Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File: 1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier: 5GkS3JRenV94cGU8ne8j1egrQqwsRcJuc9wpLeeIHZA=
Subject key identifier: 78:37:76:5A:50:1D:C8:9C:90:2E:BE:A1:1A:50:4E:59:2E:43:A7:B9
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 019D2704247B2633DCA3DD6C6DD06213A93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number: 081D
Signing time: Wed 25 Mar 2026 22:01:15 +0000
Manifest this update: Wed 25 Mar 2026 22:01:15 +0000
Manifest next update: Thu 26 Mar 2026 22:01:15 +0000
Files and hashes: 1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: JDLpJUwZtmNj+0MLzYGl1cXzUz61SGgnLgQBjsHMjvo=)
2: GpK1qyRmRdQTMv9rJuBvrLPAPCA.roa (hash: 6pjGKy0zNDxK6EGW3iKdJRBjUTjPWde8CyQwLbHqWIc=)
3: iTaV7elHXW3QykhmVM8s9S75IWo.roa (hash: I33OFLbbVy5ULnfJGK6BAuTPAY6ngasZNHORp7xBvjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:24:7b:26:33:dc:a3:dd:6c:6d:d0:62:13:a9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Mar 25 22:01:15 2026 GMT
Not After : Mar 26 22:01:15 2026 GMT
Subject: CN=7837765a501dc89c902ebea11a504e592e43a7b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b8:64:70:4b:87:01:2c:ad:6a:a7:c0:90:92:
4b:11:95:32:02:24:2d:88:0e:49:5d:c6:46:95:b0:
40:64:36:d2:a3:6d:c4:f3:85:b7:f8:b6:dd:53:34:
9e:b4:23:b2:52:23:14:b4:dd:2d:8f:d5:96:47:f6:
fa:ee:df:5a:03:8a:e1:d7:50:5e:78:3b:95:2a:79:
c4:f1:4f:7a:de:ee:78:c0:27:e3:8b:57:50:7a:c1:
dc:fc:57:e5:f9:6e:1b:29:25:35:ba:e8:21:fa:f4:
1e:a6:46:e2:f1:29:38:c3:1e:d7:40:8c:a2:01:27:
db:81:9a:2d:3a:ed:52:61:d3:01:ba:34:92:6e:2b:
6a:a4:17:63:5f:f0:63:34:8e:8a:cb:b9:e2:c1:96:
d7:44:fd:fe:25:f5:4a:9f:8f:69:46:d9:8f:ae:53:
af:6b:95:94:d4:2e:4b:5e:42:f4:6d:58:6e:e4:b9:
79:1c:e7:17:4c:e9:cb:75:fa:de:e9:57:a9:82:02:
b7:ed:ce:59:c0:7b:3f:fa:d7:0a:ee:f0:64:a6:a2:
bd:f8:a4:59:c8:c1:18:aa:67:24:3c:aa:92:bf:9c:
5a:35:45:14:03:92:39:1e:43:32:45:86:ad:0d:3a:
67:0f:59:70:66:6f:02:cc:3d:34:ba:4f:82:e6:08:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:37:76:5A:50:1D:C8:9C:90:2E:BE:A1:1A:50:4E:59:2E:43:A7:B9
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:f5:d6:04:05:ee:6e:d6:42:f5:9a:a5:a2:48:51:9b:f4:4d:
4c:a2:65:8d:d9:f6:62:ab:48:62:77:54:f0:8f:b6:b7:9e:98:
53:c8:a8:21:f6:cb:17:29:36:65:02:f6:c9:5a:84:b6:85:51:
cb:e6:77:a3:8f:2e:8e:73:f8:7a:18:a5:4e:5c:9c:86:55:0a:
ef:14:8b:e5:a1:f0:f7:9e:a1:0c:55:46:ca:a7:d6:9c:90:e5:
93:a9:a5:a8:77:09:3a:4c:48:cb:11:62:2b:90:32:5c:fc:2d:
27:88:e2:10:85:26:23:48:b2:bb:d4:6b:7f:03:57:ae:0b:60:
96:e4:e0:8c:f7:0e:a5:86:8d:ff:bc:08:ed:1a:c1:27:d6:d2:
7a:9e:eb:63:f6:88:73:f0:1b:b3:2b:03:3d:2e:58:2e:4c:76:
52:08:17:00:c6:67:ca:4a:a7:3c:71:d0:e4:1f:23:03:c2:a3:
c2:10:c7:0e:1b:8d:50:1b:20:73:ec:87:6b:49:c0:0d:6a:f3:
d3:ff:36:6a:6e:cb:c0:09:d3:b9:a4:c2:73:7c:99:a9:0c:fb:
55:5a:74:ec:d0:1d:ce:4f:ae:19:06:aa:f0:46:a2:65:66:bc:
9a:d9:6e:c9:f8:f0:31:57:75:19:da:6e:99:b9:18:e7:2a:22:
82:cf:0c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:09:18 2026 by rpki-client