Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
File: Glyq86CZO3auE-EZE22_AGlpiRE.mft (raw, json)
Hash identifier: 3cSm9Rdizqmv13pxkMIyT8Tj1EmUrlrN0BskK8OCEWA=
Subject key identifier: 52:F7:57:44:49:67:69:0C:34:72:74:36:AA:13:85:76:E3:0C:94:7F
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Certificate issuer: /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial: 019CAA214CF7C21C75817AFE37D6ADBE5AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
Manifest number: 0988
Signing time: Sun 01 Mar 2026 16:00:34 +0000
Manifest this update: Sun 01 Mar 2026 16:00:34 +0000
Manifest next update: Mon 02 Mar 2026 16:00:34 +0000
Files and hashes: 1: Glyq86CZO3auE-EZE22_AGlpiRE.crl (hash: OmJhxmiHSEMbxWVgXJ+RgCqdh3Y4B/hqLmM9IVmP3Ao=)
2: MR4tadWQqqW0E_JHwLfifWepFWQ.roa (hash: mUSw2oO1jY6CqzjCmRhvxhRtn1BibguKjyUPW0J26ls=)
3: cJL4Mgp1SQWUAEiREcdB0I-sJWQ.roa (hash: t7NhiF+NyV27XscI6RzA4LqkqVZugOUpSYy9Otwnrn8=)
4: m8Q5zJZ_AxfjsiGl8q1Fy-V2YKU.roa (hash: gmO3hyi9CFxj4bGHRGh2gH5C4A1U0mvXeUP9On396ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:4c:f7:c2:1c:75:81:7a:fe:37:d6:ad:be:5a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Validity
Not Before: Mar 1 16:00:34 2026 GMT
Not After : Mar 2 16:00:34 2026 GMT
Subject: CN=52f757444967690c34727436aa138576e30c947f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:58:41:0d:19:30:0f:9c:9a:c3:ab:7c:6b:6c:
47:15:ad:11:aa:cf:3b:eb:63:2b:19:f2:33:ec:2e:
18:ac:1d:88:2a:1a:66:26:35:13:8c:24:c2:f6:87:
71:fa:05:36:12:45:10:59:ac:4d:ff:b1:89:dd:a1:
86:dd:01:f6:8e:23:68:5d:99:3b:49:68:e7:f0:11:
f3:cd:8b:65:92:6b:cc:75:f9:f4:57:81:51:19:33:
ed:97:86:97:d8:52:bd:26:0d:02:b3:6b:1b:9e:52:
31:1e:c2:90:ac:e0:0d:45:f0:e2:24:ba:8e:79:8b:
33:2c:16:2b:11:63:d0:1d:77:ab:82:bb:fb:40:14:
20:d1:b0:f6:6d:d5:a2:08:15:24:e4:d7:dd:f1:6c:
48:0c:ce:81:a5:9c:c4:60:12:b9:0c:3e:c6:17:8b:
f4:33:f2:b6:ae:25:6f:7d:00:20:9f:5f:8f:af:63:
bf:e3:1d:05:c0:16:f6:13:b4:64:2d:ea:25:f2:1a:
de:88:11:ca:bd:27:cd:be:84:29:d9:5b:d1:7c:9b:
91:63:b7:cf:3a:ed:c9:24:2c:52:95:48:80:cf:46:
d2:8e:35:0c:e0:a4:28:9d:de:a1:28:97:93:e0:e8:
c3:5b:0b:42:c6:28:b7:63:1e:c3:a7:5c:b7:8a:19:
2b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F7:57:44:49:67:69:0C:34:72:74:36:AA:13:85:76:E3:0C:94:7F
X509v3 Authority Key Identifier:
keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:47:34:7f:a8:3e:37:bd:80:b5:7a:61:a5:6d:1c:c5:55:80:
75:7d:d6:fe:60:01:a5:26:e6:c2:f5:23:68:53:3d:5e:7b:b8:
a9:0c:83:c5:37:e2:9e:ea:2d:7a:f7:bc:87:4d:ac:5e:4e:a7:
1f:17:ef:b0:c1:a2:4e:ac:bb:77:97:08:40:c2:65:17:37:c3:
5a:eb:b0:fb:a2:ae:1f:e0:a6:66:9a:53:47:11:20:d9:a6:63:
ca:c7:bb:1f:cc:3a:a1:c7:eb:70:41:0f:5c:b4:9b:6b:5e:66:
f4:39:99:68:0d:a8:26:f0:37:2e:cf:4b:7a:29:6d:ae:c3:a6:
a9:4e:ec:38:0a:54:8f:fe:ac:0c:f4:62:c5:d7:f6:d6:07:6b:
10:92:83:e6:f6:4f:bf:47:ad:27:1f:1d:2a:1f:c7:82:94:11:
65:2f:c9:62:cd:a2:55:68:4d:69:95:e2:c4:c3:3f:11:56:a3:
4b:0c:d8:47:60:b7:6d:10:0b:39:ab:eb:c1:6d:7a:20:f3:0d:
eb:fa:fa:b5:f6:0f:fb:3a:38:22:fd:d2:b4:0d:e4:f3:ff:1d:
a2:96:c7:16:02:e2:f5:f0:1a:f1:fd:23:41:b2:93:92:f3:7d:
fb:b1:47:32:78:44:7c:31:1a:60:ee:dd:48:37:87:d9:6f:71:
70:68:7b:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqIUz3whx1gXr+N9atvlrmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNWNhYWYzYTA5OTNiNzZhZTEzZTExOTEzNmRiZjAwNjk2
OTg5MTEwHhcNMjYwMzAxMTYwMDM0WhcNMjYwMzAyMTYwMDM0WjAzMTEwLwYDVQQD
Eyg1MmY3NTc0NDQ5Njc2OTBjMzQ3Mjc0MzZhYTEzODU3NmUzMGM5NDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVhBDRkwD5yaw6t8a2xHFa0Rqs87
62MrGfIz7C4YrB2IKhpmJjUTjCTC9odx+gU2EkUQWaxN/7GJ3aGG3QH2jiNoXZk7
SWjn8BHzzYtlkmvMdfn0V4FRGTPtl4aX2FK9Jg0Cs2sbnlIxHsKQrOANRfDiJLqO
eYszLBYrEWPQHXergrv7QBQg0bD2bdWiCBUk5Nfd8WxIDM6BpZzEYBK5DD7GF4v0
M/K2riVvfQAgn1+Pr2O/4x0FwBb2E7RkLeol8hreiBHKvSfNvoQp2VvRfJuRY7fP
Ou3JJCxSlUiAz0bSjjUM4KQond6hKJeT4OjDWwtCxii3Yx7Dp1y3ihkrjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFL3V0RJZ2kMNHJ0NqoThXbjDJR/MB8GA1UdIwQY
MBaAFBpcqvOgmTt2rhPhGRNtvwBpaYkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2x5cTg2Q1pPM2F1RS1FWkUyMl9BR2xwaVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny85NGNkYjItOTM5OS00NTBiLWE4MmUt
N2M1OTBiY2Y5ODFhLzEvR2x5cTg2Q1pPM2F1RS1FWkUyMl9BR2xwaVJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny85NGNkYjItOTM5OS00NTBiLWE4MmUtN2M1OTBiY2Y5ODFh
LzEvR2x5cTg2Q1pPM2F1RS1FWkUyMl9BR2xwaVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkc0f6g+
N72AtXphpW0cxVWAdX3W/mABpSbmwvUjaFM9Xnu4qQyDxTfinuoteve8h02sXk6n
HxfvsMGiTqy7d5cIQMJlFzfDWuuw+6KuH+CmZppTRxEg2aZjyse7H8w6ocfrcEEP
XLSba15m9DmZaA2oJvA3Ls9LeiltrsOmqU7sOApUj/6sDPRixdf21gdrEJKD5vZP
v0etJx8dKh/HgpQRZS/JYs2iVWhNaZXixMM/EVajSwzYR2C3bRALOavrwW16IPMN
6/r6tfYP+zo4Iv3StA3k8/8dopbHFgLi9fAa8f0jQbKTkvN9+7FHMnhEfDEaYO7d
SDeH2W9xcGh7sQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:12:04 2026 by rpki-client