Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
File: GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json)
Hash identifier: 1KogEof4jNyowIZRZPCR3yt4ig5jNRFWT3Hv7MpDDYE=
Subject key identifier: C4:83:7C:8B:4E:A9:70:34:54:9A:89:09:F6:F2:E2:ED:75:68:76:32
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Certificate issuer: /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial: 019CAF481B8BED6CA06B55814EDAA313A594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 16:01:04 +0000
Manifest this update: Mon 02 Mar 2026 16:01:04 +0000
Manifest next update: Tue 03 Mar 2026 16:01:04 +0000
Files and hashes: 1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: /xj1oDqrAaWLXEtqFJS1kNIbbtjoMFOo7OjCuOodd2E=)
2: pregM6BDoh2HWEQHPv67MtqnAfQ.roa (hash: De/BoyOlsQu9RdcTHEChfgcsiNtul5qAGlcozd5f7DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:1b:8b:ed:6c:a0:6b:55:81:4e:da:a3:13:a5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Validity
Not Before: Mar 2 16:01:04 2026 GMT
Not After : Mar 3 16:01:04 2026 GMT
Subject: CN=c4837c8b4ea97034549a8909f6f2e2ed75687632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:9d:7a:51:0b:cf:6f:70:0c:a2:57:9e:30:
49:b9:0e:dc:5d:59:50:b3:09:93:b6:9a:95:a5:a9:
08:09:1b:ff:0c:ab:52:b1:cc:d9:72:f1:90:d9:85:
fa:67:37:da:58:a9:d8:cc:0c:cf:b9:c9:43:e4:51:
2e:ae:45:44:42:cc:45:21:5a:6f:a1:5e:87:2f:e4:
2d:fd:06:42:83:be:a1:0a:69:d7:de:76:02:91:7f:
e0:b0:41:8d:b8:a4:c2:8d:2b:54:66:d1:07:e6:34:
63:94:b1:1e:63:c7:80:25:bd:df:f1:a9:f4:a4:52:
13:02:60:cc:17:f7:27:57:2b:30:66:f1:57:d9:24:
d5:46:61:0b:0e:a4:ef:dc:c8:05:90:ac:d8:13:e7:
10:9c:e5:ad:bd:11:4a:00:7f:f1:c6:f7:9d:de:28:
93:24:2b:8e:90:79:f0:a1:1b:87:32:23:bd:3e:cd:
d8:3f:74:ae:dc:ea:77:9d:97:8b:16:20:f3:b6:bd:
e7:55:40:8c:b1:83:d1:86:cd:19:7a:c7:28:b4:1f:
c9:ea:1d:4c:ac:38:ab:5d:e5:50:89:96:9b:da:91:
98:41:1e:35:d0:2a:6e:7a:38:c4:ca:b7:0c:d7:0b:
af:46:15:80:29:54:70:33:bc:69:95:02:01:7e:73:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:83:7C:8B:4E:A9:70:34:54:9A:89:09:F6:F2:E2:ED:75:68:76:32
X509v3 Authority Key Identifier:
keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:64:40:d7:cc:a8:16:f2:af:b0:d7:48:0c:8f:08:23:dc:f1:
23:98:64:6c:09:fd:b6:2e:6b:99:9f:e9:f1:c4:03:88:fa:d9:
0a:55:9e:ac:b7:82:aa:e9:b1:96:b6:85:c1:6f:57:29:2a:84:
35:97:a0:b3:ed:75:4f:1d:f4:f2:ad:9d:76:c9:4d:6f:82:d2:
de:cd:da:38:c0:c3:af:23:12:e2:eb:0f:de:18:b1:7c:5e:ca:
11:78:88:6a:b8:01:47:d5:6c:ba:70:94:9f:c6:27:4b:31:20:
c5:ee:38:80:06:b2:fe:89:37:fe:e6:38:c2:f2:f0:5f:4c:3b:
d5:eb:65:c6:1f:38:50:29:3c:c0:9a:c1:d3:7e:34:a7:55:71:
87:eb:e9:91:7f:87:71:73:95:da:6d:fb:a0:0f:3a:6a:f4:22:
09:47:80:db:1b:52:c8:1f:92:91:3e:07:8b:6b:06:06:a4:d3:
87:a7:78:d4:18:0d:fc:0a:37:a7:53:0c:a7:d4:82:0b:52:35:
f6:dd:b6:de:6f:b8:5e:d7:f0:9a:80:06:e0:7b:f1:74:e1:2e:
28:c5:c0:ba:45:e7:9c:a2:3d:86:78:3b:ae:ac:14:7d:b5:1f:
b9:67:6d:35:97:6f:ea:fc:6e:41:f3:57:2f:a6:61:80:0a:c6:
1e:af:fc:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:59 2026 by rpki-client