Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File: 0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier: A9DbH3XSxSltZJFFDBnokLWn8H6uDZYQZh9LrC+S8wg=
Subject key identifier: D8:42:27:AA:6F:DE:2B:8C:98:AA:08:B3:87:34:E0:AB:F8:9E:6D:23
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial: 019D25BA34C917A94D57658F8D4E3A2E23DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number: 0456
Signing time: Wed 25 Mar 2026 16:00:53 +0000
Manifest this update: Wed 25 Mar 2026 16:00:53 +0000
Manifest next update: Thu 26 Mar 2026 16:00:53 +0000
Files and hashes: 1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: YiFDNAV1EpCJckRSJMWJlI13MBbJMkbPJq2jr3XPRmc=)
2: FwyHYSFHDsnHe13-teMRd2Fwsok.roa (hash: HzeLlPvVaerPbRc2Uu0sKiJSiZNPtG93MnAwRwanKNY=)
3: NrghsoBul7tbolTWF8ZamRT2aQc.roa (hash: hJwEiMp115u5I16JHTrfollMknUTcgmFLYKBs/fIj04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:34:c9:17:a9:4d:57:65:8f:8d:4e:3a:2e:23:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Validity
Not Before: Mar 25 16:00:53 2026 GMT
Not After : Mar 26 16:00:53 2026 GMT
Subject: CN=d84227aa6fde2b8c98aa08b38734e0abf89e6d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:47:87:ac:be:56:1f:27:b0:d1:91:b0:1b:
b2:87:2f:6a:03:40:11:e4:76:4f:74:4f:ba:39:22:
2f:ed:e4:15:b7:ed:68:3b:2c:45:93:7a:8b:36:f9:
5c:da:e3:17:93:c0:73:21:2a:2f:3f:47:bb:81:b2:
37:59:e9:88:71:3e:88:80:da:ca:1a:0e:5e:90:e5:
cb:f7:38:92:b7:c1:2c:ad:99:bf:dd:53:81:ae:4c:
09:31:11:d8:15:a5:bb:03:11:44:32:98:ce:0e:c0:
8b:02:8d:7d:16:d8:66:32:99:70:a4:4c:81:4b:00:
d1:f1:68:4f:71:d3:85:0e:32:d5:76:0f:c1:a6:19:
6d:f7:2d:1e:00:50:b5:3d:21:41:2f:9f:39:e2:c2:
f3:4f:dd:ba:07:fb:7c:ff:23:bb:57:e9:3d:2c:ed:
4d:0b:ab:dd:83:6c:9a:e9:6b:f9:13:28:19:ff:74:
69:2e:96:f3:34:9c:16:e1:58:81:d9:cc:5f:99:10:
d8:66:14:48:8d:f9:49:69:ba:59:4a:e1:87:20:7d:
9a:14:e8:46:af:5a:2e:92:6b:0c:5f:ff:b4:79:5d:
77:ea:e0:ee:33:da:84:37:99:5b:6b:28:eb:09:70:
62:14:a7:50:87:aa:01:83:31:16:a6:27:ad:01:78:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:42:27:AA:6F:DE:2B:8C:98:AA:08:B3:87:34:E0:AB:F8:9E:6D:23
X509v3 Authority Key Identifier:
keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:c4:81:4a:7d:82:4e:01:85:29:40:c9:e2:a0:c7:14:b4:d8:
4f:13:2b:fc:1c:36:13:54:2a:3d:0f:7e:ee:a3:c1:da:5c:22:
f3:5d:66:6c:41:f9:20:6b:98:d5:99:67:de:8c:bc:80:07:a5:
bf:cf:98:e1:8f:ff:c9:7e:26:f4:4f:01:f4:35:e2:74:88:f8:
32:e4:39:42:ff:7c:06:a7:9d:e1:e8:06:36:84:e0:04:43:96:
33:c7:01:aa:16:70:37:6d:b7:25:cd:ac:0d:ca:26:4e:4f:12:
54:f6:05:ed:08:eb:61:d7:14:15:98:0f:93:d0:f7:fd:e4:3e:
0e:3f:95:d3:eb:0f:6a:a6:db:0a:c9:b6:a4:58:ae:7a:52:9c:
7b:24:7f:b7:b6:d1:65:e6:ff:29:c5:34:68:7a:f0:79:62:42:
cd:4c:01:d7:79:6b:68:9b:6f:19:0d:b0:68:17:c8:06:dd:32:
cf:21:46:02:2d:0d:d0:95:06:1b:4c:a1:ba:fa:13:1d:77:38:
10:1f:7e:6e:a2:4f:c6:b5:ba:e0:ef:52:3b:58:27:48:a0:94:
31:23:57:63:60:10:e7:80:7b:dc:50:c1:e8:38:c3:bd:13:8a:
b5:cd:2d:a9:84:6c:6f:ee:03:e8:31:19:ac:2f:9b:e3:1f:08:
83:17:98:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:35 2026 by rpki-client