Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: CkTtCehkE6kP3sguJ6uU5eopdHEYczPRhRTNSqDyLO0=
Subject key identifier: D5:43:C8:2D:29:A6:41:8C:67:60:0F:A1:58:1C:F2:00:A4:EC:23:6D
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 01A0CA0FE20CE6648F982DCDE8157277CD4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 18DF
Signing time: Tue 22 Sep 2026 17:00:33 +0000
Manifest this update: Tue 22 Sep 2026 17:00:33 +0000
Manifest next update: Wed 23 Sep 2026 17:00:33 +0000
Files and hashes: 1: 4aCUeUm4DYpWSQ7MSed7gWheYek.roa (hash: 3dUedzWX4ggiRmXBQIk9G5+5iMNmw05uaAyT3EfChQQ=)
2: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: Ts/SxPM0Z7RoGHGH+F+dKS1tb5g7Dzxqhd5rgl6utrU=)
3: LGAzazAsvBBjNUS-QipfT8L_rKc.roa (hash: D5sjWJz5RfyDQZFF/L4/mTT1RT97QDK5mPQgERHSqvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:0f:e2:0c:e6:64:8f:98:2d:cd:e8:15:72:77:cd:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Sep 22 17:00:33 2026 GMT
Not After : Sep 23 17:00:33 2026 GMT
Subject: CN=d543c82d29a6418c67600fa1581cf200a4ec236d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:14:e1:1e:69:28:88:65:5c:23:00:88:68:
58:87:18:fd:08:3a:95:93:82:84:67:aa:f3:b2:84:
06:33:3b:10:40:5a:0f:35:ea:3f:7b:27:4c:ac:9d:
a3:54:52:29:9a:f1:4e:fa:46:c1:02:74:94:01:05:
d6:44:fb:f0:2f:b3:2e:d9:6c:6b:a4:71:78:21:d5:
1e:aa:5b:05:68:9b:c6:0e:8c:46:78:1e:62:df:8a:
fb:1d:ef:2d:bb:0f:06:f7:83:83:1b:7e:a5:18:0b:
96:a5:cf:99:ee:8d:1d:a7:b1:55:ea:b5:ea:f1:e1:
92:68:ad:d6:66:ce:09:ce:cb:7d:e5:50:81:46:46:
3a:7d:3f:05:17:57:9d:d0:2b:89:fd:6e:b6:34:22:
28:dd:2e:b8:d7:aa:87:a2:b4:cb:8f:a0:98:f9:03:
70:12:cf:1c:c4:21:a8:89:a7:60:03:df:1d:1d:4d:
d8:64:85:af:b2:ff:de:54:3e:e3:48:20:9f:dc:a8:
ed:9b:e7:87:7d:6b:e5:67:86:1c:8d:79:0e:1b:68:
a1:2f:21:f5:dd:7e:c6:77:cd:b8:10:2a:d8:36:21:
3f:a4:81:69:cd:d4:18:b8:ff:bb:72:bc:fd:05:0c:
3a:6a:04:17:7d:30:ef:c9:ce:2a:b9:54:1d:f0:1e:
f6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:43:C8:2D:29:A6:41:8C:67:60:0F:A1:58:1C:F2:00:A4:EC:23:6D
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f6:0a:ab:5e:78:20:f5:a2:0c:47:29:31:9f:f9:6f:f4:df:
e8:9a:e4:9a:0b:8c:fd:40:a8:fa:a3:4d:c1:29:a4:83:fc:09:
31:d7:10:e0:a1:5f:ef:b9:93:9f:3e:20:d0:2b:04:dd:6b:2a:
63:3e:21:fc:ec:5d:97:6e:d4:a3:c4:46:5d:2c:98:dd:08:f8:
8e:58:91:ac:98:7d:5f:d3:c0:c9:61:08:fe:36:64:f5:15:94:
d8:9d:c3:ce:c3:d4:c9:d8:db:d6:44:2b:a3:87:54:b7:89:21:
d5:3b:db:c0:5a:9a:0f:8a:9a:ca:97:f6:81:fc:c3:fe:7f:ac:
e2:f3:63:b3:5d:3c:53:db:12:e1:40:ed:1b:72:d6:0f:62:a2:
84:d8:a2:d5:49:9a:98:ba:61:45:dd:4d:0f:e3:a3:e5:43:2b:
2a:af:b4:72:16:1b:e2:97:cf:16:71:b9:21:d7:70:e6:c1:db:
9e:83:bd:b3:da:65:42:8d:3c:11:e9:fa:9b:f1:27:b3:f2:4e:
1c:82:cf:87:8e:01:94:c1:a7:87:a9:de:0e:cf:f2:6f:54:4a:
d0:a4:19:24:e5:e1:ae:5a:19:0d:71:f7:ea:3f:fa:af:23:74:
ad:fa:0d:3c:bf:22:2a:6f:76:68:c8:5b:8d:d6:52:a5:48:02:
58:12:9b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:33:34 2026 by rpki-client