
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
File: Gloi28jb0tckjer_R-M5D3f7Sws.mft (raw, json)
Hash identifier: OEWHZx49mv20rXP8GNpMJnlZuqZp9QZlxi7jWT34Kcw=
Subject key identifier: 09:52:12:3C:BB:1B:C6:DF:7B:DA:EC:34:AF:29:55:A0:B0:1A:46:A6
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Certificate issuer: /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial: 019F9090B0A6D79322A8A63835496DFD6C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
Manifest number: 19CD
Signing time: Thu 23 Jul 2026 20:00:29 +0000
Manifest this update: Thu 23 Jul 2026 20:00:29 +0000
Manifest next update: Fri 24 Jul 2026 20:00:29 +0000
Files and hashes: 1: Gloi28jb0tckjer_R-M5D3f7Sws.crl (hash: FWao5T5b5p7JACo9BtlFbC5L92ipYPZ+7YOwo5U8PWU=)
2: Suhh8wT3AT5mNSncT2o5IDBX68I.asa (hash: tisB4erk3EB45R0ami9NUuqag4XnzvX758+PaZr7EPg=)
3: nyYsyw_puc-6G9sAkIDHBW-qklo.roa (hash: r1YY5k2s3y2JyRlqz7YZwgJSL6r2URPlvPPK7VlHG6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:b0:a6:d7:93:22:a8:a6:38:35:49:6d:fd:6c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Validity
Not Before: Jul 23 20:00:29 2026 GMT
Not After : Jul 24 20:00:29 2026 GMT
Subject: CN=0952123cbb1bc6df7bdaec34af2955a0b01a46a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:40:fe:03:fc:a8:f4:0a:83:4f:54:c9:41:bb:
41:22:d4:72:73:a0:15:5f:b9:07:6d:62:fc:5d:17:
ed:e9:e4:c2:90:90:a9:5d:48:2e:05:45:d8:d2:a2:
f1:30:b5:68:17:a3:ea:3a:65:c5:80:5d:ba:15:55:
9d:2a:42:42:68:34:94:6f:e0:e9:f4:90:d8:1a:59:
ed:21:b0:d0:ed:bd:22:70:30:44:89:1a:a4:93:a1:
f1:ce:5d:07:2a:e5:b8:81:e8:9d:67:65:6a:16:c9:
40:23:e0:20:39:38:b3:ae:3e:93:57:62:c1:30:33:
e6:df:2f:ea:1f:10:6d:47:ac:c2:65:1e:f3:7f:b2:
e0:7d:eb:3c:73:8e:e4:f4:89:96:4f:c4:5f:62:49:
c2:1a:0c:d2:fe:d2:70:ca:ad:c8:6b:17:4d:b0:e3:
2f:81:d2:1e:01:c9:07:c6:aa:d2:91:da:c4:59:9a:
12:71:f5:39:64:00:01:40:0c:0a:62:46:c5:aa:0d:
1e:38:7c:87:1d:31:d2:7f:56:40:f9:ba:02:23:d0:
d8:f0:04:0c:5e:a2:9b:b6:41:66:bf:1c:07:1f:f4:
58:a8:f1:d1:93:62:1a:d1:fb:e8:c6:0e:bf:c2:de:
67:2c:e4:be:d5:21:3c:47:4e:4d:98:99:8d:49:b2:
42:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:52:12:3C:BB:1B:C6:DF:7B:DA:EC:34:AF:29:55:A0:B0:1A:46:A6
X509v3 Authority Key Identifier:
keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:6e:47:72:80:9e:ed:62:9d:4e:e2:d2:4f:b9:88:a5:3d:75:
e6:b7:f0:a8:e5:b2:65:30:8a:b4:a5:63:65:5c:56:04:33:f6:
6f:50:ed:01:02:ed:d9:b5:6d:1d:4f:d5:68:f8:6d:35:b1:b4:
52:5f:53:39:d3:bc:41:1a:08:67:de:91:f5:d4:ec:5c:b5:d1:
24:2b:2a:8e:9e:cd:0a:b9:5a:ac:97:42:bf:21:fb:d5:c0:79:
3e:49:ed:bc:90:d1:a4:cd:54:f4:f4:a0:0d:d8:7c:a6:c6:90:
9e:c4:78:1d:72:40:5e:89:81:00:4d:e5:ba:c4:5b:ec:b9:0a:
38:3f:1c:1c:52:3b:ac:95:89:63:6c:c5:77:6e:c5:60:10:64:
91:df:c8:ee:31:14:5b:c4:25:e5:07:a2:f8:e9:64:35:09:0b:
db:5f:10:1d:83:0d:9b:80:a8:45:04:d1:73:75:29:4c:e2:e1:
f2:b7:0b:d6:2c:f9:35:11:3c:48:a3:ed:5c:37:62:8d:40:7c:
a9:68:0d:bd:2a:c8:7b:be:77:56:fc:86:23:02:5b:7a:9e:30:
bc:d0:a2:cd:8c:68:6e:32:cd:10:99:cc:22:2a:36:28:fd:85:
66:f6:b1:a5:ec:21:38:be:f0:8e:13:c7:91:30:03:58:06:62:
af:66:86:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkLCm15MiqKY4NUlt/Wx2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNWEyMmRiYzhkYmQyZDcyNDhkZWFmZjQ3ZTMzOTBmNzdm
YjRiMGIwHhcNMjYwNzIzMjAwMDI5WhcNMjYwNzI0MjAwMDI5WjAzMTEwLwYDVQQD
EygwOTUyMTIzY2JiMWJjNmRmN2JkYWVjMzRhZjI5NTVhMGIwMWE0NmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzED+A/yo9AqDT1TJQbtBItRyc6AV
X7kHbWL8XRft6eTCkJCpXUguBUXY0qLxMLVoF6PqOmXFgF26FVWdKkJCaDSUb+Dp
9JDYGlntIbDQ7b0icDBEiRqkk6Hxzl0HKuW4geidZ2VqFslAI+AgOTizrj6TV2LB
MDPm3y/qHxBtR6zCZR7zf7Lgfes8c47k9ImWT8RfYknCGgzS/tJwyq3IaxdNsOMv
gdIeAckHxqrSkdrEWZoScfU5ZAABQAwKYkbFqg0eOHyHHTHSf1ZA+boCI9DY8AQM
XqKbtkFmvxwHH/RYqPHRk2Ia0fvoxg6/wt5nLOS+1SE8R05NmJmNSbJCLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAlSEjy7G8bfe9rsNK8pVaCwGkamMB8GA1UdIwQY
MBaAFBpaItvI29LXJI3q/0fjOQ93+0sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xOTIyYzktNDk0OS00MDU1LWE2NmUt
MTVkMzI3MDliZDBmLzEvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xOTIyYzktNDk0OS00MDU1LWE2NmUtMTVkMzI3MDliZDBm
LzEvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATW5HcoCe
7WKdTuLST7mIpT115rfwqOWyZTCKtKVjZVxWBDP2b1DtAQLt2bVtHU/VaPhtNbG0
Ul9TOdO8QRoIZ96R9dTsXLXRJCsqjp7NCrlarJdCvyH71cB5PkntvJDRpM1U9PSg
Ddh8psaQnsR4HXJAXomBAE3lusRb7LkKOD8cHFI7rJWJY2zFd27FYBBkkd/I7jEU
W8Ql5Qei+OlkNQkL218QHYMNm4CoRQTRc3UpTOLh8rcL1iz5NRE8SKPtXDdijUB8
qWgNvSrIe753VvyGIwJbep4wvNCizYxobjLNEJnMIio2KP2FZvaxpewhOL7wjhPH
kTADWAZir2aGnQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:41 2026 by rpki-client