Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: EHHQz4UvtHUGAEBdUZCnTUkgJXdse6GM+oDAgzfw+hE=
Subject key identifier: 86:B5:27:16:DB:A0:17:73:2D:37:8F:5F:08:D3:52:2B:2F:65:4D:6E
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 019EC0A40E7788C2DF9B2E6293578E785CA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 17D1
Signing time: Sat 13 Jun 2026 11:00:37 +0000
Manifest this update: Sat 13 Jun 2026 11:00:37 +0000
Manifest next update: Sun 14 Jun 2026 11:00:37 +0000
Files and hashes: 1: 4aCUeUm4DYpWSQ7MSed7gWheYek.roa (hash: 3dUedzWX4ggiRmXBQIk9G5+5iMNmw05uaAyT3EfChQQ=)
2: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: LOZ1zqB9DIwlNs8OKr24oOmxAAQOfOX5ESUmIieB4f8=)
3: LGAzazAsvBBjNUS-QipfT8L_rKc.roa (hash: D5sjWJz5RfyDQZFF/L4/mTT1RT97QDK5mPQgERHSqvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:0e:77:88:c2:df:9b:2e:62:93:57:8e:78:5c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Jun 13 11:00:37 2026 GMT
Not After : Jun 14 11:00:37 2026 GMT
Subject: CN=86b52716dba017732d378f5f08d3522b2f654d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c4:97:e4:d1:84:ac:bf:b9:2e:b1:6c:3b:a1:
00:8d:73:18:6d:94:68:50:56:87:2e:3f:e4:98:56:
85:11:24:4b:77:88:33:a7:5a:28:eb:de:05:33:a5:
9e:ef:b5:6c:86:71:66:4b:cb:92:35:da:fa:b2:37:
65:a0:53:c5:07:53:64:8d:f7:bd:23:a9:59:7c:74:
54:d8:a9:62:b2:87:5b:72:1c:10:d4:b2:5e:a5:75:
66:dc:15:0a:f6:95:80:a2:99:92:89:5a:4a:80:b9:
3d:84:98:60:57:90:b7:a2:19:b5:03:be:82:74:5c:
33:ee:38:b0:49:4d:2a:20:ff:81:9b:8d:67:19:7e:
0d:13:a7:ad:50:ee:7f:33:b0:67:4c:7b:44:07:0b:
7a:28:14:96:41:0c:2f:b8:a1:f9:60:91:3b:e6:3a:
72:f8:3f:e7:ae:ac:fd:1b:e3:b4:24:2d:30:2a:c4:
1e:1b:e6:c9:b2:cd:13:76:b5:04:7a:1b:8c:36:5f:
85:10:c7:35:39:fb:1b:82:63:f3:58:ba:0d:8b:6e:
07:bd:a6:0d:b7:3b:4d:cc:97:5e:ff:34:e8:2d:50:
86:f9:e6:fb:e1:ca:58:cb:04:d6:e2:d7:14:e1:55:
01:94:68:1d:71:23:e8:9c:5b:56:aa:4b:0d:ba:e3:
91:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:B5:27:16:DB:A0:17:73:2D:37:8F:5F:08:D3:52:2B:2F:65:4D:6E
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:11:96:1a:27:da:f0:74:0a:07:cd:d4:7a:3a:df:5c:fe:a3:
6c:81:c0:e2:8f:43:23:33:ca:0b:12:db:2f:8d:f4:5b:09:31:
51:a5:26:8a:ba:63:00:b0:40:3e:f0:6f:77:3d:b8:db:54:ee:
75:d0:94:51:d6:73:25:dd:a5:74:68:55:04:51:fd:40:b6:1f:
f3:b8:5c:20:58:01:e4:24:94:6d:14:d8:f3:22:30:3b:5d:04:
02:2a:00:1d:80:95:81:29:7c:1c:41:d4:04:42:2d:dc:55:28:
96:fa:e2:3a:6a:9f:d5:2f:46:4a:70:94:52:75:df:51:a0:69:
c9:29:98:18:c6:4a:77:4a:0b:97:d7:49:85:e9:52:99:e1:4e:
39:dc:2f:1b:3b:14:5f:a3:0d:73:d4:70:fa:8f:32:4b:fe:60:
fd:e9:0a:06:86:f3:f2:f1:f3:d2:ee:da:d7:a9:00:72:4b:53:
1c:c5:4e:ef:50:d2:36:35:63:aa:55:83:52:f8:b3:37:f1:61:
d1:26:cf:17:14:37:ae:f0:27:f6:a5:1d:4d:e5:f3:5d:0a:77:
6d:cb:b4:58:07:15:42:d1:a8:77:56:55:a7:cf:c5:47:ab:48:
aa:bf:8f:01:5f:47:10:80:7b:99:cb:31:98:48:be:8e:dc:c9:
08:c9:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:36:05 2026 by rpki-client