
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier: q1LCe6Ma6C651Ytsirzv8NeJB8XEdO6tqm59R8kA5qY=
Subject key identifier: 92:23:E1:6C:D6:0C:3B:24:91:56:AE:E6:73:60:2D:1C:2E:BB:53:8E
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial: 019D27E03DD2088C8833A0849FF2AC3D76F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number: 0F68
Signing time: Thu 26 Mar 2026 02:01:40 +0000
Manifest this update: Thu 26 Mar 2026 02:01:40 +0000
Manifest next update: Fri 27 Mar 2026 02:01:40 +0000
Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: 525OJW7KNyOUaCRuR02PMnhRDSOuDtLs0G13FRCCxmo=)
2: t6uJnjT04JxAMbhWunFCrGch9dE.roa (hash: ipX6tbTTZfYSopPgMvzN1VwXoXH9Z4uS/A5CMI0tQEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:3d:d2:08:8c:88:33:a0:84:9f:f2:ac:3d:76:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Validity
Not Before: Mar 26 02:01:40 2026 GMT
Not After : Mar 27 02:01:40 2026 GMT
Subject: CN=9223e16cd60c3b249156aee673602d1c2ebb538e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:67:c5:f0:87:b5:e0:1e:a2:51:e1:dc:39:
c7:45:09:5e:6e:12:7a:a7:ab:39:ed:29:9f:1f:1b:
09:77:46:08:fc:fb:03:d4:3c:49:41:2a:3e:08:bd:
17:85:2e:13:02:b6:79:74:eb:1e:ed:81:e1:ba:fd:
48:23:da:eb:6b:3d:a9:60:4a:88:2e:15:d7:03:53:
93:c2:da:78:32:e6:4e:cd:c1:0c:f3:ea:b7:ac:cf:
32:ea:71:dc:a7:12:44:d3:37:a0:d2:43:dd:2e:57:
f0:88:5d:ad:a4:38:c7:da:4c:05:a1:4c:51:fc:bc:
07:43:97:0b:68:18:f6:ba:a1:99:ef:db:ab:b8:c1:
6c:82:1f:98:43:20:9e:3c:71:10:dc:0e:66:be:73:
57:6f:b4:e9:44:a3:e8:d6:1a:f8:fc:10:55:d5:db:
62:88:4d:43:32:01:73:52:94:8d:8d:85:dc:18:b5:
42:ca:94:86:90:71:7d:2b:aa:85:84:37:bb:5e:96:
d9:11:c7:c8:b2:5f:8a:9c:44:29:43:5d:96:5c:f8:
19:3c:f5:27:87:95:ef:f2:2d:36:20:3f:47:70:e4:
4a:b1:c4:7d:a7:8a:7a:84:cc:d0:b5:33:8b:bd:7c:
30:7c:75:f3:f9:32:62:72:c9:37:40:a7:e9:5a:cf:
24:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:23:E1:6C:D6:0C:3B:24:91:56:AE:E6:73:60:2D:1C:2E:BB:53:8E
X509v3 Authority Key Identifier:
keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:98:4a:17:17:79:1f:4c:77:25:f6:59:8f:63:bd:46:a9:8c:
0d:78:51:42:d5:ff:5c:4b:5b:02:15:16:3c:00:4c:e3:50:2a:
ae:c9:4d:2c:66:48:6c:04:eb:07:60:0e:37:86:4b:63:6d:6e:
75:4e:91:10:8b:10:4a:62:24:38:df:5a:83:3b:6d:91:cb:25:
e9:c3:b2:65:8d:3c:15:b3:10:22:97:dc:ce:fa:66:96:57:ee:
6f:86:05:80:e1:bf:c9:cb:e6:3b:6d:a2:bd:ea:24:39:ec:a7:
11:4f:cf:7e:21:80:bc:a0:0a:5e:4f:6c:37:6a:e2:b8:48:62:
52:8c:ea:aa:f2:f0:05:b3:8b:05:45:34:01:f3:dc:53:d5:63:
64:18:46:1a:95:16:a5:13:9b:a1:dd:ac:0e:e2:4a:bf:d6:60:
50:36:86:f0:a5:97:44:6a:9f:19:bb:12:5f:c3:96:da:8a:46:
8c:45:1e:f0:58:87:1e:af:9f:0c:d5:3b:92:e2:f0:14:65:fe:
95:72:93:26:10:34:1e:17:de:f3:ba:33:28:93:06:d4:ba:92:
07:ec:47:bd:31:55:95:4d:65:c8:fb:b6:a6:de:4b:66:f3:66:
39:09:4e:7a:39:42:34:cd:2c:16:ca:20:40:9e:82:91:24:b3:
59:65:44:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4D3SCIyIM6CEn/KsPXb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNTM0NTA1ODQ1ZmEwYTkzZjgyODVhNmRhOGJjZTZkMWQ3
MjAwZGQwHhcNMjYwMzI2MDIwMTQwWhcNMjYwMzI3MDIwMTQwWjAzMTEwLwYDVQQD
Eyg5MjIzZTE2Y2Q2MGMzYjI0OTE1NmFlZTY3MzYwMmQxYzJlYmI1MzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KlnxfCHteAeolHh3DnHRQlebhJ6
p6s57SmfHxsJd0YI/PsD1DxJQSo+CL0XhS4TArZ5dOse7YHhuv1II9rraz2pYEqI
LhXXA1OTwtp4MuZOzcEM8+q3rM8y6nHcpxJE0zeg0kPdLlfwiF2tpDjH2kwFoUxR
/LwHQ5cLaBj2uqGZ79uruMFsgh+YQyCePHEQ3A5mvnNXb7TpRKPo1hr4/BBV1dti
iE1DMgFzUpSNjYXcGLVCypSGkHF9K6qFhDe7XpbZEcfIsl+KnEQpQ12WXPgZPPUn
h5Xv8i02ID9HcORKscR9p4p6hMzQtTOLvXwwfHXz+TJicsk3QKfpWs8kAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJIj4WzWDDskkVau5nNgLRwuu1OOMB8GA1UdIwQY
MBaAFIJTRQWEX6CpP4KFptqLzm0dcgDdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZGYyNDgtZWM1Yi00N2Q3LWJkZDAt
NDdjYzdkMWFiYzZiLzEvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZGYyNDgtZWM1Yi00N2Q3LWJkZDAtNDdjYzdkMWFiYzZi
LzEvZ2xORkJZUmZvS2tfZ29XbTJvdk9iUjF5QU4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx5hKFxd5
H0x3JfZZj2O9RqmMDXhRQtX/XEtbAhUWPABM41AqrslNLGZIbATrB2AON4ZLY21u
dU6REIsQSmIkON9agzttkcsl6cOyZY08FbMQIpfczvpmllfub4YFgOG/ycvmO22i
veokOeynEU/PfiGAvKAKXk9sN2riuEhiUozqqvLwBbOLBUU0AfPcU9VjZBhGGpUW
pRObod2sDuJKv9ZgUDaG8KWXRGqfGbsSX8OW2opGjEUe8FiHHq+fDNU7kuLwFGX+
lXKTJhA0Hhfe87ozKJMG1LqSB+xHvTFVlU1lyPu2pt5LZvNmOQlOejlCNM0sFsog
QJ6CkSSzWWVEGQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:30:00 2026 by rpki-client