Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
File: GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json)
Hash identifier: 8uEWSMW5pbDtiBXt7tmTeph+btuTXTp3wO94jtqrgPM=
Subject key identifier: 6C:86:3E:1D:18:D9:62:4A:BB:33:89:E5:1B:D2:A9:4F:DD:47:26:7B
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Certificate issuer: /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial: 019D9AE37859A519FD13606ECF8AA4BED379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 10:01:31 +0000
Manifest this update: Fri 17 Apr 2026 10:01:31 +0000
Manifest next update: Sat 18 Apr 2026 10:01:31 +0000
Files and hashes: 1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: xIYLbuCO4ixsGgQvIkOKziiVMYaQETFnGKs1z5fGbi0=)
2: pregM6BDoh2HWEQHPv67MtqnAfQ.roa (hash: De/BoyOlsQu9RdcTHEChfgcsiNtul5qAGlcozd5f7DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:78:59:a5:19:fd:13:60:6e:cf:8a:a4:be:d3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Validity
Not Before: Apr 17 10:01:31 2026 GMT
Not After : Apr 18 10:01:31 2026 GMT
Subject: CN=6c863e1d18d9624abb3389e51bd2a94fdd47267b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:9c:7e:89:f4:03:6f:19:6a:4c:93:4f:52:
da:75:67:6a:37:90:e9:91:f3:6a:1c:ab:9a:2a:1e:
08:30:a1:79:92:ea:f7:71:76:92:4c:d3:c3:74:91:
95:a1:c1:ff:73:37:19:97:25:bc:63:e9:09:2b:f2:
8a:1f:ef:8f:3a:de:25:0b:a3:5c:83:31:2a:b7:0d:
68:e8:a4:0b:8e:e8:bd:13:ab:33:10:90:a7:b3:50:
f5:05:e4:be:9b:9f:11:16:ce:b1:e8:4e:d7:29:40:
b4:ea:6c:01:d9:67:ee:59:0b:0f:99:59:c8:da:e5:
54:41:b4:74:76:8a:19:e2:ac:4c:80:40:3f:64:2d:
10:71:51:e2:49:df:70:12:aa:4a:e6:fa:0e:ad:41:
98:ee:ba:ea:0c:56:9b:17:b6:b1:cc:a9:8b:c4:90:
09:6f:d4:fd:08:08:33:38:b9:5d:2c:68:f3:08:1b:
a7:78:c8:eb:40:a1:87:94:c2:7b:3f:b8:9d:a3:36:
b4:85:66:c5:77:4e:bc:d3:a8:6c:b5:3c:43:73:d8:
3b:84:60:a1:4e:94:8f:a1:20:d1:07:0e:f1:b8:5d:
01:7b:55:a5:96:cb:7c:bc:1c:b3:2d:62:3a:48:a6:
75:dd:31:ba:ea:f6:26:4b:0e:1c:0a:3f:18:a3:76:
c2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:86:3E:1D:18:D9:62:4A:BB:33:89:E5:1B:D2:A9:4F:DD:47:26:7B
X509v3 Authority Key Identifier:
keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:71:2f:77:ef:ac:98:42:72:30:c1:83:c4:bd:ca:10:53:93:
57:a7:26:5f:ed:2e:ff:53:ec:b5:45:76:25:32:f3:f0:33:6f:
56:63:0e:76:b9:91:10:9c:12:56:75:4f:f0:bd:d4:d7:fd:8e:
0b:78:c7:7b:68:4e:d8:ea:60:f9:4e:45:d5:1c:7c:33:ff:44:
a2:47:32:4e:9a:df:ae:6c:56:47:51:0b:0c:30:11:01:44:62:
11:1d:90:0c:1f:24:f9:11:eb:e3:0b:39:d7:5d:be:1e:dc:2e:
8d:d1:02:73:f9:bc:91:02:e4:0b:22:5a:ba:f4:2c:54:da:9d:
b7:fe:85:ef:1a:21:32:ad:9d:e0:51:e0:01:12:86:f3:50:b4:
c6:e1:e5:fe:10:40:e1:4f:bd:35:f3:90:bb:66:7c:51:e3:2e:
87:ba:d6:db:b8:a6:5b:a7:96:e9:39:9c:08:e9:d1:c0:c3:18:
94:d2:f8:11:2b:3d:37:be:af:73:d2:d1:6b:8d:c0:e7:38:56:
b2:00:f8:d0:b1:41:13:cd:0e:f8:c8:cf:4e:fb:b6:c4:89:a7:
d9:b5:12:e9:29:f5:2e:d5:db:ee:ea:a1:af:19:05:1b:67:d8:
30:77:ca:fa:49:1a:91:ea:18:94:3b:14:b3:55:f3:81:a0:19:
15:37:f9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:36:50 2026 by rpki-client