Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
File: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json)
Hash identifier: cBcTh+b7xWkGTnCaV8zEbUogtiBa2xceuoX+4nRtqbI=
Subject key identifier: 94:0F:D9:BF:CB:CD:AA:FB:E0:2A:69:4D:5B:FF:F7:75:43:77:F1:02
Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
Certificate issuer: /CN=1a5763d41bb533558a8520de5a96eb2258068941
Certificate serial: 019E1EDA0EA64181E0719A7F2ABBB8A608E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
Manifest number: 144B
Signing time: Wed 13 May 2026 01:01:07 +0000
Manifest this update: Wed 13 May 2026 01:01:07 +0000
Manifest next update: Thu 14 May 2026 01:01:07 +0000
Files and hashes: 1: CXNncTCsuwzDylA9XErMW-s33Aw.asa (hash: 9FVo2YChLRpaZGyr4m7XQZjIsysXpsuWXIuW+MOA+bo=)
2: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: YLUbogws8IK5iHiDoEHjNZyC+blPI61G+QaAzQ3he3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:0e:a6:41:81:e0:71:9a:7f:2a:bb:b8:a6:08:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941
Validity
Not Before: May 13 01:01:07 2026 GMT
Not After : May 14 01:01:07 2026 GMT
Subject: CN=940fd9bfcbcdaafbe02a694d5bfff7754377f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:93:01:bb:7f:0d:14:60:c9:72:3d:e4:01:8b:
20:03:39:21:73:a6:6a:bf:73:71:ef:24:c4:13:19:
b0:ca:92:70:5d:50:33:9f:5d:f1:6e:41:1d:3a:0f:
52:8e:e5:6b:a2:1b:c8:c0:59:ab:64:0e:6d:5c:89:
90:63:e5:8b:da:32:04:1a:48:5d:fe:07:77:4d:1b:
00:73:fb:30:af:c2:cd:ef:59:c4:e9:34:75:7b:de:
dc:50:f7:ef:46:c0:5f:18:f6:4d:30:a3:c9:d1:41:
0b:e0:7c:bd:f0:0c:9a:2f:f4:3d:88:7d:db:f9:05:
38:b3:48:ba:ed:85:7e:df:2e:e4:aa:50:51:e5:b8:
43:57:87:81:58:d2:84:59:80:3a:a9:bf:ee:cc:fb:
7b:b4:46:ef:ea:80:2d:3b:f9:5f:4e:0e:e2:08:4b:
0d:d3:8e:bd:68:0e:43:6a:27:59:d2:4e:5b:ae:6d:
24:63:5c:b8:0e:13:3a:49:7c:5a:b1:8e:9c:11:18:
f4:2b:fc:2f:ee:8c:dc:9d:ba:a0:cc:53:ba:b2:84:
70:1a:9a:4d:7d:cb:14:a0:1b:88:9f:6c:5f:6d:5d:
f3:61:c0:e5:99:1e:5b:b1:06:88:7d:6e:3d:14:b2:
52:ad:5a:ec:11:62:5d:0f:cd:30:58:be:31:57:88:
29:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:0F:D9:BF:CB:CD:AA:FB:E0:2A:69:4D:5B:FF:F7:75:43:77:F1:02
X509v3 Authority Key Identifier:
keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f7:cf:7b:2c:0c:c3:1c:8b:4d:da:89:ca:ef:f0:94:95:fa:
db:55:69:0a:e1:d4:61:d8:87:d9:af:dc:18:c5:f3:ab:69:2e:
8c:e3:27:97:bd:ae:1a:74:67:a7:26:e4:d7:49:d1:1c:96:88:
ff:99:5c:12:d3:b3:11:f9:8f:35:fb:10:38:3f:dc:e6:f1:8f:
64:41:18:dd:09:fc:b9:6f:6e:a7:59:37:af:7d:99:19:05:4d:
c5:d8:98:de:c4:0b:33:2d:7f:6f:26:5d:94:6f:19:47:11:99:
14:2e:ee:9e:1e:48:bd:78:7c:da:d2:18:65:77:2b:7f:0e:4d:
bf:e6:af:d1:72:5a:be:b9:94:b3:be:ba:18:41:36:85:f1:5e:
0a:3f:30:e1:cc:40:7c:e6:8c:a4:8b:35:c9:5f:eb:00:29:f3:
c1:4c:3b:25:05:84:d3:c9:1c:89:13:3f:01:b0:93:d4:69:38:
c4:de:eb:c2:60:66:67:a6:09:21:45:22:ca:61:b0:5e:d3:cb:
c7:8e:6d:21:0b:55:16:c5:77:b0:bb:0f:dd:6d:3d:16:fd:34:
03:71:27:10:e8:7a:f4:43:5f:68:39:b8:57:c7:0a:57:42:aa:
bf:8f:3a:cd:16:10:80:e8:48:6e:4e:a2:33:2e:d9:cb:87:08:
65:61:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:22:02 2026 by rpki-client