Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.mft
File: 3gla0COn_75FMU46hJBYtVCSfcM.mft (raw, json)
Hash identifier: wU70xQW4U0MLROprCmpvA2d04IR89BvCSSBAFHIZwzw=
Subject key identifier: 49:CD:11:61:C9:82:B6:77:4C:6C:51:F5:42:B8:DD:AB:A6:73:03:86
Authority key identifier: DE:09:5A:D0:23:A7:FF:BE:45:31:4E:3A:84:90:58:B5:50:92:7D:C3
Certificate issuer: /CN=de095ad023a7ffbe45314e3a849058b550927dc3
Certificate serial: 01A1CD0F14A6E7822C10A6C8B8CC7C082CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gla0COn_75FMU46hJBYtVCSfcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.mft
Manifest number: 0168
Signing time: Thu 12 Nov 2026 00:01:19 +0000
Manifest this update: Thu 12 Nov 2026 00:01:19 +0000
Manifest next update: Fri 13 Nov 2026 00:01:19 +0000
Files and hashes: 1: 3gla0COn_75FMU46hJBYtVCSfcM.crl (hash: hTQL3uUUBa7v3dCoX+9j6Z3tfEw6cy9kg4ITMhmKYec=)
2: swtfhREMGBdM94COnjWKNQH-uvw.roa (hash: eVXbh4q/CHYC8OtafAnCyVe2lhsfVD/4dajOsOYXNiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gla0COn_75FMU46hJBYtVCSfcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 23:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cd:0f:14:a6:e7:82:2c:10:a6:c8:b8:cc:7c:08:2c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de095ad023a7ffbe45314e3a849058b550927dc3
Validity
Not Before: Nov 12 00:01:19 2026 GMT
Not After : Nov 13 00:01:19 2026 GMT
Subject: CN=49cd1161c982b6774c6c51f542b8ddaba6730386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:32:4d:40:9f:3d:49:2b:06:6c:9c:d6:03:9b:
5c:15:05:df:fb:97:1f:e7:af:dd:d8:db:6d:49:73:
ed:d6:3d:ff:c1:7d:d7:ef:c3:9a:24:6f:5a:d8:57:
3b:31:c9:49:8e:e8:6a:4d:ae:84:d9:ab:54:73:9d:
89:33:37:5d:64:b5:a9:9f:80:20:2f:8b:c9:c1:36:
0e:d4:70:dc:f4:16:e1:7a:c1:9e:f0:0c:d6:f7:55:
9e:45:76:fb:75:2f:23:22:23:80:ae:36:8d:69:08:
f9:5f:4c:c7:56:ff:b7:90:6c:fd:05:78:dc:b9:e1:
d9:ce:e6:b3:77:31:30:d8:63:d2:f5:49:3d:b7:aa:
d9:24:a4:7d:d3:a2:4a:d7:56:bc:8b:bd:45:31:2c:
0e:ad:b3:02:d3:9a:da:bf:8e:07:3a:52:80:77:2c:
9a:95:21:f4:0a:40:02:d1:c7:ca:91:a2:cd:32:f0:
81:48:9b:90:da:6f:37:74:b8:fe:70:a6:a8:8a:f6:
20:b7:19:cf:dc:d7:4b:5e:97:3c:5b:d7:73:67:fa:
c4:c4:37:54:d2:1a:02:7c:e2:95:9e:0d:c7:68:c4:
68:4f:bd:81:63:66:4c:97:13:6d:73:50:7c:13:61:
92:67:fa:25:05:48:01:ee:2c:15:49:b6:b3:cf:4f:
9f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CD:11:61:C9:82:B6:77:4C:6C:51:F5:42:B8:DD:AB:A6:73:03:86
X509v3 Authority Key Identifier:
keyid:DE:09:5A:D0:23:A7:FF:BE:45:31:4E:3A:84:90:58:B5:50:92:7D:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gla0COn_75FMU46hJBYtVCSfcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/9a6834-e768-409b-b8ce-ec9b69b46cc0/1/3gla0COn_75FMU46hJBYtVCSfcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9a:00:8a:a1:e0:0d:7c:99:12:81:ca:2e:ab:80:fc:83:a3:
42:6b:ac:91:10:f2:f9:98:2a:d8:91:f7:16:ee:35:a0:c7:98:
9d:f5:cc:27:24:2a:d2:cc:6c:08:d2:07:3d:24:69:2b:1e:7c:
ce:12:ee:b7:5e:6f:87:f7:64:cf:ba:71:3d:4a:dd:27:3a:f4:
58:92:22:5c:46:43:30:9d:d3:f4:4b:7c:62:53:d5:5e:15:18:
37:eb:2b:2b:8a:87:ab:7c:08:81:c2:f8:b3:70:53:6b:1d:23:
9e:d5:46:42:c1:e9:f0:d8:0b:cf:e6:a6:62:24:d5:c0:65:e4:
7b:e2:67:fe:2b:ea:1e:8d:ef:6f:af:7d:5f:85:d6:be:87:79:
d4:46:53:bd:d9:f9:61:b1:34:f6:13:53:68:ec:77:af:ad:e0:
5f:66:5b:35:bd:f1:b1:ec:3d:f3:1b:3c:c3:2b:bd:61:b0:98:
d9:14:32:9e:9c:e3:21:5c:7e:de:2c:f2:61:1a:08:67:a9:f8:
77:b0:f7:5b:d4:c7:a7:34:d0:01:73:48:35:aa:fe:e2:37:13:
95:71:e7:dd:c6:15:e8:25:06:22:ba:77:d5:6f:04:8e:b9:4d:
f5:9b:19:0d:ad:41:ba:3a:60:14:65:f1:ef:bc:aa:15:35:70:
df:6e:4a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 05:34:39 2026 by rpki-client