Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.mft
File: Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.mft (raw, json)
Hash identifier: mSHPH2U9fWrAewgOs1eCc4TlBlntSpRehKUkDD63gM4=
Subject key identifier: DE:B7:20:EB:7E:14:78:46:F1:AD:89:86:22:D9:6E:E6:3A:E2:31:76
Authority key identifier: 1A:5F:EE:44:C4:07:FD:0D:8A:49:53:0E:FA:E3:C2:7B:FC:8C:BF:59
Certificate issuer: /CN=1a5fee44c407fd0d8a49530efae3c27bfc8cbf59
Certificate serial: 019CA8D869C70D9C2807F8D904A6FCF03BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.mft
Manifest number: C5
Signing time: Sun 01 Mar 2026 10:01:20 +0000
Manifest this update: Sun 01 Mar 2026 10:01:20 +0000
Manifest next update: Mon 02 Mar 2026 10:01:20 +0000
Files and hashes: 1: Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.crl (hash: HUETkaXsfhw58Q3G0Fp7qKVapIb/9p6O1gDFHgPP7rk=)
2: IuR2fV6tf7K6Izd_TevUjm1QpPM.asa (hash: emvaUHAZKdAu3XX04l4AghDFW6GxkQO/OSarFY+vPUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:d8:69:c7:0d:9c:28:07:f8:d9:04:a6:fc:f0:3b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5fee44c407fd0d8a49530efae3c27bfc8cbf59
Validity
Not Before: Mar 1 10:01:20 2026 GMT
Not After : Mar 2 10:01:20 2026 GMT
Subject: CN=deb720eb7e147846f1ad898622d96ee63ae23176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:9f:14:22:b4:b4:8c:7b:8e:dc:c7:06:cb:
82:e0:64:ed:e9:b1:67:c6:66:2b:06:43:04:0e:d2:
02:c2:a2:3a:14:a2:bb:0d:4d:63:93:da:84:0a:2b:
52:b3:46:f3:35:a2:25:b8:b2:5d:c1:c4:62:a2:db:
06:23:f9:c0:5c:78:ef:c1:d6:12:f2:fa:fe:cd:02:
43:d5:77:dd:a0:67:ac:79:06:16:6c:5d:14:ee:59:
69:67:86:6d:3d:f8:75:1d:23:a6:51:01:1a:ad:d4:
e0:90:e1:45:1b:1d:01:a4:70:23:31:cd:a7:70:63:
7c:78:4b:06:b5:bc:33:7a:31:cd:b7:66:6f:e8:3d:
13:d7:29:6a:c3:29:27:0c:d6:f4:e2:fd:85:90:31:
48:7f:80:df:d7:19:76:1f:3e:e7:46:ff:81:6a:75:
b3:bb:a7:6f:d7:92:f4:3f:a4:25:9c:9b:7f:a8:e1:
ae:c5:c5:cb:e4:cf:1b:0a:2a:1e:e0:dd:79:cb:3c:
dd:c8:4b:2c:1e:54:a6:74:ba:a9:f5:d0:ef:be:7a:
fc:f3:b4:46:b0:fd:fd:0c:c7:61:e9:92:f3:16:84:
f6:05:d4:3d:65:3d:14:52:ba:b8:32:dc:7e:34:91:
4c:20:32:d5:b2:85:f6:4a:97:e1:21:02:dc:a9:c6:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B7:20:EB:7E:14:78:46:F1:AD:89:86:22:D9:6E:E6:3A:E2:31:76
X509v3 Authority Key Identifier:
keyid:1A:5F:EE:44:C4:07:FD:0D:8A:49:53:0E:FA:E3:C2:7B:FC:8C:BF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/d348f4-5e7d-46a9-9e46-106e2a4735da/1/Gl_uRMQH_Q2KSVMO-uPCe_yMv1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5c:1e:a2:b3:df:9a:cf:0b:8d:d8:94:67:9b:27:67:f4:ba:
ea:41:af:27:13:9c:3e:3a:a3:09:e5:e1:a6:c1:16:a4:11:0a:
fb:0b:4c:1a:91:89:c8:6e:d6:12:01:2c:17:47:6d:2f:66:fd:
7f:b7:45:d7:98:ff:ee:53:11:17:fd:f6:0c:f5:0a:02:31:a3:
d9:7c:58:a4:8b:bd:bd:7d:50:64:2b:5b:80:2e:96:43:43:ff:
e8:11:33:6f:b5:8f:58:0c:2f:68:98:f5:0e:bc:8b:b7:8b:7c:
03:6d:c3:c5:30:a5:ac:a1:6e:da:b5:92:30:38:b9:d2:6c:19:
d3:4a:a0:3c:1f:d4:fc:60:81:66:60:d6:de:03:8a:33:3a:44:
c0:a8:95:4c:c9:d7:0c:33:55:af:43:71:55:d8:b8:40:c3:8e:
8c:c8:a5:b5:5f:58:2b:d3:88:52:e1:6e:5a:c1:b2:e1:89:2c:
f6:eb:ee:53:79:3a:81:d6:eb:e3:32:6a:a8:f6:6e:a2:98:5b:
01:db:42:d9:a9:bd:a1:be:96:d7:63:bc:3f:bc:e7:bd:3e:0f:
c3:ab:f6:34:c1:90:3d:c7:b2:dd:88:ec:71:1a:69:91:15:46:
26:f1:42:54:b7:f9:41:5e:48:79:c4:b2:07:69:4e:70:dc:53:
3b:ce:95:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:29:05 2026 by rpki-client