Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: aKu2quun/ACPHxGg8bY6Vm3xirlXeu1pdgAdyjGNrnw=
Subject key identifier: B1:FD:66:57:F1:D9:89:31:4D:60:CE:2A:3F:C2:C6:07:93:DF:58:82
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 01A1DDCC45CDE5A760ED41485CA60BF6B21A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 0C1E
Signing time: Sun 15 Nov 2026 06:01:54 +0000
Manifest this update: Sun 15 Nov 2026 06:01:54 +0000
Manifest next update: Mon 16 Nov 2026 06:01:54 +0000
Files and hashes: 1: JtRvpoQ6v5bFd3bqNHp70RkQlEw.roa (hash: /oF7VKyAqIh3Dj5gAD5HaY2Wmq8Ex+sQiaIQTG8GOuw=)
2: VBmr-5LpIjSQ6myjINReT6R1vMo.roa (hash: qg+Z2r3TWn/McCuaCe1xwiAMWjaHkNEjXrq2W1LrDUU=)
3: Y61lvfTY0IfOHOaNCazwXGsL2N8.roa (hash: 52xFh0jAqOfccjKrhy8KiqEx7vruviP8tzZ1IxwQ/As=)
4: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: 5u4R/VcMMl42t+g46ay5jYBv9V/djbpOtOy6iNLnoFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:45:cd:e5:a7:60:ed:41:48:5c:a6:0b:f6:b2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Nov 15 06:01:54 2026 GMT
Not After : Nov 16 06:01:54 2026 GMT
Subject: CN=b1fd6657f1d989314d60ce2a3fc2c60793df5882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:53:8c:bc:64:cb:0a:63:ac:06:8b:fc:83:
90:31:68:cf:8f:e9:11:f3:bc:2f:64:48:66:a8:3b:
96:f6:97:7c:d4:79:23:05:7a:4e:35:32:61:1b:f9:
c4:69:f8:c5:ad:cb:8b:15:5d:ab:e3:f4:ff:0c:a8:
92:59:77:34:52:ac:55:0e:47:84:14:67:52:1a:8f:
14:1b:7c:dc:0f:c6:19:93:b5:df:09:84:05:a0:d1:
e0:d0:ac:b4:2b:5a:47:d4:52:0f:b4:ae:06:17:01:
55:4d:f5:ed:59:ef:36:c0:f2:dc:f3:0b:39:aa:de:
52:dc:9c:0d:45:97:8b:a0:b7:87:18:59:2a:bd:86:
46:f5:04:75:03:21:8f:ed:c2:c5:10:01:c8:c6:0c:
f1:48:23:b7:45:a8:f3:08:f5:a7:9a:5d:3c:2b:20:
e9:50:98:e4:d3:92:02:a9:8d:fb:7b:ac:18:b6:87:
52:40:63:18:47:ac:9b:3e:1d:5b:a8:11:0a:40:a3:
6e:f7:09:c2:55:83:58:95:91:53:8f:49:c1:25:b1:
d6:df:41:f2:d9:c9:3a:29:dd:4b:9c:6a:fd:f4:2e:
81:fa:24:a8:41:fb:5f:88:52:2c:73:43:db:56:57:
95:cc:72:c4:92:66:09:c2:0e:28:df:1d:9b:81:17:
9a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FD:66:57:F1:D9:89:31:4D:60:CE:2A:3F:C2:C6:07:93:DF:58:82
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4b:5a:6a:f3:b7:8b:d9:5e:bd:cf:68:4e:1e:27:08:d3:6a:
63:4e:06:26:3c:de:23:c1:14:0b:16:b7:c9:e4:5f:4c:f3:8e:
aa:6c:12:bc:2e:27:7d:c8:15:63:8d:85:a9:91:af:37:a0:e2:
38:c5:af:97:06:b2:76:58:c1:db:b1:f9:0d:47:62:20:a8:9c:
25:8a:76:dd:3f:4b:9b:0e:93:f7:18:09:45:35:80:71:50:c6:
86:64:16:da:33:d8:47:6b:7c:e0:ed:cd:23:eb:6a:26:af:80:
04:f3:8d:8e:42:67:f7:f9:2e:25:b4:d6:3b:c6:ef:6a:6a:37:
19:9a:d2:73:b8:0d:ce:f9:2a:38:9b:62:61:ff:1f:2c:a9:62:
a8:b6:b0:36:a3:73:0e:e4:a3:83:a2:75:28:9d:ad:b6:6f:25:
8a:3d:6c:81:46:4a:51:5a:ac:53:3f:ec:55:50:23:4f:b3:8e:
79:e9:b4:87:19:0c:2c:a7:77:df:5f:17:e8:3f:4b:74:e7:fc:
04:86:c2:2c:fd:fc:30:17:2f:72:2a:c7:9e:73:fc:04:4b:40:
29:11:a0:67:46:49:a9:52:62:4e:2f:4a:d0:9a:bc:d5:cb:a0:
12:91:85:63:71:7c:db:0b:61:6c:53:e4:dd:4c:f4:71:9b:80:
87:c3:98:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHdzEXN5adg7UFIXKYL9rIaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYjA2MzhiODc2ZjM5NzhjYTdiZDI4ZDdkZTM3MDk5NmIz
OTZhM2YwHhcNMjYxMTE1MDYwMTU0WhcNMjYxMTE2MDYwMTU0WjAzMTEwLwYDVQQD
EyhiMWZkNjY1N2YxZDk4OTMxNGQ2MGNlMmEzZmMyYzYwNzkzZGY1ODgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKlTjLxkywpjrAaL/IOQMWjPj+kR
87wvZEhmqDuW9pd81HkjBXpONTJhG/nEafjFrcuLFV2r4/T/DKiSWXc0UqxVDkeE
FGdSGo8UG3zcD8YZk7XfCYQFoNHg0Ky0K1pH1FIPtK4GFwFVTfXtWe82wPLc8ws5
qt5S3JwNRZeLoLeHGFkqvYZG9QR1AyGP7cLFEAHIxgzxSCO3RajzCPWnml08KyDp
UJjk05ICqY37e6wYtodSQGMYR6ybPh1bqBEKQKNu9wnCVYNYlZFTj0nBJbHW30Hy
2ck6Kd1LnGr99C6B+iSoQftfiFIsc0PbVleVzHLEkmYJwg4o3x2bgRea7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLH9Zlfx2YkxTWDOKj/CxgeT31iCMB8GA1UdIwQY
MBaAFICwY4uHbzl4ynvSjX3jcJlrOWo/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAt
MTViMDlmNWY2ZWQ3LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy9mNDY2M2YtNDg0ZS00MmRiLTg5YTAtMTViMDlmNWY2ZWQ3
LzEvZ0xCamk0ZHZPWGpLZTlLTmZlTndtV3M1YWo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEtaavO3
i9levc9oTh4nCNNqY04GJjzeI8EUCxa3yeRfTPOOqmwSvC4nfcgVY42FqZGvN6Di
OMWvlwaydljB27H5DUdiIKicJYp23T9Lmw6T9xgJRTWAcVDGhmQW2jPYR2t84O3N
I+tqJq+ABPONjkJn9/kuJbTWO8bvamo3GZrSc7gNzvkqOJtiYf8fLKliqLawNqNz
DuSjg6J1KJ2ttm8lij1sgUZKUVqsUz/sVVAjT7OOeem0hxkMLKd3318X6D9LdOf8
BIbCLP38MBcvcirHnnP8BEtAKRGgZ0ZJqVJiTi9K0Jq81cugEpGFY3F82wthbFPk
3Uz0cZuAh8OYHw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:28:47 2026 by rpki-client