Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File: 1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier: pE4zQKclJ8qiObJ6CBCtRnVSA0wswV6gZ59YZ/yVCUw=
Subject key identifier: 98:53:D1:E9:CA:FA:73:F6:D8:F0:3C:9C:1D:AB:AE:B7:CE:52:BE:71
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 019D9AE2A86872402524D7026846E6639D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number: 0859
Signing time: Fri 17 Apr 2026 10:00:38 +0000
Manifest this update: Fri 17 Apr 2026 10:00:38 +0000
Manifest next update: Sat 18 Apr 2026 10:00:38 +0000
Files and hashes: 1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: MoYc781i0iBR1xxl7aQCEJvLTQesE5/jHZurnDvzaZU=)
2: GpK1qyRmRdQTMv9rJuBvrLPAPCA.roa (hash: 6pjGKy0zNDxK6EGW3iKdJRBjUTjPWde8CyQwLbHqWIc=)
3: iTaV7elHXW3QykhmVM8s9S75IWo.roa (hash: I33OFLbbVy5ULnfJGK6BAuTPAY6ngasZNHORp7xBvjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:a8:68:72:40:25:24:d7:02:68:46:e6:63:9d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Apr 17 10:00:38 2026 GMT
Not After : Apr 18 10:00:38 2026 GMT
Subject: CN=9853d1e9cafa73f6d8f03c9c1dabaeb7ce52be71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:79:de:dc:a8:d5:d2:60:fa:6a:64:fb:91:
76:e7:53:97:25:08:b7:12:5a:58:dd:6c:fa:ac:e0:
a0:39:36:85:b4:3c:f4:88:9e:e0:58:52:7b:a3:92:
6d:a5:43:7d:f4:82:71:7b:3a:98:69:14:f5:08:74:
ff:b8:48:6d:2c:b9:ee:89:e9:60:8a:eb:c2:79:c2:
97:1c:f8:fc:19:88:b0:79:68:63:6f:91:1b:ad:5c:
b2:82:75:39:a9:3b:4c:28:fa:f5:d2:50:57:86:09:
66:08:0e:21:42:d3:45:72:fc:94:c5:76:4c:d8:b0:
6a:61:00:ed:b0:b3:e5:72:73:33:e0:f2:6e:ec:fc:
3a:e5:33:4a:bb:48:ea:17:cb:87:b7:81:b3:52:ad:
ca:0e:24:1a:bf:06:54:97:d9:09:54:72:2b:7d:83:
e5:a7:c4:b3:28:15:f7:c1:91:06:34:78:c7:d6:f0:
0e:24:3b:4a:6a:24:ad:c9:a2:ea:7a:9c:c7:b6:4d:
90:4b:93:08:5d:4d:ab:54:2f:f7:cd:b3:4e:28:dc:
be:d7:25:e2:15:b6:e7:35:51:27:04:55:c6:9e:17:
1a:d3:a9:3c:4d:51:cb:5d:ba:38:c8:05:4e:a5:73:
b4:24:25:16:5e:9c:ae:ff:a5:7b:20:62:8d:f6:43:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:53:D1:E9:CA:FA:73:F6:D8:F0:3C:9C:1D:AB:AE:B7:CE:52:BE:71
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d8:81:19:35:6f:ed:a6:98:13:0f:b0:fa:80:50:2e:72:23:
b6:98:90:c5:fc:0e:14:b8:a1:49:d9:ec:52:85:85:ef:bc:2e:
25:b2:77:1d:2e:a8:0a:87:8c:e5:5a:fe:57:2e:55:e3:7f:e2:
f4:32:14:8c:3c:27:6d:c4:b8:f2:45:c7:77:31:6b:ce:14:d4:
7e:40:8f:8a:2e:19:96:6b:eb:82:1a:0a:ff:c0:16:f3:35:d0:
c0:1d:f4:bf:82:b1:40:82:38:b4:97:aa:7d:94:75:c7:a8:9a:
8b:e0:85:5a:94:dc:bb:e0:52:bd:38:7b:7e:bd:dc:70:fd:46:
45:bf:2a:34:09:81:78:70:2b:35:4f:4f:52:1b:76:c0:f3:96:
9a:5c:69:61:7b:a4:fd:9c:f8:4a:f2:1d:4b:26:39:c9:f8:04:
e6:f0:8d:0f:65:5e:4f:89:b7:5d:d7:0d:ae:a4:38:16:0f:cb:
a6:12:53:81:ea:7d:bb:b1:1e:ea:e5:04:9d:94:7e:19:c6:bd:
1c:48:aa:80:86:78:00:d6:ca:04:b2:ae:4b:c0:05:5c:bf:67:
3b:d4:81:53:7e:20:3f:0e:80:7e:a0:c6:2a:3a:33:cb:40:ce:
b6:9a:9e:01:f9:45:6c:ee:d9:13:d0:1c:8f:94:ee:ac:15:f6:
4c:fe:60:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:58:02 2026 by rpki-client