Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
File: GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft (raw, json)
Hash identifier: oJFjlt2Qa10bQlxxJJI2du9BkFoUj/k7KzsM+QR31mE=
Subject key identifier: 35:E0:DF:B6:2C:91:25:81:4E:14:C5:F1:C4:05:C3:FD:36:81:F8:A7
Authority key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
Certificate issuer: /CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Certificate serial: 019D98F503DD748A5D31F5ABABD3F1EA61E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
Manifest number: 12BC
Signing time: Fri 17 Apr 2026 01:01:27 +0000
Manifest this update: Fri 17 Apr 2026 01:01:27 +0000
Manifest next update: Sat 18 Apr 2026 01:01:27 +0000
Files and hashes: 1: GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl (hash: 7H66SxtMo6U/XdPdF/NMBNjJLngDaqWwbivdkzTqy9g=)
2: WwK0wQVJ37gM0FPBexlboGpvdWY.roa (hash: 8GMUVCoh7go5d/bcS0qlu+v+yNBlwVof7wqc0z0ILNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:03:dd:74:8a:5d:31:f5:ab:ab:d3:f1:ea:61:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Validity
Not Before: Apr 17 01:01:27 2026 GMT
Not After : Apr 18 01:01:27 2026 GMT
Subject: CN=35e0dfb62c9125814e14c5f1c405c3fd3681f8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:59:6e:9a:2e:a5:f8:94:48:26:0b:b9:09:d3:
08:81:eb:86:82:26:b6:b9:52:ee:9f:72:08:a7:b2:
1d:d3:5d:04:94:9a:2c:e4:e6:1c:40:56:7a:60:64:
cc:fa:aa:5e:e6:31:3e:be:42:3b:48:33:38:83:45:
15:35:92:d4:d4:43:a6:bb:d8:44:cf:f3:50:fd:14:
84:3c:e0:ff:b6:c3:4c:86:08:e9:47:9f:32:3b:c1:
f3:de:61:c1:4f:79:49:a5:5a:8f:10:03:e4:77:ec:
70:ff:3a:8a:ee:80:81:63:97:36:f5:86:e3:7f:20:
c6:7d:c7:0b:97:f3:ad:20:d7:f6:7c:f0:1c:7b:30:
9f:5a:1f:d6:10:ad:df:70:e0:d3:ad:71:fa:39:d4:
4a:00:4c:76:c1:e4:96:78:89:bd:70:54:d9:17:51:
74:26:bf:d7:33:63:89:36:64:b8:45:e3:b1:9a:02:
20:2e:4c:3e:d9:2a:eb:f2:51:65:fa:ce:2b:c4:97:
06:db:bb:21:dd:5f:da:23:78:1b:96:bf:69:36:fe:
58:da:2f:d1:1a:6f:f2:f2:ae:af:05:c1:38:ca:b1:
7c:8a:a1:7d:c0:bf:35:23:84:68:30:df:46:d1:cf:
d9:68:1e:c2:a6:1e:87:1c:2d:a0:55:bf:85:4c:48:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E0:DF:B6:2C:91:25:81:4E:14:C5:F1:C4:05:C3:FD:36:81:F8:A7
X509v3 Authority Key Identifier:
keyid:18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:a1:2a:68:30:e7:35:67:20:52:0b:84:ce:0f:f8:4a:40:93:
f3:7b:1f:6d:60:4c:fb:a1:a5:16:5c:16:0f:fa:f5:31:9f:f0:
62:e7:0b:27:dc:1f:8f:53:bd:4b:e7:8d:ac:98:78:06:4b:c4:
b8:e8:be:5b:1f:53:03:a9:75:3b:60:e1:f9:1e:d6:8d:06:c7:
4c:95:f6:89:63:43:06:98:54:a1:55:28:c8:cb:01:c8:18:1c:
7e:38:07:42:c2:75:09:d6:e4:f9:ba:5a:a2:3e:47:d6:7e:40:
99:b5:eb:6c:41:de:11:89:ca:e0:16:b6:31:13:0e:f9:96:6f:
69:77:ac:6a:25:21:0c:49:ca:6f:2f:fe:32:8a:47:f0:b5:73:
a1:42:f3:b5:89:a8:66:0f:8e:8f:7e:91:7c:dd:8a:a0:b5:c4:
02:1c:83:10:bf:8f:8f:6d:93:e1:fe:30:54:2e:1a:da:8d:f6:
56:1d:43:e0:70:4c:1c:06:2d:87:06:6f:bf:1a:be:ab:f5:9c:
72:62:a0:e3:64:ee:fb:6a:2b:21:46:45:09:26:bf:c3:3b:7e:
b6:19:ce:fc:76:cb:f5:d2:30:81:1d:af:9f:1a:09:2e:02:33:
2a:d6:0b:50:97:e5:9d:fc:c3:2f:4f:44:8b:46:2b:b1:ee:ea:
c9:3c:c0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:13 2026 by rpki-client