Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
File: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json)
Hash identifier: mlnYV7xV5zZ9cSSYIUE32XuRXQAJVILMBYbIWqXAlTY=
Subject key identifier: 06:B8:51:99:14:C9:C7:48:F8:70:BE:6E:88:F7:AC:CA:B8:FA:36:66
Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
Certificate issuer: /CN=1a5763d41bb533558a8520de5a96eb2258068941
Certificate serial: 01A0DDCDF6DED13A9C134E5F1C8723632488
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
Manifest number: 15B7
Signing time: Sat 26 Sep 2026 13:00:57 +0000
Manifest this update: Sat 26 Sep 2026 13:00:57 +0000
Manifest next update: Sun 27 Sep 2026 13:00:57 +0000
Files and hashes: 1: CXNncTCsuwzDylA9XErMW-s33Aw.asa (hash: 9FVo2YChLRpaZGyr4m7XQZjIsysXpsuWXIuW+MOA+bo=)
2: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: nEv3z8JBjGMCByibSL8H7LZAXTrqcLg1IjYq/LU/NWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:cd:f6:de:d1:3a:9c:13:4e:5f:1c:87:23:63:24:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941
Validity
Not Before: Sep 26 13:00:57 2026 GMT
Not After : Sep 27 13:00:57 2026 GMT
Subject: CN=06b8519914c9c748f870be6e88f7accab8fa3666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:33:64:4a:bd:30:36:f4:ea:31:3e:72:e0:
a9:87:62:0c:bb:a6:26:9b:70:a2:07:c1:5d:94:ef:
b9:d9:a1:e3:4e:c6:1c:75:cd:f2:18:e7:7a:49:9d:
3f:c5:1b:66:db:28:67:16:d5:b4:8a:dc:bb:8f:57:
90:38:11:d8:10:0a:c7:e1:58:23:7b:ef:37:6e:ae:
81:19:5c:f6:86:b9:56:8b:e8:4b:03:25:bf:9f:44:
9f:2d:83:6e:51:81:ac:f5:33:cb:a2:b7:c7:d7:18:
57:4e:c4:8b:58:68:8d:5b:31:4c:4f:63:34:cb:7a:
f0:ee:2e:18:8f:03:e3:4f:93:df:63:15:49:00:f6:
28:38:ce:bd:09:12:21:a6:4a:26:9a:0a:dc:88:65:
d5:c7:62:aa:6c:f6:3a:5c:1f:da:b8:3c:5a:69:eb:
9f:e9:4b:f1:62:e6:a7:d4:8f:cb:70:45:ae:4f:ee:
93:d4:95:e3:75:0b:a3:1a:3b:32:4a:9b:21:b0:9a:
ef:14:c1:a7:ad:4a:85:7e:e5:8b:91:05:a8:2a:58:
ee:dd:dc:60:e7:b4:af:3c:2d:40:d8:c6:ab:4b:9d:
ac:a4:20:68:c9:3f:c6:73:ce:28:31:2b:e8:9b:61:
5e:b2:8e:89:aa:f2:d4:c3:26:13:92:a7:e3:98:2d:
78:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:B8:51:99:14:C9:C7:48:F8:70:BE:6E:88:F7:AC:CA:B8:FA:36:66
X509v3 Authority Key Identifier:
keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1e:03:25:93:98:41:53:22:13:a8:09:20:b1:52:ba:a6:55:
2d:a5:b0:e4:0b:c7:5e:65:8e:04:36:80:cb:b7:ed:8e:11:26:
c2:6d:d6:89:5b:45:c1:97:28:2b:22:cc:79:8e:91:fe:d6:f2:
ac:6c:ad:4e:10:a4:0a:a7:90:3d:b0:03:6e:26:9f:4f:5c:95:
86:6f:df:51:06:2f:70:77:9e:1a:52:bf:2b:1a:37:fa:da:bf:
12:43:c8:2f:0f:65:22:69:9e:60:8b:42:b1:6e:0d:01:9a:94:
4e:08:a8:30:00:d4:f1:1a:18:ac:d5:f8:4b:ac:5d:34:90:38:
dd:b3:79:fd:57:9d:af:67:c2:ee:f9:79:fa:f5:f4:99:b5:c4:
60:0c:8d:20:06:25:39:41:12:54:79:d0:ee:36:31:f7:b6:10:
55:41:fb:a6:65:57:2c:fb:34:0d:7f:5a:85:71:6d:d3:b6:59:
af:0e:02:ab:81:e2:89:1e:ca:b5:ac:28:89:34:a0:eb:89:30:
df:7c:b4:6a:9d:94:b6:b9:0d:38:a1:78:ed:58:50:65:f5:25:
aa:5f:f6:25:f2:51:e7:e1:83:4e:da:f0:d7:d6:25:b4:f2:c5:
ea:bc:79:da:64:da:42:7c:70:f8:73:7a:fb:4f:e2:fa:a6:e1:
54:7f:5e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:46:52 2026 by rpki-client