Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: oebCmBBC8yo8JFQAHP+qqtWkob5mPVrmnX/74hnLyvE=
Subject key identifier: 66:18:59:85:55:81:E1:10:6E:60:17:BC:34:E8:9A:B6:15:02:72:B4
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 019CABA21E0DAFD09AFF5448B1FE365CA594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 16BD
Signing time: Sun 01 Mar 2026 23:00:54 +0000
Manifest this update: Sun 01 Mar 2026 23:00:54 +0000
Manifest next update: Mon 02 Mar 2026 23:00:54 +0000
Files and hashes: 1: 4aCUeUm4DYpWSQ7MSed7gWheYek.roa (hash: 3dUedzWX4ggiRmXBQIk9G5+5iMNmw05uaAyT3EfChQQ=)
2: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: jLfA6b6Hgh7dMhWQ+G6l5arJe2R4eeg/bnjFcO/lK0E=)
3: LGAzazAsvBBjNUS-QipfT8L_rKc.roa (hash: D5sjWJz5RfyDQZFF/L4/mTT1RT97QDK5mPQgERHSqvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:1e:0d:af:d0:9a:ff:54:48:b1:fe:36:5c:a5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Mar 1 23:00:54 2026 GMT
Not After : Mar 2 23:00:54 2026 GMT
Subject: CN=661859855581e1106e6017bc34e89ab6150272b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:43:45:03:c5:ff:b1:ea:f4:db:4b:19:e6:
90:78:18:f2:61:ee:60:3c:0b:84:ac:2d:ad:c4:94:
9d:45:20:0f:cf:41:a0:74:53:88:42:b0:41:ae:d7:
b3:64:e5:0e:ec:7f:80:dc:a4:ef:d9:99:a3:6c:36:
d7:b7:76:49:d6:b1:5c:cd:b4:96:01:1e:c1:71:c5:
d5:dc:d0:cc:6d:ed:d3:5f:8b:52:50:d2:36:7a:b7:
c6:ff:c9:bd:4e:a9:0e:9c:e7:04:4f:97:0d:e1:29:
ca:db:d8:f0:fb:40:f5:c6:f1:1e:4f:42:5b:12:ae:
1b:ed:1a:b7:22:e2:ae:cb:ee:1c:97:0c:b4:5e:7f:
ca:6d:a0:3f:ea:cb:3d:f7:26:ed:d3:c1:19:96:0a:
b3:ec:4b:f7:45:fe:c3:be:85:4a:64:f4:21:dc:b3:
34:a5:7e:ff:42:59:ff:24:b4:f2:af:f1:0d:54:e1:
8e:94:e9:21:be:48:1a:3e:97:c8:42:c7:44:8b:75:
b7:1f:23:3c:ce:cc:60:86:19:c9:4b:97:c5:d7:78:
5a:6d:d7:ce:8c:35:cf:0c:70:e6:55:dd:9c:24:b1:
a9:8d:e0:fd:cc:68:c6:4a:35:28:8a:54:c3:3b:73:
2d:d1:bd:03:9a:08:20:0b:ca:81:72:13:96:37:41:
0e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:18:59:85:55:81:E1:10:6E:60:17:BC:34:E8:9A:B6:15:02:72:B4
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:75:e4:70:38:57:fa:90:27:a0:a0:ab:0f:f7:93:50:4e:c4:
94:da:1f:19:9b:93:98:f3:c2:b0:c3:1b:8a:92:92:86:1f:1c:
f2:84:c7:7c:9d:df:48:70:f9:78:54:dc:1b:e4:7f:d3:61:a8:
17:ee:c9:10:56:1c:a1:b2:72:5b:63:04:96:43:45:04:f5:1f:
f6:ee:c9:d0:ab:18:ba:3f:ff:cd:24:e5:17:87:dd:2c:50:ca:
03:f6:c7:be:75:84:b0:51:70:ef:9a:fa:8a:2b:85:17:d2:48:
00:fa:62:3c:28:f2:c3:5b:c3:86:4d:ac:90:e8:5e:5d:ae:8a:
ab:8e:4b:ad:2d:d2:50:6b:16:26:b7:75:b8:23:a4:36:c2:7e:
cd:91:88:23:d3:8b:7c:eb:f6:1a:fc:f2:24:77:8d:11:93:89:
73:17:23:8d:92:34:18:60:ea:2b:a5:32:39:02:c4:f2:c8:8b:
06:7e:5d:ba:ac:cf:8d:fa:49:6e:d7:18:55:44:c4:6d:81:0c:
e6:48:9f:16:7e:5b:8a:72:42:c3:6b:29:60:82:9f:d5:4c:f9:
ea:9d:eb:9d:be:00:27:14:3e:8c:54:bd:16:9f:2d:09:2a:0c:
d1:cf:71:d3:0a:69:80:a2:38:d1:07:a1:8f:ea:82:d1:bb:37:
79:4a:a3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:19 2026 by rpki-client