Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json)
Hash identifier: vjOZomwnvJ6JPjxAka52668E45q4SrhW2PvnGTVyO54=
Subject key identifier: 60:CF:6B:54:98:FB:9E:CF:0C:17:E7:1C:87:77:0E:CA:2F:63:BE:66
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 019D265F7DD74231855A4ACFB4FA25BF0D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
Manifest number: 073C
Signing time: Wed 25 Mar 2026 19:01:25 +0000
Manifest this update: Wed 25 Mar 2026 19:01:25 +0000
Manifest next update: Thu 26 Mar 2026 19:01:25 +0000
Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: CcX02UNlCtqTqsKjdKdk35GqjtawQO21xGnxszhzLEc=)
2: ZYe946WWsJLWYqwE2jrnQ5CvbLs.roa (hash: YzJAKJVzdhVwg2Wfzuv11ahwmdOVCIuLQiQ88WgRMJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:7d:d7:42:31:85:5a:4a:cf:b4:fa:25:bf:0d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: Mar 25 19:01:25 2026 GMT
Not After : Mar 26 19:01:25 2026 GMT
Subject: CN=60cf6b5498fb9ecf0c17e71c87770eca2f63be66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:50:97:f8:e5:e6:17:bb:2c:69:f9:de:aa:e8:
ee:cb:71:cd:66:f2:a7:ba:24:d4:1c:c1:89:3b:f2:
a9:3c:57:42:3d:67:1a:df:46:d4:a4:3c:0a:f3:0e:
d2:a5:aa:62:cb:fd:4c:a5:84:8c:69:1a:3a:91:58:
60:33:c2:85:0f:f2:b5:00:77:8d:ed:ab:da:08:bf:
db:68:5a:f2:06:a0:32:87:7d:62:e2:c3:be:07:80:
53:7f:23:56:df:b5:02:7f:bd:56:c4:2a:3d:f2:f9:
98:66:f7:28:db:f2:1b:0c:72:2e:cb:e8:6f:38:30:
d7:4c:88:cf:45:1e:04:e2:86:e0:e8:63:94:5a:50:
ca:c1:eb:bc:88:9b:d1:6f:08:93:3d:db:b6:c6:3a:
ea:cb:4f:a8:a3:2f:c9:64:26:3e:b8:bc:80:5b:a9:
95:29:ba:1a:3b:dc:23:e0:9e:75:b8:dc:40:d6:c5:
8f:2c:09:b0:b9:35:89:d7:2e:0e:f6:d0:9d:1f:38:
1d:a2:39:84:32:34:48:d5:ec:3b:1a:53:3e:1c:3f:
6d:e5:d7:13:f6:7a:51:f4:99:23:20:11:29:72:9a:
89:8a:62:d5:0e:35:c3:7b:b9:eb:4b:64:29:91:4b:
ed:4d:4b:5d:58:2b:2d:78:65:7d:e6:2f:f2:e5:a4:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CF:6B:54:98:FB:9E:CF:0C:17:E7:1C:87:77:0E:CA:2F:63:BE:66
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:47:59:5f:dc:b7:f1:77:0b:4a:80:16:f8:2c:e4:dc:f1:67:
e9:87:fa:ab:d2:e3:54:ad:be:a4:f7:81:9c:1a:55:a6:14:4a:
aa:df:c5:31:06:17:6f:98:8d:79:46:6a:4a:6d:ed:fd:b6:61:
c1:52:29:b2:16:bc:3a:c5:c7:1c:7c:a7:80:a9:16:29:a4:ac:
84:d7:2c:25:9c:90:a3:1a:e4:d7:c8:cc:8d:f4:86:04:cf:b0:
75:8f:6d:ba:0f:5b:09:a2:29:cf:61:c3:9a:d7:e1:96:c9:d9:
a3:0a:7a:9b:c3:c0:5c:2b:df:99:11:38:8c:e9:9c:0e:6c:42:
75:34:43:b4:7e:13:62:77:6e:ad:60:fc:f6:9b:d6:1c:c4:21:
bc:3e:00:ec:f2:a0:f1:a7:b4:a5:ae:b1:25:14:4e:56:c4:83:
31:2f:37:ef:ea:a2:be:29:7b:d4:a0:27:19:b0:ef:2a:2c:73:
94:8a:1c:61:76:5a:be:76:3c:13:06:85:94:57:8d:95:57:cf:
b0:80:d1:81:5b:b2:33:9a:fa:bb:50:66:01:ab:d7:bf:e5:97:
be:fc:cf:67:c0:99:18:62:9b:c7:b7:32:31:c8:59:91:7e:e6:
97:0e:90:ad:17:78:08:2f:3a:1f:ae:21:40:b0:09:aa:b7:c7:
a2:fe:10:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:54 2026 by rpki-client