Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: 9YkoPyd5SN9tlTXH65zOIdeI/cVydzgjLRj0/QEChsk=
Subject key identifier: 66:A2:43:2A:D5:D8:FE:3E:07:3D:8F:54:BD:CE:27:6B:19:B1:04:CF
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 019D992B3022A39589157DA6CB1A5428AB4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 1738
Signing time: Fri 17 Apr 2026 02:00:37 +0000
Manifest this update: Fri 17 Apr 2026 02:00:37 +0000
Manifest next update: Sat 18 Apr 2026 02:00:37 +0000
Files and hashes: 1: 4aCUeUm4DYpWSQ7MSed7gWheYek.roa (hash: 3dUedzWX4ggiRmXBQIk9G5+5iMNmw05uaAyT3EfChQQ=)
2: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: 0jZIA7L280sBqKu81PO3d68ieahe1xnYkaWn+673dUU=)
3: LGAzazAsvBBjNUS-QipfT8L_rKc.roa (hash: D5sjWJz5RfyDQZFF/L4/mTT1RT97QDK5mPQgERHSqvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:30:22:a3:95:89:15:7d:a6:cb:1a:54:28:ab:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Apr 17 02:00:37 2026 GMT
Not After : Apr 18 02:00:37 2026 GMT
Subject: CN=66a2432ad5d8fe3e073d8f54bdce276b19b104cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:90:3c:0d:ee:a1:ec:ca:66:55:73:0d:dd:
29:30:aa:95:18:c9:e6:b8:68:d1:0b:8e:e3:98:d5:
b7:c0:30:75:1e:6f:ed:5b:63:39:c3:50:4c:46:52:
11:00:25:4d:39:ce:f2:da:cf:a5:d6:51:b6:b3:0e:
8b:65:ae:46:5c:e9:51:cb:f6:5e:38:3f:b0:67:14:
55:aa:14:3a:2d:d9:59:b6:53:31:c5:04:eb:d5:d8:
a6:08:a9:8f:12:5a:92:bb:96:dd:dd:b6:b8:2b:1e:
06:51:2f:3d:e9:60:c3:00:47:c5:39:20:3b:0f:86:
5e:b8:80:77:49:0b:b4:dd:b2:d2:fa:a2:d1:56:2a:
fa:98:7c:3a:ea:68:f0:56:39:6e:a8:c0:40:e1:61:
c0:97:d9:7d:bd:37:17:0b:cc:b8:e9:f8:e8:ba:c6:
69:45:1e:c2:ad:b8:70:11:50:e0:3e:c3:cc:da:83:
08:0d:a1:2b:c0:fb:aa:c7:37:97:72:3b:95:35:a4:
a3:63:f8:b4:da:b9:60:b8:27:ce:13:2e:d4:cc:c6:
11:26:79:86:f0:2e:c1:b3:95:1b:65:a5:ba:1b:8a:
c1:f8:9d:4c:7e:ca:cd:9b:97:96:4e:36:5c:25:5a:
ae:ad:5a:72:9c:b0:04:7e:f5:a7:f5:3d:e2:7c:07:
62:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A2:43:2A:D5:D8:FE:3E:07:3D:8F:54:BD:CE:27:6B:19:B1:04:CF
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bf:ab:1a:e6:ae:e7:9b:a6:51:4e:fe:be:87:ea:6c:bd:84:
3a:44:d8:71:1f:6b:6c:8c:6b:e7:39:a1:60:c9:af:77:79:d0:
fb:5a:1d:ef:5b:37:c5:fd:37:f1:10:bc:21:dd:a4:06:18:bc:
75:4f:b0:c1:bc:b1:4e:70:ee:b2:a9:22:ec:95:33:27:84:90:
31:34:07:8d:3f:52:f2:88:1a:cb:86:0a:aa:0c:e2:3c:4c:a6:
0a:07:b7:7d:62:a9:6f:ac:9e:2c:bf:08:a7:78:78:a6:f6:33:
c8:64:77:2a:84:1b:07:75:2f:b3:ad:71:35:9a:26:77:df:a4:
2e:44:e6:82:be:bb:f1:59:5f:b1:e6:50:6e:83:87:d0:68:69:
fd:2a:1f:04:ff:83:1e:27:9c:98:0d:c6:9f:7f:6a:9c:b4:a4:
ec:de:d4:2e:60:a9:bf:bd:b1:cb:3a:91:31:2a:0e:b1:db:8c:
2e:fd:17:0d:45:6a:63:3e:20:3a:3f:35:17:46:4e:b2:b0:b2:
2b:74:51:82:77:7d:c7:7b:a7:93:a0:f6:42:7a:34:99:90:22:
a8:7c:9c:25:36:f2:71:54:d9:22:a2:45:b7:e4:47:e5:59:53:
33:17:f1:1c:2c:14:2b:55:a0:19:b3:62:23:68:0b:5c:1b:b0:
50:78:4c:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKzAio5WJFX2myxpUKKtMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4Yjg4OWYwZGRiYjUyODAxZTJkMmU3YTJlYmUxMTY3Y2Fk
MzRjMDYwHhcNMjYwNDE3MDIwMDM3WhcNMjYwNDE4MDIwMDM3WjAzMTEwLwYDVQQD
Eyg2NmEyNDMyYWQ1ZDhmZTNlMDczZDhmNTRiZGNlMjc2YjE5YjEwNGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgWQPA3uoezKZlVzDd0pMKqVGMnm
uGjRC47jmNW3wDB1Hm/tW2M5w1BMRlIRACVNOc7y2s+l1lG2sw6LZa5GXOlRy/Ze
OD+wZxRVqhQ6LdlZtlMxxQTr1dimCKmPElqSu5bd3ba4Kx4GUS896WDDAEfFOSA7
D4ZeuIB3SQu03bLS+qLRVir6mHw66mjwVjluqMBA4WHAl9l9vTcXC8y46fjousZp
RR7CrbhwEVDgPsPM2oMIDaErwPuqxzeXcjuVNaSjY/i02rlguCfOEy7UzMYRJnmG
8C7Bs5UbZaW6G4rB+J1MfsrNm5eWTjZcJVqurVpynLAEfvWn9T3ifAdiFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaiQyrV2P4+Bz2PVL3OJ2sZsQTPMB8GA1UdIwQY
MBaAFBi4ifDdu1KAHi0uei6+EWfK00wGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQt
ZGJiNjRhNjgzNWFkLzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82ZTE5NjEtM2RhNi00N2MxLTliNmQtZGJiNjRhNjgzNWFk
LzEvR0xpSjhOMjdVb0FlTFM1NkxyNFJaOHJUVEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7+rGuau
55umUU7+vofqbL2EOkTYcR9rbIxr5zmhYMmvd3nQ+1od71s3xf038RC8Id2kBhi8
dU+wwbyxTnDusqki7JUzJ4SQMTQHjT9S8ogay4YKqgziPEymCge3fWKpb6yeLL8I
p3h4pvYzyGR3KoQbB3Uvs61xNZomd9+kLkTmgr678VlfseZQboOH0Ghp/SofBP+D
HiecmA3Gn39qnLSk7N7ULmCpv72xyzqRMSoOsduMLv0XDUVqYz4gOj81F0ZOsrCy
K3RRgnd9x3unk6D2Qno0mZAiqHycJTbycVTZIqJFt+RH5VlTMxfxHCwUK1WgGbNi
I2gLXBuwUHhMmQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:08 2026 by rpki-client