Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
File: GLIwW_twBOUp1iOkd3G45uzQUdY.mft (raw, json)
Hash identifier: /GcYunceI5YZwvzZYBviTXjdzEs7qOcASfraaILy0DQ=
Subject key identifier: 5B:EB:6A:3A:07:94:20:68:8D:41:52:A3:B9:9D:DD:1A:56:68:FD:AC
Authority key identifier: 18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
Certificate issuer: /CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Certificate serial: 01A0CD47B10BB0E23B5E4D7EB747FD97446A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
Manifest number: 0437
Signing time: Wed 23 Sep 2026 08:00:22 +0000
Manifest this update: Wed 23 Sep 2026 08:00:22 +0000
Manifest next update: Thu 24 Sep 2026 08:00:22 +0000
Files and hashes: 1: BsB1weTRtbb_w5a2aWqr7c8Cgpg.asa (hash: HwOzHFJxF3HhEQ9N7dXbh3+iApRhiXxh7m6fcvockMY=)
2: GLIwW_twBOUp1iOkd3G45uzQUdY.crl (hash: mxmd66uzVm6eXNNNnpikGhyOUcQ+y94BoPAa+l0L1qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:47:b1:0b:b0:e2:3b:5e:4d:7e:b7:47:fd:97:44:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Validity
Not Before: Sep 23 08:00:22 2026 GMT
Not After : Sep 24 08:00:22 2026 GMT
Subject: CN=5beb6a3a079420688d4152a3b99ddd1a5668fdac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5b:29:38:f6:87:15:c3:c2:66:c3:bd:ab:33:
1d:55:53:5a:f0:69:1a:2c:0b:81:fa:a6:0b:e5:b4:
5b:67:f0:c2:ef:8b:19:19:7a:5a:c0:a6:01:0a:de:
e2:9b:ab:2b:3c:dd:47:6f:32:40:66:36:ac:6f:58:
cd:77:a3:da:36:ed:da:4d:a6:09:62:bf:a2:76:f0:
31:03:b5:69:2c:65:6d:4e:fb:08:76:79:74:df:08:
d6:65:cf:9f:5c:ee:7a:d1:cd:15:54:1e:b6:17:8f:
e7:64:d4:e4:c8:72:e1:69:fc:d2:81:7a:d7:0f:cc:
09:41:4d:f2:f1:b3:f8:f9:c4:f9:02:ad:44:37:86:
7b:2e:f7:14:11:b7:b4:cc:53:64:b6:d5:4d:f3:f2:
06:6f:a7:3b:4d:db:6e:3b:5a:2a:52:8c:c0:ee:38:
0e:a0:10:22:b0:37:8a:df:17:20:c9:9c:fb:01:50:
62:a7:17:93:54:66:29:4f:85:0c:a8:95:b4:5d:ae:
16:ad:71:88:a9:58:dd:3d:ae:1c:f4:61:88:fc:68:
94:d8:f9:c9:97:ae:b6:b9:37:65:a6:d0:fd:15:34:
30:0b:25:f7:6a:29:84:0f:4e:d9:85:e4:16:6c:6f:
9e:32:d4:e7:ff:f1:a7:8c:65:89:2c:42:86:84:4c:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EB:6A:3A:07:94:20:68:8D:41:52:A3:B9:9D:DD:1A:56:68:FD:AC
X509v3 Authority Key Identifier:
keyid:18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8c:0d:9e:8c:45:f5:17:79:37:10:b2:8c:eb:2d:32:05:ec:
a3:6c:69:77:34:05:24:80:9b:0e:75:0d:b2:07:66:4d:fa:bc:
c0:ad:0c:01:7e:3c:30:58:b6:72:2c:d6:69:3a:53:aa:59:3e:
3f:f8:51:41:b7:a4:00:aa:69:30:20:a6:5d:4d:7e:0d:59:0b:
2f:21:95:9e:10:04:4d:59:9d:88:c0:d0:60:e6:a6:aa:1a:54:
06:b5:9d:81:0b:7c:df:d2:6d:e7:7f:9c:fd:cc:89:b8:36:c1:
24:26:ad:0f:05:4d:aa:4f:e3:76:9d:42:c2:68:c1:9c:9f:f8:
06:36:49:2a:b9:fc:d7:49:57:2f:41:e5:52:95:50:37:04:f0:
1d:39:fc:18:29:5e:90:8c:ff:1a:ba:78:2e:d6:11:a4:c1:c9:
58:1c:37:71:40:38:54:d6:57:f2:d8:7d:60:52:60:44:ec:00:
cc:a8:71:4b:6a:8b:0b:e4:2a:6c:f7:cf:70:de:c1:67:9c:33:
d4:6f:a4:db:42:a0:d5:9f:05:35:20:77:6d:37:9a:de:95:18:
04:44:ea:c2:ae:d8:8c:b3:32:67:0d:2a:dc:00:b9:fb:fc:e4:
e7:07:6f:ab:79:1d:8f:d9:a0:d9:af:57:0e:5e:ff:53:75:66:
4e:1b:1e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:08:15 2026 by rpki-client