Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
File: Glyq86CZO3auE-EZE22_AGlpiRE.mft (raw, json)
Hash identifier: +CgQos4fMRodP75tBddD/S1bcX166Yy00kDFxOBozfo=
Subject key identifier: AD:FF:EA:94:08:B7:81:3C:FB:F7:65:64:A6:92:A9:46:1A:68:7C:C6
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Certificate issuer: /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial: 019D2996D83DF8E7EB799D2994EBA26C054E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
Manifest number: 09CA
Signing time: Thu 26 Mar 2026 10:00:44 +0000
Manifest this update: Thu 26 Mar 2026 10:00:44 +0000
Manifest next update: Fri 27 Mar 2026 10:00:44 +0000
Files and hashes: 1: Glyq86CZO3auE-EZE22_AGlpiRE.crl (hash: HKrqRkv254jh5leyFMfeXaYsMaLq7wJx8NuiVmkjnGY=)
2: MR4tadWQqqW0E_JHwLfifWepFWQ.roa (hash: mUSw2oO1jY6CqzjCmRhvxhRtn1BibguKjyUPW0J26ls=)
3: cJL4Mgp1SQWUAEiREcdB0I-sJWQ.roa (hash: t7NhiF+NyV27XscI6RzA4LqkqVZugOUpSYy9Otwnrn8=)
4: m8Q5zJZ_AxfjsiGl8q1Fy-V2YKU.roa (hash: gmO3hyi9CFxj4bGHRGh2gH5C4A1U0mvXeUP9On396ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:d8:3d:f8:e7:eb:79:9d:29:94:eb:a2:6c:05:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Validity
Not Before: Mar 26 10:00:44 2026 GMT
Not After : Mar 27 10:00:44 2026 GMT
Subject: CN=adffea9408b7813cfbf76564a692a9461a687cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:56:29:e6:1b:c0:be:97:d4:33:09:9d:d5:
c7:7f:8b:3d:44:3d:da:68:63:9c:5b:c6:5b:f6:ce:
0c:98:86:38:3d:58:f4:de:bb:7d:b3:38:0c:ee:63:
9a:28:9b:b3:29:31:7c:45:49:c9:a3:a1:9a:60:0e:
c8:02:26:f9:40:7c:13:83:0e:cb:0b:84:41:4e:e2:
6e:96:44:89:32:4a:6d:ee:15:88:79:f1:cb:ff:25:
f8:07:09:c3:d6:0d:d4:c0:cf:d7:06:db:e5:ac:75:
70:db:f9:c4:77:2f:c9:dc:09:c5:8b:53:48:7a:34:
60:6d:70:09:93:44:78:94:a1:54:89:cd:f2:23:fb:
52:fb:de:35:5e:01:a5:15:3c:2b:d3:5a:c2:10:d3:
c2:c2:7c:b9:56:34:96:c1:74:0a:00:71:ea:27:29:
25:d8:7c:db:a9:c7:89:e4:f5:a3:88:6c:5b:25:42:
1e:7a:3e:19:89:1c:d7:cf:a7:c4:d6:5f:32:53:f8:
8c:b8:c0:5c:3b:20:1e:e7:6b:f9:1e:3e:86:4d:af:
71:e5:75:e6:f0:54:d4:b2:0a:74:8d:cf:15:d8:73:
6d:b0:e2:55:91:11:5d:ca:cd:e1:c7:e7:79:69:22:
1e:bf:fd:2d:87:a6:d5:04:6b:d3:0b:91:6f:74:31:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FF:EA:94:08:B7:81:3C:FB:F7:65:64:A6:92:A9:46:1A:68:7C:C6
X509v3 Authority Key Identifier:
keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1a:c4:8c:23:55:a8:18:c4:b9:f6:0a:93:50:10:4c:0d:4f:
fb:e1:a5:c5:8d:79:ba:d9:e7:f1:18:34:09:e8:ff:4a:06:2b:
5d:f9:86:c2:9d:e7:b3:38:75:b3:46:dd:bd:54:d3:46:f5:a9:
67:8f:b6:88:40:59:4e:de:84:94:07:11:58:d4:9d:db:47:03:
9b:b7:f8:e6:ce:39:2f:cd:e2:93:19:57:ad:7f:b3:8f:e8:20:
ac:44:4a:c3:c3:97:0d:64:80:2b:b9:c1:02:ff:de:1a:c9:6f:
e1:de:28:87:cc:37:55:7f:d9:4f:1c:cc:10:bb:fa:ed:d1:6d:
61:51:de:4c:e0:72:c4:91:a5:12:c6:b5:88:c4:61:5b:53:d4:
fd:dd:6a:98:72:0f:15:b7:ee:87:bf:2a:7f:18:83:a8:fa:ea:
70:19:f6:80:ce:13:3e:ea:1c:44:14:f6:67:f1:a9:88:28:71:
a5:59:e0:1b:7f:a8:54:45:73:22:8b:f6:f5:4d:4d:a3:d4:c7:
35:d9:2a:a7:88:50:65:4b:5c:ec:63:79:67:db:68:f4:e5:7a:
63:55:62:15:51:ae:21:72:ac:f3:fd:e9:13:e9:08:ea:54:f4:
19:30:89:68:d5:d3:53:50:cd:8b:84:4c:b1:f5:9f:7d:3c:61:
92:64:a8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:30:55 2026 by rpki-client