Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json)
Hash identifier: wbXnsrZoOoBTwl9V3nq2wwdZ5UFHMwF/WdWEHQQJgQs=
Subject key identifier: 2F:7A:3C:1B:49:35:BF:2B:3B:85:0C:C7:A6:CD:AE:33:75:69:96:22
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 019D99995434BEC08A4049328F56C140F302
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
Manifest number: 0778
Signing time: Fri 17 Apr 2026 04:00:55 +0000
Manifest this update: Fri 17 Apr 2026 04:00:55 +0000
Manifest next update: Sat 18 Apr 2026 04:00:55 +0000
Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: KF3LUymdIt3OMpHzJW37HXiWHMzgckVR8TiyHPYJLA8=)
2: N5n0ytLXV6oUrTqSyTln_9PGiRU.roa (hash: X+Nw+EmTUCTqldwF7msA1+WaeJ9/NHAcZvVwnOkFNEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:54:34:be:c0:8a:40:49:32:8f:56:c1:40:f3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: Apr 17 04:00:55 2026 GMT
Not After : Apr 18 04:00:55 2026 GMT
Subject: CN=2f7a3c1b4935bf2b3b850cc7a6cdae3375699622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:7d:a8:98:9b:fd:19:cf:83:1f:18:9d:3a:
1a:11:9e:95:f7:1a:a8:2c:c8:db:6e:bc:e2:da:f1:
60:ec:a0:4d:55:9e:6d:9a:57:eb:dd:91:2e:f1:ec:
81:c7:12:aa:3d:9c:dc:db:68:4b:ca:75:9a:69:ae:
5d:33:b8:30:b0:3e:a5:69:32:a4:10:ac:02:00:ea:
af:2c:2f:32:c8:8c:75:b8:95:80:c7:6e:a3:73:ac:
6b:87:5d:a0:1b:14:a3:52:a8:ca:33:e1:a9:1b:74:
1b:3d:89:71:2c:ec:9d:c2:a3:99:06:fa:bc:be:5d:
fb:e2:62:a8:7c:5a:18:ad:fc:f6:b8:ae:07:bc:7d:
fd:ae:c1:76:4c:9c:90:41:3a:22:09:65:22:26:40:
ea:41:be:68:15:7d:10:46:99:15:d4:0a:03:16:ed:
6d:e4:f4:f2:10:f4:bb:d4:97:52:aa:8b:80:d6:ba:
2f:d3:3c:28:f5:90:f0:68:d9:7b:9a:84:7f:70:bf:
4f:aa:1c:ac:71:20:bf:ab:23:96:cb:89:4e:9a:a4:
db:c9:44:0a:f0:53:3c:0e:c5:c9:2c:ff:6b:8a:e1:
f4:9b:7a:8d:09:42:a0:aa:a4:ba:70:98:ae:93:ae:
76:79:43:50:4f:56:36:bf:ab:76:a5:98:2c:9d:34:
24:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7A:3C:1B:49:35:BF:2B:3B:85:0C:C7:A6:CD:AE:33:75:69:96:22
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c2:b5:af:9b:93:e1:51:f8:d7:aa:6e:6e:6f:71:37:64:06:
88:a3:b2:9a:49:05:6b:c5:4b:f0:7f:df:fb:e1:2e:65:99:33:
5a:bf:9b:73:ee:e6:c8:7c:a0:2e:f8:89:12:a5:9f:ee:2b:ab:
02:97:c8:7f:fe:6d:d3:1a:5f:b9:f9:d1:4e:31:40:a5:2e:59:
75:c5:e0:d2:34:be:c2:83:bc:b6:f5:38:60:70:e7:28:eb:05:
d1:2e:97:6e:95:50:ea:0f:42:d3:c2:36:73:0a:86:f9:47:b5:
a7:08:1c:7b:f8:79:d8:96:56:a6:98:29:b8:f7:bc:0f:9c:7f:
83:97:80:69:e2:74:8a:66:93:a7:ad:98:e7:06:e6:eb:76:ac:
c3:e3:06:ed:e8:24:af:a1:8b:6d:16:fe:36:97:42:2f:ff:3e:
4e:30:1d:66:d6:e3:aa:ea:58:71:8d:b9:6a:40:32:97:74:08:
5b:50:01:78:6e:90:86:43:e8:4e:29:0c:c6:1c:4b:a4:4c:de:
f2:58:ce:29:0a:bb:53:c9:43:cb:6c:27:a2:fb:a5:e5:af:8b:
5d:25:65:ac:53:67:cd:42:cf:0b:20:d0:81:0d:22:9a:23:fb:
9c:8f:de:58:8d:6e:e5:b6:7b:0a:9e:7a:ff:b6:b0:ed:6f:09:
98:1b:99:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:48:41 2026 by rpki-client