Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
File: Glyq86CZO3auE-EZE22_AGlpiRE.mft (raw, json)
Hash identifier: qA5KfhoutbsW/mwSmyQQTqVvvRP3cTI8kbql4pnXKPc=
Subject key identifier: B6:58:BF:CC:3F:35:88:19:1A:A1:4E:AB:B0:0D:23:6E:46:29:F7:17
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Certificate issuer: /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial: 019D9998F97D5072426DDFAAE5771F739834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
Manifest number: 0A04
Signing time: Fri 17 Apr 2026 04:00:32 +0000
Manifest this update: Fri 17 Apr 2026 04:00:32 +0000
Manifest next update: Sat 18 Apr 2026 04:00:32 +0000
Files and hashes: 1: Glyq86CZO3auE-EZE22_AGlpiRE.crl (hash: Z1GFw2htve4BobRPC0Y/i/85mQcVsROBxASYzzUW7pw=)
2: MR4tadWQqqW0E_JHwLfifWepFWQ.roa (hash: mUSw2oO1jY6CqzjCmRhvxhRtn1BibguKjyUPW0J26ls=)
3: cJL4Mgp1SQWUAEiREcdB0I-sJWQ.roa (hash: t7NhiF+NyV27XscI6RzA4LqkqVZugOUpSYy9Otwnrn8=)
4: m8Q5zJZ_AxfjsiGl8q1Fy-V2YKU.roa (hash: gmO3hyi9CFxj4bGHRGh2gH5C4A1U0mvXeUP9On396ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:f9:7d:50:72:42:6d:df:aa:e5:77:1f:73:98:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Validity
Not Before: Apr 17 04:00:32 2026 GMT
Not After : Apr 18 04:00:32 2026 GMT
Subject: CN=b658bfcc3f3588191aa14eabb00d236e4629f717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:a5:a0:06:e6:f9:4b:ac:08:6e:9c:8d:49:
f4:35:09:5f:01:9e:a9:04:67:61:7d:ed:68:01:f1:
cc:51:07:37:11:a1:84:d0:b0:9a:38:c9:c8:8a:e8:
c9:4a:d4:1e:bd:b5:53:ad:99:a0:fb:53:e7:93:e8:
ff:ac:59:86:e8:fd:0f:ae:31:b0:58:fe:e7:5c:2b:
bf:5f:19:5f:f4:91:74:cf:62:e2:a4:60:f5:04:8e:
f6:dd:a6:7e:dc:79:a7:bf:4d:f2:70:97:b0:79:0d:
d0:51:ea:8a:bd:e5:fb:a3:a0:ce:df:2e:66:4f:69:
21:bb:07:e4:6e:9f:c1:aa:c2:54:12:e9:4e:f8:e3:
6b:bb:ff:2d:a0:84:c7:35:48:6d:60:1e:de:48:a7:
39:09:ea:ba:a3:3d:1b:90:27:55:80:b4:54:65:20:
30:ed:62:0c:5c:ce:42:dd:e6:ff:be:b3:78:03:8a:
9d:7d:3c:9c:3b:fa:d5:e9:3a:65:37:51:2a:9d:f3:
52:e9:07:da:f4:09:5b:3a:97:99:15:12:52:56:ee:
12:64:a5:52:92:6e:37:a6:2a:7c:96:e7:49:af:e5:
c1:75:b1:2f:8a:c7:61:16:97:0f:80:31:88:f5:a9:
16:8e:9e:78:3c:5b:39:65:16:46:f0:a1:83:95:33:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:58:BF:CC:3F:35:88:19:1A:A1:4E:AB:B0:0D:23:6E:46:29:F7:17
X509v3 Authority Key Identifier:
keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2e:4a:58:30:1c:b0:b7:1b:75:be:6f:9b:7b:28:c2:04:70:
93:f4:fe:af:a1:6d:bc:f6:1b:21:66:e9:0f:98:71:17:c7:a4:
1e:d6:a3:4a:da:99:d7:0e:88:4c:26:37:27:b0:74:bb:4b:2e:
2f:e8:74:ac:e0:d0:6c:bb:c8:72:b4:91:a2:c4:eb:9e:9a:fa:
61:ec:10:3e:2e:c5:13:03:8d:df:30:65:65:e3:48:89:fe:97:
6e:7c:b2:fb:67:6a:40:07:4d:18:11:81:5b:8e:49:7c:e1:36:
48:42:2d:7a:c3:b3:45:42:be:0e:5a:ec:29:f2:b1:6a:f3:5e:
0c:ff:b7:50:3c:e0:ad:74:6a:bd:8d:6c:e7:b3:47:03:d5:72:
03:24:72:45:96:5c:f2:12:5f:58:81:ab:d1:cf:37:ae:8b:db:
05:2c:91:21:8d:ca:dd:6e:30:e2:a1:08:28:57:99:f5:bd:52:
37:6e:7a:98:49:95:b4:e3:e4:0e:0b:c1:7d:3c:aa:9d:00:81:
ac:e0:0e:28:36:b3:0d:6e:a8:86:3a:d6:05:08:da:f8:04:ee:
31:66:e2:e9:eb:ef:39:13:ec:4a:ea:5e:43:42:f8:dd:a2:49:
c6:b3:02:32:aa:c3:f2:13:9b:ab:36:47:aa:6d:fa:de:d2:df:
43:fd:d5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:03:38 2026 by rpki-client