Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
File: GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft (raw, json)
Hash identifier: 73LxM92x57XbWB9jr+7EnNOV9E69C40dEbAWtJ1kS58=
Subject key identifier: FF:BE:2D:10:70:8B:97:56:D7:F4:A7:7F:43:4A:93:57:62:30:83:AA
Authority key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
Certificate issuer: /CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Certificate serial: 019CAD59A65CE00A683205D4316E950FB438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
Manifest number: 1242
Signing time: Mon 02 Mar 2026 07:00:59 +0000
Manifest this update: Mon 02 Mar 2026 07:00:59 +0000
Manifest next update: Tue 03 Mar 2026 07:00:59 +0000
Files and hashes: 1: GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl (hash: SfLx1xRyMHxCkExixP2ug72kDIM05uNgU2dTVejmUSM=)
2: WwK0wQVJ37gM0FPBexlboGpvdWY.roa (hash: 8GMUVCoh7go5d/bcS0qlu+v+yNBlwVof7wqc0z0ILNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:a6:5c:e0:0a:68:32:05:d4:31:6e:95:0f:b4:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Validity
Not Before: Mar 2 07:00:59 2026 GMT
Not After : Mar 3 07:00:59 2026 GMT
Subject: CN=ffbe2d10708b9756d7f4a77f434a9357623083aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:0c:86:e4:bf:49:22:f7:a4:fa:15:43:b4:
b2:40:37:59:eb:d2:c1:15:c0:8d:b9:e4:6c:fb:05:
ba:a5:0e:e1:db:3a:86:57:2b:d7:06:c4:79:be:7d:
35:a9:6f:7d:da:2d:62:1e:38:39:b2:f7:ca:48:69:
94:6d:2f:b5:fe:02:6c:61:8b:45:86:2b:fd:b9:d6:
46:d7:d2:55:6d:bd:cf:81:49:c0:0d:4d:52:12:8e:
09:9b:90:c7:cd:40:05:87:fb:1d:ae:aa:18:c2:56:
2a:54:78:e3:b8:d9:b6:bd:85:7f:45:ac:80:c5:62:
7f:5d:db:4e:34:96:72:1e:b0:39:1c:9b:08:11:2a:
74:f8:e8:57:b0:83:bc:30:25:6d:54:b4:06:98:fa:
f9:c9:7c:48:84:8e:4d:eb:69:b1:ea:5c:07:f2:5d:
c8:52:c3:8f:8a:77:18:58:12:9f:0c:ba:ba:91:68:
72:aa:8c:df:58:23:4e:31:fd:24:07:09:25:50:33:
0e:b4:be:44:b5:ee:46:a9:45:fe:77:f5:f4:9b:f6:
f4:12:db:65:45:78:e6:20:c9:7f:b2:2b:31:cc:dc:
f7:ae:1b:4c:e1:bd:ae:54:f1:a9:5b:9a:81:5f:a3:
d3:14:5b:84:bf:97:d4:9e:c4:f2:da:7d:e3:47:d5:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BE:2D:10:70:8B:97:56:D7:F4:A7:7F:43:4A:93:57:62:30:83:AA
X509v3 Authority Key Identifier:
keyid:18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a9:2d:1d:b8:15:06:be:4d:55:af:43:82:d3:4d:df:49:d3:
cd:79:f6:30:6b:3a:7e:90:08:ea:4c:6f:45:b8:e0:56:be:dc:
25:8c:51:12:38:56:a6:c4:e5:dc:90:27:e4:8d:32:7b:06:a6:
af:25:9e:e0:5d:52:8e:e4:64:48:29:1b:dc:5a:ec:fc:36:26:
69:26:3e:70:1f:66:58:4d:e4:6e:28:a7:5e:99:e5:90:82:f0:
37:e4:a2:7c:4f:86:e7:94:15:fe:e0:2e:7c:ed:17:df:f9:bc:
9b:ef:7e:40:ba:38:42:71:80:5f:71:f4:52:48:6d:21:be:71:
e5:da:ca:65:37:00:4b:86:c8:26:85:d8:58:d7:42:e6:78:26:
a4:59:68:13:cb:1f:71:91:c0:1e:c8:14:b5:eb:d3:6b:2b:ab:
6c:ab:1d:9f:bd:ad:be:c2:44:a7:c8:17:bb:b0:7c:51:e8:53:
a0:26:4c:c0:55:04:db:50:3b:fe:d7:13:d7:d8:39:e5:93:ca:
fd:1f:a1:f5:32:56:a8:a7:a7:6f:f8:b1:2c:7b:cf:8b:f0:c9:
9c:25:7f:b9:83:bb:28:44:a6:20:59:54:a4:60:27:66:fe:c1:
a1:62:ac:38:76:05:13:f7:80:66:7b:4a:64:b6:7d:7b:9c:47:
af:ff:93:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:44:34 2026 by rpki-client