Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.mft
File: 3gla0COn_75FMU46hJBYtVCSfcM.mft (raw, json)
Hash identifier: nxj7NHPzsMtoqFFNAhcUrunODnqQ+8y8W7iGgBsgSEA=
Subject key identifier: FA:11:00:F4:29:4D:C5:D7:DB:26:63:D2:8C:1A:4C:CD:CC:0C:C7:13
Authority key identifier: DE:09:5A:D0:23:A7:FF:BE:45:31:4E:3A:84:90:58:B5:50:92:7D:C3
Certificate issuer: /CN=de095ad023a7ffbe45314e3a849058b550927dc3
Certificate serial: 019F916DAAFAC7404FCE0B964E00F26CFA5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gla0COn_75FMU46hJBYtVCSfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:01:51 +0000
Manifest this update: Fri 24 Jul 2026 00:01:51 +0000
Manifest next update: Sat 25 Jul 2026 00:01:51 +0000
Files and hashes: 1: 3gla0COn_75FMU46hJBYtVCSfcM.crl (hash: PWtpYsSESTnViQBut6gPpa34rtTDGB5r3Al0zZJdkAQ=)
2: swtfhREMGBdM94COnjWKNQH-uvw.roa (hash: eVXbh4q/CHYC8OtafAnCyVe2lhsfVD/4dajOsOYXNiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gla0COn_75FMU46hJBYtVCSfcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6d:aa:fa:c7:40:4f:ce:0b:96:4e:00:f2:6c:fa:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de095ad023a7ffbe45314e3a849058b550927dc3
Validity
Not Before: Jul 24 00:01:51 2026 GMT
Not After : Jul 25 00:01:51 2026 GMT
Subject: CN=fa1100f4294dc5d7db2663d28c1a4ccdcc0cc713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d1:ea:22:73:53:55:a6:7b:c2:47:41:b5:21:
40:66:3a:8c:5e:98:40:e7:67:24:f3:0a:f7:11:ca:
0f:f3:9a:60:d9:a4:c4:43:81:36:ca:20:cc:dd:65:
c4:c7:27:00:9f:a5:76:f6:0c:e2:ac:3f:75:6b:ca:
d1:c4:ea:a8:32:2d:4d:31:6d:28:e1:e4:ad:8b:a6:
75:77:47:9c:a3:34:f4:45:b0:07:2c:84:1d:63:97:
63:c3:d8:14:71:46:ec:7b:2b:c7:9f:3e:d8:b7:ca:
91:c1:fa:f0:4e:70:85:79:7f:17:62:5b:34:b1:c0:
79:b4:89:c3:bd:8f:82:9d:11:6d:76:a1:b7:9c:6f:
06:ca:e5:cf:9a:6e:3c:69:21:f0:84:78:62:43:66:
49:7a:c5:48:2c:0a:c1:5e:8d:91:d1:11:42:f4:af:
21:27:cc:76:b6:13:c0:0e:c3:fd:65:c9:e6:68:21:
53:51:41:b5:b9:b2:9b:47:24:cd:87:dc:83:05:1a:
10:44:2c:a5:32:ba:f2:2b:25:ae:64:20:bf:39:33:
7c:57:69:c9:dd:f3:30:63:4c:87:84:d1:02:68:df:
90:ac:35:5e:de:fa:78:c7:b5:40:ef:1b:26:0c:a4:
b0:fd:3e:d0:b8:2b:c9:3b:f0:36:fc:1a:c5:f9:ce:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:11:00:F4:29:4D:C5:D7:DB:26:63:D2:8C:1A:4C:CD:CC:0C:C7:13
X509v3 Authority Key Identifier:
keyid:DE:09:5A:D0:23:A7:FF:BE:45:31:4E:3A:84:90:58:B5:50:92:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gla0COn_75FMU46hJBYtVCSfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a1:a1:b4:f0:d8:17:01:3e:c1:e2:78:db:71:88:3e:a2:cc:
2c:3a:82:d1:79:07:c3:1d:9d:ef:d5:b7:92:ef:48:69:02:9d:
20:b9:8a:8b:45:2e:d8:d0:23:b5:a1:91:10:b6:8d:8a:9e:4c:
c4:a0:51:e9:4d:a4:68:c7:5f:e6:7b:86:46:6f:61:32:88:63:
58:0f:ca:eb:62:bd:f6:39:ab:7b:15:46:97:b6:37:3a:b1:7e:
5a:a5:4f:be:89:aa:4b:fa:22:7f:b8:66:0c:35:7f:b1:c3:b5:
5b:8b:fe:6c:96:43:5a:cc:c8:72:07:19:f6:e1:4b:ff:aa:b0:
c4:b3:01:46:bb:7c:73:76:d6:6c:b5:03:5e:76:c4:09:ba:18:
34:0a:2a:4b:50:91:93:95:b8:cd:a9:16:4f:db:a0:75:2c:25:
6c:18:33:7d:4d:6a:c1:38:93:1f:87:38:ff:75:d2:ad:4e:df:
db:e4:d3:72:51:99:55:5e:c4:ed:55:c8:2d:fe:07:d9:7d:87:
be:37:25:44:fc:da:e8:32:55:68:54:38:0c:49:33:06:6a:85:
a7:04:98:ff:30:d3:ea:75:b3:1c:bd:d0:90:19:59:e8:87:2b:
5d:76:f1:9b:55:07:14:8b:7d:6a:a4:52:25:9d:7f:45:dd:5c:
c9:81:b2:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:06:22 2026 by rpki-client