Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: 8ttAk2fmIoJO/rOoNfJAk9lPR372xWlkWf8XLelVmqg=
Subject key identifier: E1:8C:E5:3B:61:43:32:B1:04:1F:3B:4F:1F:A6:69:84:DF:F2:DC:75
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 019D27722EDF99922043FAEEF2718F34178A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 09AD
Signing time: Thu 26 Mar 2026 00:01:27 +0000
Manifest this update: Thu 26 Mar 2026 00:01:27 +0000
Manifest next update: Fri 27 Mar 2026 00:01:27 +0000
Files and hashes: 1: VBmr-5LpIjSQ6myjINReT6R1vMo.roa (hash: qg+Z2r3TWn/McCuaCe1xwiAMWjaHkNEjXrq2W1LrDUU=)
2: Y61lvfTY0IfOHOaNCazwXGsL2N8.roa (hash: 52xFh0jAqOfccjKrhy8KiqEx7vruviP8tzZ1IxwQ/As=)
3: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: +xHRJhsQ/Xf8kNQSj7owLaT4bpnPhuMC4yOCS0fhER0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:2e:df:99:92:20:43:fa:ee:f2:71:8f:34:17:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Mar 26 00:01:27 2026 GMT
Not After : Mar 27 00:01:27 2026 GMT
Subject: CN=e18ce53b614332b1041f3b4f1fa66984dff2dc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:91:8c:ab:f2:3e:8b:28:8b:79:5c:ba:43:8f:
4a:c1:02:e6:4b:2d:69:24:51:c9:a4:eb:ff:e3:2f:
9e:78:16:b2:38:6f:46:42:da:8e:07:c7:e6:88:d1:
0f:da:25:c1:69:69:fd:21:b0:f2:f8:d4:07:80:7d:
35:4c:ef:df:50:7d:f8:46:1a:8c:fd:2a:60:fb:1d:
62:0b:93:46:bf:ca:6e:4b:30:e5:f0:5a:55:76:69:
db:00:12:f9:7a:5e:be:6b:bd:b0:75:2f:30:6b:d0:
58:4e:4a:4b:66:ab:8b:6a:83:3f:8f:cb:28:dc:19:
8d:18:75:41:bf:f1:9e:ea:19:f1:90:95:34:e5:3c:
17:d3:34:74:a5:a7:a6:5e:87:b4:61:19:e6:e7:3e:
81:d5:65:f5:f4:b1:00:bd:70:31:cb:d4:17:25:30:
b9:d1:fb:1f:c9:97:5f:94:b2:76:19:05:37:21:b8:
14:a8:7f:2c:1b:c7:ea:c5:cd:a6:2d:96:7a:0b:ec:
f4:28:47:a7:26:ed:12:53:58:46:1c:88:19:75:22:
57:5a:a4:ee:3d:b3:7d:b4:65:20:b0:4e:e3:63:89:
a3:aa:11:7e:81:0a:ac:66:71:bc:d9:80:74:ca:4b:
48:e2:5f:0f:5f:8a:bb:f7:d8:40:fe:3c:8c:08:69:
1b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:8C:E5:3B:61:43:32:B1:04:1F:3B:4F:1F:A6:69:84:DF:F2:DC:75
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ba:d1:78:4b:d8:1a:15:67:d5:2e:e0:de:06:e9:5c:b2:5f:
dc:6d:b8:34:9c:3a:d4:28:0a:f3:2b:69:dd:49:6c:3d:ea:bf:
5a:e4:39:63:bc:f7:7d:32:65:d4:5c:24:d4:13:96:89:36:c6:
97:68:5b:4f:75:98:a6:83:30:6a:8b:ec:2e:84:f2:2f:08:96:
54:82:29:86:d2:b6:e0:fc:05:fa:ba:97:54:5c:be:2a:f9:d1:
8f:a2:c7:75:a7:e5:0e:1e:79:d9:c9:72:d2:6f:a9:0c:af:3f:
09:69:7d:37:f1:dc:67:df:df:7b:3e:a4:4a:79:51:ff:42:3a:
cd:28:8d:bc:65:46:9f:92:16:ad:40:91:36:bd:fc:62:87:64:
c3:fe:68:4e:a7:6e:23:80:ca:10:8c:43:0a:da:f3:9a:dd:94:
42:b8:d4:41:d9:af:a7:c2:c1:06:dd:b6:db:c7:de:e6:d3:09:
ef:4e:66:3c:46:62:eb:27:78:58:ef:e6:3a:86:0f:22:ab:b3:
0d:4f:6a:c6:e7:a2:0d:ef:7c:ed:1c:df:56:5b:56:c3:58:b1:
27:65:4f:d3:6d:f6:81:bc:81:b8:09:82:2c:fb:2b:1e:20:73:
ee:b4:e0:c9:e6:43:64:43:90:03:da:58:3c:22:5d:8b:16:60:
ec:75:2e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:44 2026 by rpki-client