3:a6:ec:01:e5:9c:04:15:d0:6d:e4:b7:7b:16:4b:e2:49:
b4:49:96:ef:82:54:09:b5:5d:a5:06:0c:cc:38:78:a9:f5:4c:
25:00:12:9d:03:f8:0a:62:2b:b5:e1:3e:34:cf:47:33:50:1b:
2e:a5:89:44:e1:ba:42:65:e4:07:b8:f4:02:3f:83:d5:06:d0:
bc:e4:fd:07:e4:4b:56:69:2e:2b:66:e5:a0:9d:dd:b2:e1:7a:
11:06:c7:92:51:c0:bc:d6:e2:67:55:14:3d:dc:6e:26:17:78:
ad:1d:75:9e:d9:8f:02:5e:e6:fa:8a:99:27:9c:56:f6:07:b4:
0f:f4:4f:15:46:13:b4:07:94:09:c0:4c:f2:53:7b:12:56:23:
9a:81:6a:16:6e:f3:85:74:d6:44:2f:7e:5e:0d:e9:0c:9f:c0:
78:b0:3b:ea:0b:22:61:53:6d:5c:5e:57:c4:57:fc:be:6a:20:
3f:59:02:cc:ff:d5:b4:7b:9e:f1:b6:77:4c:03:94:1b:e5:2c:
49:f5:1f:dc:52:9d:53:12:f3:a6:c8:ba:ac:fd:54:48:04:55:
01:48:b0:d4:0f:b8:1d:7c:6b:cc:ee:74:a3:1f:54:b7:2d:9e:
07:8d:9c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:19:31 2026 by rpki-client