
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
File: GLIwW_twBOUp1iOkd3G45uzQUdY.mft (raw, json)
Hash identifier: kQMc81wt+k0mqaXirRq2uJS4fhCami5FFFc20qcNOLw=
Subject key identifier: 46:55:1D:E2:E4:13:71:CF:B8:33:9D:21:2D:2C:EE:67:DF:5F:8C:99
Authority key identifier: 18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
Certificate issuer: /CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Certificate serial: 019D9C9A23FF0E1C3E29B4D50C22693E746A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
Manifest number: 0290
Signing time: Fri 17 Apr 2026 18:00:40 +0000
Manifest this update: Fri 17 Apr 2026 18:00:40 +0000
Manifest next update: Sat 18 Apr 2026 18:00:40 +0000
Files and hashes: 1: BsB1weTRtbb_w5a2aWqr7c8Cgpg.asa (hash: HwOzHFJxF3HhEQ9N7dXbh3+iApRhiXxh7m6fcvockMY=)
2: GLIwW_twBOUp1iOkd3G45uzQUdY.crl (hash: MHvQozkGfbZr9nEi7TU5TSwM1vnqcNV3IpIiJBlAGUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:9a:23:ff:0e:1c:3e:29:b4:d5:0c:22:69:3e:74:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Validity
Not Before: Apr 17 18:00:40 2026 GMT
Not After : Apr 18 18:00:40 2026 GMT
Subject: CN=46551de2e41371cfb8339d212d2cee67df5f8c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:d9:c4:f8:87:c8:c9:fc:42:dc:1e:f6:81:
67:76:22:38:e4:b2:5f:b6:9c:c1:e4:3d:4f:db:fc:
17:bb:c6:dc:ca:98:55:c4:64:1f:33:fa:b1:cc:f1:
42:a5:82:b0:8f:53:6c:a8:1f:11:d0:e5:6b:68:72:
51:54:7f:b1:13:fe:ce:31:b1:25:11:bb:ce:62:d1:
1f:6f:31:c1:0f:51:ff:b7:27:86:2d:50:5a:f7:fc:
8d:bb:97:e2:ba:9a:fb:b7:c0:88:66:ec:fe:c4:73:
4f:be:0a:f5:07:51:6e:6c:22:5a:bc:d6:25:b0:bf:
48:68:a4:71:4b:b5:14:51:7e:9a:bc:70:e7:97:27:
5b:ad:61:90:ff:b7:6b:a8:e8:11:eb:ea:8c:f8:eb:
8d:9e:04:a4:df:69:24:0e:1c:58:90:16:72:25:9d:
03:51:e3:c8:48:7f:b9:9b:cd:77:8f:dc:a8:ac:6f:
21:75:58:4c:d4:a5:9d:61:66:c3:b4:5b:df:42:56:
91:ea:bf:b0:32:4c:f8:14:6b:54:72:03:e8:40:29:
a0:b5:a3:92:f9:94:5c:d6:31:31:ab:d1:4e:df:cd:
d0:7e:de:c3:a0:46:26:57:28:94:99:e4:85:95:12:
2d:e6:cc:70:5b:1a:42:1c:de:3c:95:2e:19:79:81:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:55:1D:E2:E4:13:71:CF:B8:33:9D:21:2D:2C:EE:67:DF:5F:8C:99
X509v3 Authority Key Identifier:
keyid:18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:bb:ab:30:48:ef:09:6a:a8:8d:3f:cb:b8:2b:08:d6:77:79:
59:e0:59:49:af:e4:f6:5a:6f:9b:eb:ce:4d:03:03:bf:37:68:
9f:0e:dd:40:21:fd:0b:15:c3:ac:a7:82:54:d9:da:a2:61:ff:
66:67:68:04:46:6c:15:ab:d1:a9:51:2f:7c:0b:40:f4:a5:d3:
51:5f:a1:88:47:bb:02:df:25:cd:84:67:aa:cb:01:0b:87:5b:
7a:34:92:54:46:49:0e:07:b3:5a:5d:03:bf:9c:bc:61:26:6e:
f7:a0:81:65:77:80:1d:de:08:82:c9:47:94:e3:d9:fd:02:8e:
d7:6d:8b:75:9e:48:a7:d3:8a:a0:6d:df:f6:c6:42:cc:91:fc:
50:53:c9:5c:a4:a8:9a:66:66:d6:2c:57:c8:82:71:ad:dd:64:
84:4d:72:38:5c:2e:ef:10:59:75:ec:62:81:c6:4b:a6:0d:da:
c8:a1:22:3e:7a:88:c6:60:39:51:b3:a2:c2:3c:92:88:d2:64:
ad:54:d3:ec:0a:a7:46:74:53:38:cc:b7:c4:ff:65:d7:ae:de:
e1:79:6d:03:8a:b8:34:f6:a5:83:fb:a7:e1:c5:d8:74:ae:8f:
7b:50:73:af:65:ec:a3:98:ee:da:d6:76:b6:e8:83:c5:46:5c:
31:4e:e3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:59:31 2026 by rpki-client