Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
File: GLIwW_twBOUp1iOkd3G45uzQUdY.mft (raw, json)
Hash identifier: dl4+1OI4IipOd1EERkIZGv9MiycXX3LdWUCkJsDEFCs=
Subject key identifier: C4:45:B1:B1:F7:F0:21:57:2F:5B:EE:EE:BB:A3:1D:B5:5E:12:93:57
Authority key identifier: 18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
Certificate issuer: /CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Certificate serial: 019FA7BD411EF6CBA4ADF9AA76613A2EB0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
Manifest number: 039F
Signing time: Tue 28 Jul 2026 08:00:25 +0000
Manifest this update: Tue 28 Jul 2026 08:00:25 +0000
Manifest next update: Wed 29 Jul 2026 08:00:25 +0000
Files and hashes: 1: BsB1weTRtbb_w5a2aWqr7c8Cgpg.asa (hash: HwOzHFJxF3HhEQ9N7dXbh3+iApRhiXxh7m6fcvockMY=)
2: GLIwW_twBOUp1iOkd3G45uzQUdY.crl (hash: 3zkkuVF5RAkkhVJ38E2UIAQUlkqabjQ/3LhSKmemxeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:bd:41:1e:f6:cb:a4:ad:f9:aa:76:61:3a:2e:b0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Validity
Not Before: Jul 28 08:00:25 2026 GMT
Not After : Jul 29 08:00:25 2026 GMT
Subject: CN=c445b1b1f7f021572f5beeeebba31db55e129357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:8c:d4:f9:05:d7:95:69:6e:a5:81:ec:64:
11:e9:54:c7:d0:0b:50:31:b5:68:f2:c8:3f:e1:70:
b0:71:28:ee:8f:7e:e9:8a:53:ee:e4:6c:3e:ec:97:
38:99:7e:9f:e3:a2:cb:c6:d7:f8:f1:6f:47:0d:8b:
aa:e2:45:c2:0f:ad:c4:0f:32:39:38:0f:8d:26:31:
63:79:34:ca:fc:fe:65:e7:bc:0b:be:c3:6a:06:b7:
db:98:56:75:bb:14:36:62:cb:ca:76:c4:b8:da:e4:
9d:3b:80:cb:d9:0f:f6:ad:2a:b2:ce:ce:cf:8a:a9:
24:dd:3a:bf:06:74:55:63:9d:fd:86:11:ea:ee:6b:
95:50:d3:f5:14:5a:a7:ca:42:2c:bc:56:06:0e:e8:
77:64:95:25:69:28:21:c9:bc:6f:89:45:ac:e0:2c:
69:73:70:f5:13:ea:f0:27:cb:89:cd:05:1c:97:e1:
cf:bb:b7:44:fd:89:fa:33:f0:e7:b6:ee:19:a0:3c:
92:41:d6:e8:67:6b:92:95:b2:b7:10:89:d5:40:0a:
01:58:ab:52:3c:32:b6:7a:04:6d:82:b0:96:c3:dd:
2b:28:d8:46:88:b1:e4:f3:2e:fd:d8:0f:7a:cb:7a:
e5:ab:ba:7d:81:d3:e2:06:09:a7:81:ff:e4:c2:b1:
39:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:B1:B1:F7:F0:21:57:2F:5B:EE:EE:BB:A3:1D:B5:5E:12:93:57
X509v3 Authority Key Identifier:
keyid:18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2d:da:bd:5a:04:b5:b4:f6:9c:76:f9:10:05:8e:69:8e:a0:
05:52:e7:3e:37:f0:31:94:73:45:7b:d0:a5:f1:6f:73:d9:c1:
1d:b3:2b:3e:90:a6:79:2a:10:0d:2e:45:be:9c:0d:27:ed:59:
ae:bc:d7:cf:64:01:b9:71:8c:94:51:b3:b1:80:70:9e:95:c9:
97:7e:63:ea:67:59:08:7f:54:cd:f0:3b:c1:ea:34:23:78:7c:
a7:21:bd:8c:8f:37:6c:a4:90:7f:93:a1:73:bf:e0:d5:f1:18:
54:02:38:d2:26:1b:d8:7f:03:7e:3d:47:29:b6:32:40:56:69:
0c:b1:c8:34:eb:d7:e4:06:35:ec:ba:1c:1c:0d:3f:ea:70:10:
84:fb:94:bd:15:21:a2:85:13:ae:78:e6:85:db:c6:da:89:e4:
db:6f:da:b3:67:21:16:0e:43:06:0e:54:a1:4b:fc:58:b8:64:
41:88:56:cc:a7:5b:78:09:17:79:13:b5:70:31:53:58:cd:73:
e2:4b:03:96:08:61:5a:4f:51:14:40:96:99:ae:d8:bb:80:2d:
9d:9c:dd:44:8a:00:24:30:75:4a:23:ba:db:54:a6:72:0a:8b:
e0:1e:dd:20:61:6d:06:2a:74:e6:a7:85:8e:ba:ff:54:74:fc:
27:55:d9:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:13:38 2026 by rpki-client