Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier: 20msf/I1/ta81vkupbIe8XENyMHhkPb6y0XKscDb8Bs=
Subject key identifier: 4C:B3:3B:C7:17:6E:0B:6D:91:0D:41:09:31:46:04:50:0E:D1:14:1B
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial: 01A11861F9C3B8BC38FBB81F656B6A35B246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number: 0957
Signing time: Wed 07 Oct 2026 22:00:36 +0000
Manifest this update: Wed 07 Oct 2026 22:00:36 +0000
Manifest next update: Thu 08 Oct 2026 22:00:36 +0000
Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: 5rMOCNQwLFaKf9LGkIaHc/i4g9COzPApK5p/7Wa4FBM=)
2: z8hJl8rGyd_56TuV5GLYx9xFhho.roa (hash: XAMtoMHmL3C5zB92ZcL52Exd5SlTcXF5KJm8ioosamE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 22:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:61:f9:c3:b8:bc:38:fb:b8:1f:65:6b:6a:35:b2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
Validity
Not Before: Oct 7 22:00:36 2026 GMT
Not After : Oct 8 22:00:36 2026 GMT
Subject: CN=4cb33bc7176e0b6d910d4109314604500ed1141b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:0c:e4:2f:96:49:d0:5f:86:3a:ba:72:e4:
5f:83:ce:cd:64:25:03:6d:82:b7:9d:8c:39:1f:6e:
48:65:3b:86:d7:a7:b7:f9:10:b2:e4:e3:84:93:81:
cd:2c:b6:d0:ab:f5:26:8c:93:f1:10:86:79:a8:90:
fb:ff:8c:3e:fc:ee:28:9d:c9:ea:a6:cf:1b:b0:3a:
23:3b:dc:29:53:c3:3c:59:51:a8:b5:ad:f5:2d:14:
2d:b8:80:24:ea:1e:03:63:71:42:a9:c3:59:83:2f:
b6:11:53:82:d3:ec:26:64:cd:3d:02:29:83:fa:d5:
3e:69:59:6b:d8:1c:8d:05:c0:4f:d5:6d:29:e9:63:
f4:68:28:e9:52:c9:f0:91:68:92:87:c2:c3:df:e1:
97:1e:ff:34:e6:b0:f7:d1:24:68:b7:3a:3a:2a:b2:
d4:18:15:a4:8b:3d:ed:51:49:d8:79:72:d8:96:7e:
be:5d:2a:e1:c0:50:95:b6:0f:0d:81:8f:b7:f6:c5:
ff:e6:e8:5a:87:44:dd:f7:21:73:b7:bc:74:aa:1e:
10:51:39:f4:f2:c8:19:79:58:6d:39:8d:90:10:dd:
44:be:00:ff:b2:bd:bf:d8:27:61:13:76:4f:56:73:
2d:1b:86:8a:c2:2f:7e:9b:8a:95:cc:00:9e:c9:3d:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B3:3B:C7:17:6E:0B:6D:91:0D:41:09:31:46:04:50:0E:D1:14:1B
X509v3 Authority Key Identifier:
keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0d:c5:81:80:ef:3c:24:fa:82:61:a8:d4:0e:87:83:96:40:
d4:82:cf:d1:9f:71:f9:cc:4e:84:90:57:a5:d4:4a:f6:87:88:
8a:3c:35:f4:1b:41:6f:ef:df:b7:c1:68:2c:8c:c0:31:3e:f0:
27:66:d3:cf:be:bc:ea:15:94:9e:1a:af:d9:15:3c:75:ef:18:
42:4f:63:58:b9:72:85:82:16:cf:8c:9d:30:33:4f:f1:2c:26:
44:c4:af:71:14:86:f4:cf:bd:86:05:cf:20:6c:5b:d9:e0:ac:
5e:5a:0d:60:ff:fe:db:57:ae:34:90:df:2e:e3:dc:63:92:20:
25:31:1e:cd:05:d5:1d:2e:ef:61:32:af:91:7f:ca:76:45:71:
9e:93:6b:f2:f3:a8:de:fc:58:30:a2:41:bc:42:ac:51:ae:e1:
ca:4a:e1:48:79:17:17:b3:e7:cb:77:65:94:b9:f7:5a:ce:1d:
47:28:2c:61:9b:65:fd:da:86:99:3e:a7:23:24:54:66:c8:83:
f1:43:c1:7d:4f:57:d4:0b:ee:d5:fe:c3:7c:c8:20:da:dc:23:
5d:fb:1f:a4:c8:83:7b:7f:e2:b0:63:70:ff:1d:02:d8:07:51:
79:00:3c:48:54:3b:90:17:07:4a:ad:67:86:a3:ca:23:7e:64:
f3:8b:8f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 08:57:41 2026 by rpki-client