Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/GlFfMRViAE_WzmvcOQfQ3yoK9cc.mft
File: GlFfMRViAE_WzmvcOQfQ3yoK9cc.mft (raw, json)
Hash identifier: Yre+/E+ej+U6gNqkZwojks4pElk9asLgzEl+3xWvjVg=
Subject key identifier: 4A:8B:F1:FF:97:A6:46:40:00:CD:81:22:95:94:A5:59:96:F5:3C:89
Authority key identifier: 1A:51:5F:31:15:62:00:4F:D6:CE:6B:DC:39:07:D0:DF:2A:0A:F5:C7
Certificate issuer: /CN=1a515f311562004fd6ce6bdc3907d0df2a0af5c7
Certificate serial: 01A1DDCBA9E4D8DF175B955C15510CF2A9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFfMRViAE_WzmvcOQfQ3yoK9cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/GlFfMRViAE_WzmvcOQfQ3yoK9cc.mft
Manifest number: 82
Signing time: Sun 15 Nov 2026 06:01:14 +0000
Manifest this update: Sun 15 Nov 2026 06:01:14 +0000
Manifest next update: Mon 16 Nov 2026 06:01:14 +0000
Files and hashes: 1: GlFfMRViAE_WzmvcOQfQ3yoK9cc.crl (hash: pgb+1c+x9Muvjl9ccJGHVpU8QjQKDCKkJ0A1mIHC8LI=)
2: asBzVgLZ02ozFS-WwWgop4qtI0s.roa (hash: FYpoTfldSZHpBsVnN0R3027DuxogFmo1nX4UDqfcqlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/GlFfMRViAE_WzmvcOQfQ3yoK9cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/GlFfMRViAE_WzmvcOQfQ3yoK9cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFfMRViAE_WzmvcOQfQ3yoK9cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cb:a9:e4:d8:df:17:5b:95:5c:15:51:0c:f2:a9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a515f311562004fd6ce6bdc3907d0df2a0af5c7
Validity
Not Before: Nov 15 06:01:14 2026 GMT
Not After : Nov 16 06:01:14 2026 GMT
Subject: CN=4a8bf1ff97a6464000cd81229594a55996f53c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:93:e3:0a:5f:77:c4:75:53:11:21:8e:38:5a:
ae:63:84:3b:c8:03:98:fb:d2:f0:97:36:16:24:2f:
99:6e:bf:ba:fc:2a:60:6d:5f:7b:dc:a0:57:4e:64:
a6:5f:37:69:7b:a5:6d:b7:76:9c:1d:91:8a:d9:e3:
4b:24:7a:b0:47:39:e2:35:68:25:b4:37:38:18:d1:
e3:27:0d:d8:94:21:e0:c3:c5:a1:0d:15:be:33:ff:
5e:ad:35:f3:09:e3:bf:8a:11:1f:87:09:9f:51:43:
fa:fb:04:5d:54:a9:3d:80:00:a5:a6:e7:54:12:f6:
fd:f1:57:0f:b6:d8:3b:cc:7b:3d:02:67:da:ec:51:
95:d5:b9:17:3b:de:d6:21:84:a9:ed:28:a6:3c:ed:
0d:4f:a3:1b:e2:04:5b:c1:54:35:f1:01:18:77:e8:
71:c6:57:40:04:a6:45:f2:13:3f:a9:19:53:c9:62:
38:26:7c:34:ef:46:ed:37:f9:e7:1b:40:4c:44:25:
fd:1f:68:f8:a3:bd:11:32:6b:92:6c:43:71:ee:f8:
0b:a6:52:73:ae:16:7d:0d:f9:05:05:6b:7c:87:75:
d7:10:14:29:05:01:b4:2b:6f:c1:c3:89:c6:4c:b1:
9e:9d:f7:54:f6:22:21:2c:21:66:c0:0a:62:f2:80:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8B:F1:FF:97:A6:46:40:00:CD:81:22:95:94:A5:59:96:F5:3C:89
X509v3 Authority Key Identifier:
keyid:1A:51:5F:31:15:62:00:4F:D6:CE:6B:DC:39:07:D0:DF:2A:0A:F5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFfMRViAE_WzmvcOQfQ3yoK9cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/GlFfMRViAE_WzmvcOQfQ3yoK9cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/cab51f-8fd4-41f7-8f13-a372fba696d3/1/GlFfMRViAE_WzmvcOQfQ3yoK9cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d7:44:83:5a:2c:cc:65:ef:d4:28:55:62:1b:7e:e7:16:fd:
0f:08:3d:4c:39:1c:32:29:dc:83:03:c7:7d:d4:a0:10:67:0a:
5c:3e:68:17:0b:d5:9a:6b:ab:3d:20:ab:6f:5f:83:34:c5:92:
2a:9f:3a:26:96:22:ec:80:87:ad:a8:34:2b:2c:3b:f4:63:9f:
07:80:85:5f:7f:10:82:4a:3b:15:85:1e:85:b6:a0:03:8f:46:
a6:ec:64:46:e3:46:ce:9c:8e:bc:23:f3:c3:12:6e:89:bd:6b:
a9:85:62:c4:85:23:d9:35:15:da:02:e5:8b:72:ae:69:ec:d6:
03:41:bb:f0:43:12:86:13:b3:a3:3d:fa:aa:5a:cd:1b:b6:86:
9f:19:d9:28:d8:a0:ac:38:02:ca:a1:26:31:43:17:9b:7c:b0:
33:78:df:db:33:c1:69:f9:e6:31:a7:14:99:1b:c5:f5:c8:05:
45:97:e7:74:0c:56:42:d6:e0:a5:3b:b0:9a:e8:6b:38:6f:d4:
9c:20:b9:b7:9f:6f:59:1a:fd:3a:91:b7:d6:03:32:ea:02:b3:
de:19:6a:86:85:ee:18:71:d4:e5:b7:3f:6b:a7:9f:5e:20:33:
39:a9:90:e8:bf:7f:aa:b9:98:87:30:a0:9e:49:14:0a:d3:1f:
5b:e4:eb:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdy6nk2N8XW5VcFVEM8qmyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNTE1ZjMxMTU2MjAwNGZkNmNlNmJkYzM5MDdkMGRmMmEw
YWY1YzcwHhcNMjYxMTE1MDYwMTE0WhcNMjYxMTE2MDYwMTE0WjAzMTEwLwYDVQQD
Eyg0YThiZjFmZjk3YTY0NjQwMDBjZDgxMjI5NTk0YTU1OTk2ZjUzYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpPjCl93xHVTESGOOFquY4Q7yAOY
+9LwlzYWJC+Zbr+6/CpgbV973KBXTmSmXzdpe6Vtt3acHZGK2eNLJHqwRzniNWgl
tDc4GNHjJw3YlCHgw8WhDRW+M/9erTXzCeO/ihEfhwmfUUP6+wRdVKk9gAClpudU
Evb98VcPttg7zHs9Amfa7FGV1bkXO97WIYSp7SimPO0NT6Mb4gRbwVQ18QEYd+hx
xldABKZF8hM/qRlTyWI4Jnw070btN/nnG0BMRCX9H2j4o70RMmuSbENx7vgLplJz
rhZ9DfkFBWt8h3XXEBQpBQG0K2/Bw4nGTLGenfdU9iIhLCFmwApi8oBXNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqL8f+XpkZAAM2BIpWUpVmW9TyJMB8GA1UdIwQY
MBaAFBpRXzEVYgBP1s5r3DkH0N8qCvXHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xGZk1SVmlBRV9Xem12Y09RZlEzeW9LOWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jYWI1MWYtOGZkNC00MWY3LThmMTMt
YTM3MmZiYTY5NmQzLzEvR2xGZk1SVmlBRV9Xem12Y09RZlEzeW9LOWNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9jYWI1MWYtOGZkNC00MWY3LThmMTMtYTM3MmZiYTY5NmQz
LzEvR2xGZk1SVmlBRV9Xem12Y09RZlEzeW9LOWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNdEg1os
zGXv1ChVYht+5xb9Dwg9TDkcMincgwPHfdSgEGcKXD5oFwvVmmurPSCrb1+DNMWS
Kp86JpYi7ICHrag0Kyw79GOfB4CFX38Qgko7FYUehbagA49GpuxkRuNGzpyOvCPz
wxJuib1rqYVixIUj2TUV2gLli3KuaezWA0G78EMShhOzoz36qlrNG7aGnxnZKNig
rDgCyqEmMUMXm3ywM3jf2zPBafnmMacUmRvF9cgFRZfndAxWQtbgpTuwmuhrOG/U
nCC5t59vWRr9OpG31gMy6gKz3hlqhoXuGHHU5bc/a6efXiAzOamQ6L9/qrmYhzCg
nkkUCtMfW+TryA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 12:32:04 2026 by rpki-client