Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: WGbK6ly6IN8aE6pzhOWTtFAICHOf+kdlkUzxYn+63jc=
Subject key identifier: 41:B5:1D:24:10:9A:5E:54:18:27:9C:F0:7D:0D:B8:1A:F7:29:2A:90
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 019E1DFE55F8DE262D4C4587688ACCAC44B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 0A2D
Signing time: Tue 12 May 2026 21:01:07 +0000
Manifest this update: Tue 12 May 2026 21:01:07 +0000
Manifest next update: Wed 13 May 2026 21:01:07 +0000
Files and hashes: 1: JtRvpoQ6v5bFd3bqNHp70RkQlEw.roa (hash: /oF7VKyAqIh3Dj5gAD5HaY2Wmq8Ex+sQiaIQTG8GOuw=)
2: VBmr-5LpIjSQ6myjINReT6R1vMo.roa (hash: qg+Z2r3TWn/McCuaCe1xwiAMWjaHkNEjXrq2W1LrDUU=)
3: Y61lvfTY0IfOHOaNCazwXGsL2N8.roa (hash: 52xFh0jAqOfccjKrhy8KiqEx7vruviP8tzZ1IxwQ/As=)
4: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: MaMJE+Yk2OcW1owpi5H48kWS6tkB1gYLDbgty3asxco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:55:f8:de:26:2d:4c:45:87:68:8a:cc:ac:44:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: May 12 21:01:07 2026 GMT
Not After : May 13 21:01:07 2026 GMT
Subject: CN=41b51d24109a5e5418279cf07d0db81af7292a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:59:85:ff:bd:04:c4:f3:c9:34:3b:ac:47:
a5:d7:28:b7:e8:83:82:3c:7c:fe:06:a8:1c:e5:ff:
a0:f2:79:9e:90:89:06:4b:a9:a8:bf:52:78:4b:fb:
43:a7:f0:24:2c:ea:bb:25:11:4a:ff:ae:c8:50:b6:
c2:6b:0e:b8:93:7d:75:ca:81:a0:25:76:9d:6b:c7:
9c:20:e6:fb:ed:0c:96:10:f1:44:1c:6a:71:b6:13:
1b:0e:a5:38:27:ed:f3:d8:58:8e:8f:70:31:2b:38:
53:d4:ca:6e:68:e1:26:2c:06:8a:de:e9:0b:5d:f0:
9d:a8:c6:58:2e:c4:77:19:66:2e:01:3b:04:49:ab:
d3:c9:6a:de:62:d4:e2:32:68:15:85:52:89:b9:71:
82:1b:82:81:ec:b9:70:94:69:1f:69:94:6f:e0:8d:
a2:ec:b8:8d:b2:09:45:ad:04:aa:da:47:0c:4c:a8:
d0:27:15:bd:72:96:4c:44:d5:b1:fc:b6:8d:03:0e:
c0:f0:cc:2e:c0:e7:dc:73:49:cd:f8:33:1a:b4:c5:
b6:bb:3d:2e:c8:e6:e3:e9:5b:07:18:ea:be:99:ea:
7f:97:59:9d:e3:21:7a:c2:fb:52:f9:a6:90:39:77:
be:a6:28:c8:92:f9:23:5b:df:20:50:e7:25:ff:f9:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B5:1D:24:10:9A:5E:54:18:27:9C:F0:7D:0D:B8:1A:F7:29:2A:90
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9e:df:13:fa:de:08:9a:ab:fb:e1:f1:b8:c4:99:66:7c:45:
a5:66:b4:7b:b1:70:c4:8a:0b:22:96:dd:56:29:2b:c9:90:46:
6f:b8:0e:d9:7c:b6:d8:f4:e2:7e:cd:20:64:fa:b5:46:37:d2:
33:44:7f:85:2d:1b:77:28:07:5a:9c:70:7a:c1:22:87:8c:92:
c4:aa:a5:30:53:14:9e:43:a8:ba:4b:d8:c5:aa:c5:86:90:b5:
ed:ec:d0:34:9a:84:b0:cd:2f:01:de:8a:3b:cb:05:a5:ac:90:
38:20:8a:61:7b:a5:9c:76:ba:72:7c:41:17:63:d7:27:50:89:
4d:b1:cb:2d:38:c2:9b:c6:f3:70:36:4c:db:7c:6c:f3:fd:66:
e0:98:b5:7e:b5:e3:2e:a8:45:f7:c9:45:63:ec:8c:a6:ac:8c:
7d:57:6d:38:48:37:fb:9d:51:18:af:1f:11:b5:42:0f:7c:bf:
51:9e:43:dd:64:b6:37:0d:7b:a7:7c:1a:24:b8:cb:c2:cb:76:
ba:7d:a3:7b:1a:af:40:8b:90:4e:ab:d0:be:8a:9f:55:b8:41:
91:45:d4:d5:57:3f:14:34:f2:c2:6a:e8:9d:58:33:e8:c1:0e:
92:ba:0b:36:bd:39:41:84:6a:f7:fc:f0:99:c2:9f:ff:67:84:
86:6e:15:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:30:48 2026 by rpki-client