Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json)
Hash identifier: FQ5oE3yGlGF8BbLX460PmmZiIBBXYHrksIw2cy5fCgY=
Subject key identifier: 09:C3:92:B6:3E:D7:63:64:DB:44:E9:86:06:33:D9:05:25:F8:41:26
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 019CACB5717B1FD98ECE109DE68D876E03B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
Manifest number: 06FD
Signing time: Mon 02 Mar 2026 04:01:37 +0000
Manifest this update: Mon 02 Mar 2026 04:01:37 +0000
Manifest next update: Tue 03 Mar 2026 04:01:37 +0000
Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: XX8CpgmfzTCmOa+N+8zmrvnD+IzZVIqr/5QohSPeLxY=)
2: ZYe946WWsJLWYqwE2jrnQ5CvbLs.roa (hash: YzJAKJVzdhVwg2Wfzuv11ahwmdOVCIuLQiQ88WgRMJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:71:7b:1f:d9:8e:ce:10:9d:e6:8d:87:6e:03:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: Mar 2 04:01:37 2026 GMT
Not After : Mar 3 04:01:37 2026 GMT
Subject: CN=09c392b63ed76364db44e9860633d90525f84126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:49:ce:91:cf:aa:af:8e:0d:07:cc:8a:ac:fe:
ca:fe:78:81:33:95:1e:48:cb:61:2b:c2:70:2d:10:
c1:3c:5e:40:ce:67:1d:6c:c2:4b:01:e2:61:50:77:
77:36:18:06:f6:49:af:61:57:51:38:8a:99:c4:7f:
23:63:a7:ab:7b:a8:3b:7a:61:a5:ef:db:69:d6:78:
1f:c1:89:75:c5:a9:7c:ba:2b:20:9c:06:f0:0e:da:
a8:7c:8f:c9:bf:05:67:75:24:7c:4f:4e:54:02:46:
fe:15:f3:b3:29:60:44:89:8a:88:5f:e5:0c:51:c1:
12:6b:0e:08:1d:a3:10:70:06:c2:f0:f9:2b:ae:e5:
d1:df:71:48:19:a9:cb:32:e3:30:83:46:c5:f0:40:
8b:b9:96:96:fc:8e:1c:f0:a1:84:16:98:4b:cc:4e:
58:7f:5b:65:65:79:38:fc:79:cf:f1:4d:2d:3d:f8:
f5:11:14:95:7a:90:0d:2b:dd:28:d1:71:c6:2c:e8:
b8:48:f1:77:87:05:48:bf:a9:6f:64:8e:e7:e6:bc:
3f:a3:84:de:6c:9d:73:81:72:47:4e:fe:ee:cc:e6:
e2:b6:5c:2b:61:35:59:20:d9:a8:5d:84:aa:e3:ba:
f3:fc:c4:14:6e:c2:17:98:bf:35:d7:9d:ec:7c:e1:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C3:92:B6:3E:D7:63:64:DB:44:E9:86:06:33:D9:05:25:F8:41:26
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:58:61:cb:7b:83:09:2a:2a:e9:15:d7:30:e3:8b:93:82:a6:
60:4a:26:ad:e0:74:0e:82:ae:62:b2:bb:6b:91:c4:a2:23:7f:
36:17:3d:04:0d:ca:21:f3:26:5e:6e:13:f4:49:b8:7c:d0:45:
73:29:f5:c1:43:92:64:8b:6e:1f:55:7c:4f:8e:5c:49:75:db:
aa:7f:50:5f:86:d9:65:c1:e0:db:a5:e8:73:b0:c3:ae:ad:e3:
af:e2:f7:84:95:68:3d:c0:d1:ed:91:32:37:51:06:af:b9:3a:
14:e9:50:fd:25:e8:35:ba:87:d6:df:66:ec:99:56:a9:67:bc:
04:f4:26:6b:e7:6c:cf:0d:e4:ad:0b:ec:92:09:60:73:08:25:
48:73:4d:f5:00:26:28:df:c7:d4:ba:dd:0f:18:f3:49:92:b8:
73:4d:cb:c5:41:9b:f6:ae:d3:9b:bb:75:ab:ec:74:4f:71:32:
34:ce:43:8c:a0:ac:b0:6d:ba:6e:06:3f:ef:70:0f:d1:c3:2e:
5f:23:1f:cf:66:f5:c7:c4:2f:39:34:d3:d0:2a:15:0b:11:46:
41:7e:35:2e:38:6c:72:08:23:c8:32:53:b0:1e:0a:87:03:41:
e5:3a:62:5f:92:9c:ea:82:d5:6f:94:c5:16:8a:5d:c4:44:5e:
87:24:8e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:36 2026 by rpki-client