Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
File: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json)
Hash identifier: xPKjkTUH+JszsfTAXbaGJ/kJYMZDZB84jHLHloPWAhw=
Subject key identifier: B9:9F:BA:4C:7E:5F:71:C9:9C:61:26:03:43:A6:A2:26:A6:34:C2:6A
Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
Certificate issuer: /CN=1a5763d41bb533558a8520de5a96eb2258068941
Certificate serial: 019D25BAA48393155C8A2E79DAF12BAF28F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
Manifest number: 13CA
Signing time: Wed 25 Mar 2026 16:01:21 +0000
Manifest this update: Wed 25 Mar 2026 16:01:21 +0000
Manifest next update: Thu 26 Mar 2026 16:01:21 +0000
Files and hashes: 1: CXNncTCsuwzDylA9XErMW-s33Aw.asa (hash: 9FVo2YChLRpaZGyr4m7XQZjIsysXpsuWXIuW+MOA+bo=)
2: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: +xeV1SNC+MXzQ80m/TQn6JJ/ci7xxTL2Zk+P0OF0uC0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:a4:83:93:15:5c:8a:2e:79:da:f1:2b:af:28:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941
Validity
Not Before: Mar 25 16:01:21 2026 GMT
Not After : Mar 26 16:01:21 2026 GMT
Subject: CN=b99fba4c7e5f71c99c61260343a6a226a634c26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:9c:f5:a5:d4:53:ac:6a:7f:f8:c4:fc:42:
f0:97:d9:29:17:df:26:f7:1e:c2:2d:45:f2:2b:35:
4d:30:63:b1:b7:d8:15:fd:70:88:47:52:55:d0:1d:
5d:31:8d:05:8f:90:b5:6e:13:7b:13:6b:c4:72:6c:
3b:2d:d7:9c:18:69:83:2d:53:34:c8:b4:6e:a5:58:
cb:95:f1:b7:79:56:66:50:dd:b6:b2:04:9f:13:68:
87:b1:81:0b:44:28:99:6f:84:9f:bd:45:10:63:dc:
7c:f2:15:7b:9c:08:ee:07:87:16:8c:55:08:00:b8:
99:79:b3:29:ed:bb:da:cc:a0:e4:6a:9d:4c:0b:43:
8a:1e:0e:3c:d4:88:57:a0:94:a0:34:e0:79:2a:24:
8c:dd:da:91:2c:c9:ca:ec:63:ef:0d:8a:e6:dc:4c:
30:13:29:4d:d9:75:d9:fd:bd:c7:f8:e7:b3:94:2e:
42:2a:77:86:c4:dc:86:38:9b:c9:5d:07:b2:04:e6:
66:20:b7:58:7b:97:95:1c:09:11:c3:0f:0d:b2:e6:
38:8b:a4:46:86:05:f8:29:3f:88:a7:91:6d:11:7a:
7c:93:a9:6b:bc:2e:0f:49:23:68:50:d0:fb:da:d4:
aa:f7:9b:22:a2:a9:77:f7:32:cf:0a:1e:e2:67:7a:
93:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9F:BA:4C:7E:5F:71:C9:9C:61:26:03:43:A6:A2:26:A6:34:C2:6A
X509v3 Authority Key Identifier:
keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a2:63:aa:b6:ba:78:98:18:76:e0:71:b5:f9:60:fd:db:85:
ba:d3:c6:e8:95:ae:b0:a3:a7:ab:c5:1a:a5:52:20:d2:3d:fb:
03:d1:5a:2c:9e:e5:12:e6:c5:5c:86:25:e1:fd:4c:14:89:d5:
6a:dc:02:8d:c0:62:d6:2d:90:bd:d9:4d:47:56:2c:af:3d:4d:
56:95:31:c3:d8:04:d1:41:bf:34:34:00:f0:39:4b:63:1c:af:
27:e6:a1:83:14:d6:57:94:ce:e6:50:b4:83:7c:3b:33:97:a0:
55:0a:0c:98:00:c6:51:06:a2:fd:e6:08:49:5d:6d:db:f2:ec:
81:97:0c:48:a9:5c:0b:e1:e7:5b:e0:42:15:5c:ad:99:4c:62:
0f:09:39:a1:f4:c5:2e:a4:19:a0:a7:6f:eb:e7:97:99:b5:cb:
ae:d7:14:86:11:9d:08:83:83:ff:b3:a8:5f:40:0d:d8:17:71:
0c:0e:0f:6f:fd:4b:03:40:48:d4:de:d2:ba:80:b0:66:76:ca:
36:5d:89:db:92:bd:ab:7d:9a:14:c7:37:6a:dd:a9:a7:ee:e6:
72:8d:cb:ea:2b:7c:5d:54:0e:b3:e6:31:2c:79:7c:0a:b9:5b:
75:7a:59:00:e2:49:6d:dc:2a:c7:45:e5:95:f6:0e:59:88:a7:
3e:32:8d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:40:53 2026 by rpki-client