Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
File: GlN6DAozEJGzByU8bwfo-ChU5rA.mft (raw, json)
Hash identifier: kd7Y3IUfbKrPy2kwdC8sQgm0VHdv7K+4P82Hgku8Xws=
Subject key identifier: 54:4C:F3:D1:96:65:06:86:E9:8F:41:A8:7B:AC:08:2F:A9:B8:0A:2A
Authority key identifier: 1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
Certificate issuer: /CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Certificate serial: 01A0C9349AFF76D5B2B19FB13FBF20AAE8BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 13:01:02 +0000
Manifest this update: Tue 22 Sep 2026 13:01:02 +0000
Manifest next update: Wed 23 Sep 2026 13:01:02 +0000
Files and hashes: 1: 3o9USRveK81MSe2kQ4zc3sxEt9w.roa (hash: IFKuL1PDKwNZHcGFxJk8ylaICmG+MyPGR58awe6xsGU=)
2: GlN6DAozEJGzByU8bwfo-ChU5rA.crl (hash: 3qbdaG5iry82zi6eYNWfk6bSRG9xSoCgiKkg0WodAww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:34:9a:ff:76:d5:b2:b1:9f:b1:3f:bf:20:aa:e8:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Validity
Not Before: Sep 22 13:01:02 2026 GMT
Not After : Sep 23 13:01:02 2026 GMT
Subject: CN=544cf3d196650686e98f41a87bac082fa9b80a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:97:bf:87:6a:d4:e2:33:9c:1e:8a:84:47:
4b:d6:d0:65:88:61:ff:0f:c3:69:a4:0c:77:40:2e:
8c:8e:e4:4f:14:25:f5:08:24:00:a4:e3:d8:8c:e2:
92:cf:98:4a:46:43:13:0e:a7:9f:f6:a1:7d:b6:30:
0c:d2:58:e4:2e:ee:db:7d:84:6e:cc:58:24:3f:c9:
ec:f6:f6:0f:27:ab:39:55:35:a6:d4:a2:07:97:3b:
ac:2f:a7:62:4c:1a:8d:fc:d4:1b:ad:75:13:c3:3b:
0c:38:7b:0d:8d:b5:d9:6d:4c:88:da:50:33:5e:d2:
a2:80:43:ec:4c:a5:2e:bc:69:21:27:65:17:8f:4a:
9b:75:06:6d:c6:bf:c1:11:87:3f:39:d3:5b:a0:1d:
45:10:bf:d8:8c:43:92:c7:d5:23:fd:c3:e4:2a:ac:
41:d4:6e:76:67:07:d6:b5:63:3e:d3:ed:19:37:85:
8b:9a:32:7e:9b:90:96:0e:a4:c8:a4:33:fc:63:0a:
2c:79:46:1b:c4:1f:5f:ef:86:7c:1f:44:5a:ed:3a:
4d:f9:01:f8:fb:5b:ec:d7:fe:e6:2d:b0:0a:88:0d:
29:e4:aa:b2:37:f3:7e:ac:03:ed:d6:9c:a2:7c:78:
42:00:a2:45:4b:3a:aa:b7:6a:71:2f:03:3f:64:13:
10:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4C:F3:D1:96:65:06:86:E9:8F:41:A8:7B:AC:08:2F:A9:B8:0A:2A
X509v3 Authority Key Identifier:
keyid:1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c7:d6:34:70:15:8c:7f:62:6f:1d:a7:c6:06:36:8e:d5:2d:
41:51:d8:64:da:7c:f0:73:b4:78:36:9e:a9:25:e6:cc:4d:33:
3f:8a:16:30:7a:92:d4:0f:26:b4:1b:88:91:68:b5:92:7a:31:
df:67:e6:c3:32:d2:da:f3:ca:5d:c5:1b:31:ff:1a:25:4c:71:
8b:71:f3:48:b1:8c:14:b6:3a:f8:0a:7d:87:c3:7b:a6:ee:48:
46:0f:7e:e4:be:2c:4f:02:57:d9:e5:48:5c:46:33:e9:32:4f:
17:06:98:b0:e4:60:ae:07:33:83:e9:9c:7e:b7:78:66:8c:d3:
48:42:c9:c8:49:a6:23:1f:c3:cc:ad:20:9f:34:cf:77:c1:1d:
c9:93:cd:ef:61:c1:17:e2:12:e4:83:f7:28:2b:92:74:c0:de:
62:ce:df:3e:9e:e9:8b:2d:10:36:34:b3:18:22:0e:c9:68:05:
bb:ca:91:3d:09:ca:d5:b5:16:51:a3:a2:6f:d2:99:1a:b8:df:
6c:93:2c:fb:16:29:7a:28:df:b9:91:6d:0d:cb:c4:1b:6d:8d:
20:de:c8:02:c2:33:80:4a:69:84:ed:6c:66:a7:a1:61:00:08:
76:9b:ee:4a:5a:9a:7c:b1:f5:9b:0f:e2:91:72:66:c7:78:92:
39:88:1d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:42:56 2026 by rpki-client