Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
File: GL7k74fvph6QWaCm44LeNxsnqkw.mft (raw, json)
Hash identifier: WNmE5uTRx/PBEi404j4hiQPevcs/Hal3WI3JVBnH/Tk=
Subject key identifier: A7:30:37:40:D5:F6:1B:D0:3D:0C:D1:AE:43:96:FD:2C:20:21:61:1A
Authority key identifier: 18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C
Certificate issuer: /CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c
Certificate serial: 019D284D4C5C133B76EF62EC8DEB082FFBAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
Manifest number: 0144
Signing time: Thu 26 Mar 2026 04:00:47 +0000
Manifest this update: Thu 26 Mar 2026 04:00:47 +0000
Manifest next update: Fri 27 Mar 2026 04:00:47 +0000
Files and hashes: 1: Fw6TrrKprUhHQ7LmRg72gkKzYfo.roa (hash: wOkfUq9QEg8uZcY5m7qfEesrjfuWcfYpWI1YJK2QRhs=)
2: GL7k74fvph6QWaCm44LeNxsnqkw.crl (hash: wGaPLhr/4w4i/ua9Q+XGIkupJvapGinfHqZET2aD8rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:4c:5c:13:3b:76:ef:62:ec:8d:eb:08:2f:fb:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18bee4ef87efa61e9059a0a6e382de371b27aa4c
Validity
Not Before: Mar 26 04:00:47 2026 GMT
Not After : Mar 27 04:00:47 2026 GMT
Subject: CN=a7303740d5f61bd03d0cd1ae4396fd2c2021611a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:3c:25:e9:f8:6b:87:a5:6f:31:93:d7:c2:
e2:0b:10:a3:32:74:0a:54:fb:1d:ed:f3:94:d4:39:
78:3b:4b:68:21:5c:fc:01:e5:7a:05:88:f1:ee:d0:
07:dc:6a:98:64:64:eb:f4:5d:be:ae:1c:91:6d:29:
23:59:08:38:12:54:a2:31:72:06:24:cd:0b:af:0f:
3a:31:38:6d:b6:04:b2:88:d6:0a:3b:15:40:ad:ff:
aa:34:2f:44:0e:4e:b1:d9:b7:7f:98:2e:d6:40:ea:
b6:02:ca:09:c7:65:41:7c:7e:4e:29:95:f8:9d:03:
cf:fe:83:06:12:b9:b6:f8:7b:10:e8:fc:f5:cd:67:
f2:22:a3:ca:64:88:3c:42:1d:b4:65:9a:ad:eb:a5:
5d:11:f5:33:f2:bc:6f:55:05:5c:63:60:f6:1b:bf:
a3:64:4a:3d:96:98:31:ce:48:35:ae:dc:f7:5f:91:
28:35:32:72:4d:e5:7f:f0:da:1c:f2:e3:04:c7:00:
29:b8:28:fe:11:19:dd:01:4a:f5:d9:24:b6:57:50:
74:79:ce:3e:20:a8:5b:72:35:99:ed:73:ee:31:87:
cc:b8:33:ab:a5:72:24:d8:8e:22:39:5c:ee:11:74:
bc:4f:54:ac:4a:c9:42:33:e3:27:8e:35:be:41:84:
6d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:30:37:40:D5:F6:1B:D0:3D:0C:D1:AE:43:96:FD:2C:20:21:61:1A
X509v3 Authority Key Identifier:
keyid:18:BE:E4:EF:87:EF:A6:1E:90:59:A0:A6:E3:82:DE:37:1B:27:AA:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GL7k74fvph6QWaCm44LeNxsnqkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4a4d42-443c-471d-a153-132885c902b1/1/GL7k74fvph6QWaCm44LeNxsnqkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c6:71:23:66:05:da:56:3b:11:11:4f:98:59:ed:b9:94:3c:
7c:71:59:dd:fd:d0:f3:42:8d:19:18:04:1f:5d:05:84:91:59:
a7:7d:59:69:43:91:88:9e:03:09:47:0e:19:49:48:88:11:a2:
e5:48:8b:a7:9f:f7:88:b5:87:9b:30:1b:65:4c:dd:cf:a2:28:
c5:f0:50:cf:e9:d2:72:a2:36:78:16:bb:c3:95:5d:d8:ec:12:
2c:28:b6:79:63:9b:87:8a:b5:a6:39:84:25:7a:85:27:05:fd:
dd:36:59:79:ed:24:a7:cd:25:b4:d4:b6:f4:8a:71:49:82:d0:
00:4c:5e:26:63:38:41:af:aa:a5:2a:7f:12:bd:a2:37:87:11:
55:9d:2c:1e:5b:33:67:86:ed:af:18:a8:f1:31:b5:85:80:2d:
df:d6:6d:6d:64:96:49:b7:74:51:29:a8:3f:bd:b5:ff:8d:e2:
5f:f4:46:0b:62:74:44:37:e9:17:c5:aa:a9:2c:9e:66:36:18:
3c:86:ec:c2:96:e7:cf:cd:f9:5c:87:4a:a8:6c:ea:a8:86:1f:
cc:cb:40:69:57:c9:72:21:f3:8f:ae:d1:f8:22:92:40:fa:0e:
93:9b:2d:28:d7:54:26:72:4e:37:87:c5:19:8b:11:4b:93:d7:
07:f5:7b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:34:40 2026 by rpki-client