Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
File: Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft (raw, json)
Hash identifier: HPnTYlQKSUXiowVDTD3hQXhiNn59XhFYvH6W6RHOe9o=
Subject key identifier: 33:F7:00:C9:21:A6:8D:09:82:BD:C3:0C:6D:71:EE:CD:4D:70:94:1C
Authority key identifier: 1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA
Certificate issuer: /CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
Certificate serial: 019D265F0867F2F54645E86B32C3C089C7AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
Manifest number: 12C4
Signing time: Wed 25 Mar 2026 19:00:55 +0000
Manifest this update: Wed 25 Mar 2026 19:00:55 +0000
Manifest next update: Thu 26 Mar 2026 19:00:55 +0000
Files and hashes: 1: Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl (hash: UzOK/gHYhjH1eerZ0/SoRTjkYCnQYWSXlYwlGdr+US8=)
2: w-zK3gICwu0tZ5BpaCsJ-LEyh_4.roa (hash: MaoF3Nxzc8V8R020ySbLtYOSWWBezqUdqr7TNLevqTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:08:67:f2:f5:46:45:e8:6b:32:c3:c0:89:c7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5b7d43bb4c83e7c7d97ce07543a96d74c69fda
Validity
Not Before: Mar 25 19:00:55 2026 GMT
Not After : Mar 26 19:00:55 2026 GMT
Subject: CN=33f700c921a68d0982bdc30c6d71eecd4d70941c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:ea:c9:61:06:00:16:5b:02:cc:04:03:8b:
88:dd:a2:6d:1c:a7:99:20:29:49:40:f2:f3:20:22:
1a:16:77:22:f4:c5:fa:11:85:a7:64:cc:39:f7:df:
6e:c6:63:1f:f0:07:a6:14:d4:b8:64:a8:17:63:ed:
0e:ef:cf:91:76:25:ab:1f:15:10:10:1b:e0:c5:eb:
be:58:7a:cf:91:57:b8:17:89:a7:ba:89:c9:d4:d8:
9d:63:1b:84:21:96:0a:c4:29:10:8f:6b:bc:bf:3c:
b6:30:fd:f2:47:df:8c:64:94:0c:1e:04:e6:89:cd:
52:95:9d:be:3f:0d:df:b5:63:ce:ae:53:8b:f7:35:
9a:e8:e8:7e:21:1d:7e:c9:c7:7a:90:31:79:78:c7:
ec:a4:17:85:95:c8:61:03:2e:10:aa:55:3c:ac:86:
89:40:2c:64:c3:a3:d0:50:32:9d:c7:d8:05:04:1c:
2f:59:f6:60:a8:0a:35:b2:c1:22:76:2b:17:24:35:
79:36:e1:84:1a:70:9d:eb:e0:51:ff:8f:e1:79:bc:
e8:90:79:d7:76:ba:33:36:d5:30:db:bb:a4:a2:1e:
63:83:89:cd:89:84:a8:25:0d:59:13:fe:cb:85:a4:
13:22:a2:bd:3e:51:a3:dc:39:1d:06:a7:2f:b2:b6:
00:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F7:00:C9:21:A6:8D:09:82:BD:C3:0C:6D:71:EE:CD:4D:70:94:1C
X509v3 Authority Key Identifier:
keyid:1A:5B:7D:43:BB:4C:83:E7:C7:D9:7C:E0:75:43:A9:6D:74:C6:9F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8ad64a-057f-472a-89b1-5eef024d9a92/1/Glt9Q7tMg-fH2XzgdUOpbXTGn9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ed:17:e8:91:ec:c3:66:cd:e4:26:8b:95:eb:09:c8:68:9f:
8b:2b:0c:b6:0f:cd:77:ca:95:71:6d:e9:c8:c7:24:2f:c7:63:
c2:09:c0:d6:aa:44:3a:3e:67:f3:9f:98:4e:ac:69:eb:99:c9:
93:47:79:01:9c:2f:5e:14:27:28:43:de:06:02:9e:51:99:6f:
57:2f:29:78:f0:e0:f8:fa:e3:ac:cb:92:69:2e:42:16:5a:19:
99:5e:f8:f5:20:77:83:be:0b:c0:ac:8a:11:79:d0:19:e6:b6:
5e:70:92:89:c3:e8:6d:4e:cc:0d:7b:03:be:c5:3d:27:3e:ee:
c9:fe:7f:28:5d:9c:dd:92:a8:2b:af:55:c7:ff:12:34:f7:2f:
5e:56:0b:ee:14:a7:00:7c:a8:4d:5e:d8:88:78:9e:30:e6:d8:
13:5d:d4:23:dc:59:da:1d:3b:80:fe:f2:2b:01:e6:95:c6:d3:
50:4b:d0:f2:99:b3:91:0f:50:f6:30:6d:68:32:21:86:a9:d8:
cd:33:31:38:36:e2:8e:4d:e7:b9:29:fb:60:0f:04:d7:01:59:
26:ee:e8:0b:27:80:42:82:f7:ad:19:34:9f:54:c0:04:56:89:
84:0c:3b:79:3b:28:14:c7:aa:52:8b:fa:06:e4:27:f7:5d:81:
0a:bc:e5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:14 2026 by rpki-client