
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
File: GLIwW_twBOUp1iOkd3G45uzQUdY.mft (raw, json)
Hash identifier: DloKH96Dy53AHCgvPi9jdcIvDOcE1d+6deZudwKXcxQ=
Subject key identifier: AC:07:E7:44:24:1C:F3:8C:84:75:B4:35:83:3E:E1:5D:77:FE:86:C7
Authority key identifier: 18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
Certificate issuer: /CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Certificate serial: 01A0BDD50039F0F3821FE051CE71C7E6B2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
Manifest number: 042F
Signing time: Sun 20 Sep 2026 08:00:48 +0000
Manifest this update: Sun 20 Sep 2026 08:00:48 +0000
Manifest next update: Mon 21 Sep 2026 08:00:48 +0000
Files and hashes: 1: BsB1weTRtbb_w5a2aWqr7c8Cgpg.asa (hash: HwOzHFJxF3HhEQ9N7dXbh3+iApRhiXxh7m6fcvockMY=)
2: GLIwW_twBOUp1iOkd3G45uzQUdY.crl (hash: V1waRGloaZaKyM10kf8s8Qm+ZGqSt2oUbDJ3oKWA5M4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d5:00:39:f0:f3:82:1f:e0:51:ce:71:c7:e6:b2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Validity
Not Before: Sep 20 08:00:48 2026 GMT
Not After : Sep 21 08:00:48 2026 GMT
Subject: CN=ac07e744241cf38c8475b435833ee15d77fe86c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c3:7a:5d:4d:a4:ad:13:fa:c9:7f:48:6a:a4:
b2:ac:b7:c8:57:6a:2a:5f:27:91:ec:d3:52:b2:12:
81:24:e6:8b:98:95:ca:cf:1c:c4:6e:65:3b:6c:fc:
09:17:b8:8f:58:c4:3e:57:ea:a7:40:7a:ab:da:ea:
4f:83:0c:26:e8:57:48:fd:ba:03:43:c4:b6:8a:95:
17:e6:f9:18:2a:d2:71:6f:0d:aa:a1:ac:6c:70:cb:
a3:1f:87:bb:60:ef:f0:d2:b1:04:b8:69:49:49:8a:
4b:a8:9e:bc:e2:c6:fe:79:66:96:14:c6:c1:a6:99:
f7:cc:6d:dd:86:9a:16:07:dd:06:5e:c5:09:56:98:
83:a0:94:04:0f:db:dc:fc:6a:69:96:75:5b:f8:80:
46:f5:3f:01:a8:c7:c2:d8:44:1c:57:f8:b0:3e:cc:
5f:f7:f5:f9:aa:09:6c:50:7f:5a:86:b7:ca:9d:63:
43:bc:44:ea:e1:ed:f4:d9:b7:8f:00:0f:9a:a5:2c:
79:2b:20:a7:7b:8b:4d:ec:79:bf:a1:ae:a3:7d:e2:
b9:14:73:d3:9c:32:a7:58:61:33:23:b3:e8:58:87:
98:47:92:cd:15:d9:78:0c:b7:c0:75:a4:c4:ad:d8:
f0:42:a4:c0:1e:b0:0e:7a:58:69:71:31:93:c0:38:
e7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:07:E7:44:24:1C:F3:8C:84:75:B4:35:83:3E:E1:5D:77:FE:86:C7
X509v3 Authority Key Identifier:
keyid:18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:13:0f:cd:97:db:fc:74:15:2d:34:b5:28:f3:12:c2:8b:e2:
2c:6e:bb:54:c8:61:18:86:1a:38:4f:8d:58:90:d7:7a:18:a0:
c1:02:38:f3:73:a3:47:46:48:91:07:ef:44:ba:ee:ab:47:4e:
6f:d4:3c:7a:96:12:3e:8d:b9:23:03:37:07:9b:1e:02:7e:e6:
35:ee:09:51:4d:99:6a:52:fa:1f:5c:1a:b8:bc:77:96:a9:94:
4a:20:10:28:bc:09:ef:9a:1b:bc:1d:4d:5e:9d:0c:f4:41:db:
2b:28:23:07:29:a0:8d:bd:27:64:be:55:72:a1:ef:5d:39:f4:
9e:e9:2c:21:8b:4d:91:e0:66:e0:2c:1b:98:c9:bb:12:42:f9:
82:42:0d:d8:e4:54:c7:d2:aa:03:cf:e5:f9:cb:06:78:cb:a1:
f7:4e:28:4e:3f:44:df:f2:87:d4:42:11:1a:5c:fa:78:99:d6:
3c:2e:1a:02:aa:d0:bc:c2:4b:a1:7c:85:3c:ae:c1:c2:57:a0:
f8:ee:d0:96:3e:3e:9f:3c:6c:11:a3:07:d8:f1:43:35:83:5e:
9f:0e:25:d7:41:0f:f4:be:cb:91:85:40:5e:c5:06:cb:70:92:
fd:5a:0d:65:66:f2:09:89:0d:2d:9c:d4:b9:98:96:cd:f9:28:
cb:40:c7:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:52:43 2026 by rpki-client