Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier: dGllHUZXoO2imWtIacVVRQE/SiiKrn+i7ViavtCd/KE=
Subject key identifier: 88:04:C5:62:20:06:FC:63:D0:34:D8:07:B6:87:D4:37:D3:91:A4:84
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial: 019CAAC6DA97FBADFFB47FC349BE2EC0E29D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number: 070C
Signing time: Sun 01 Mar 2026 19:01:24 +0000
Manifest this update: Sun 01 Mar 2026 19:01:24 +0000
Manifest next update: Mon 02 Mar 2026 19:01:24 +0000
Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: iKSsuYd0kasaAIfOD85xopU+USEYQRYFejyNpmfZ36Q=)
2: z8hJl8rGyd_56TuV5GLYx9xFhho.roa (hash: XAMtoMHmL3C5zB92ZcL52Exd5SlTcXF5KJm8ioosamE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:da:97:fb:ad:ff:b4:7f:c3:49:be:2e:c0:e2:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
Validity
Not Before: Mar 1 19:01:24 2026 GMT
Not After : Mar 2 19:01:24 2026 GMT
Subject: CN=8804c5622006fc63d034d807b687d437d391a484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:be:f4:5c:88:d9:d2:1d:53:0c:da:ca:73:78:
b2:a4:95:7c:b5:97:0d:d1:41:a9:a8:94:38:32:de:
3e:30:34:ef:86:bc:2b:05:fd:7a:c9:b1:e4:d5:aa:
85:9b:a0:89:49:06:b8:98:fb:bd:f1:8c:9e:ce:ce:
33:70:1f:e2:9a:0f:31:23:74:0f:98:09:f8:3b:d7:
22:03:bc:43:32:ca:30:35:7c:ca:fd:2a:f9:2e:b6:
75:84:c0:ce:4b:2a:bd:d0:85:fb:04:f1:ca:a1:b8:
86:12:e4:c9:95:05:9d:30:f7:62:1b:52:b9:38:2e:
cb:df:ce:1d:ef:5f:78:6e:61:56:08:02:3b:68:1b:
3f:fa:36:cd:fd:ee:0a:42:53:8e:ff:7a:81:f3:4f:
b6:3c:b1:97:6c:dd:43:ae:0c:8a:e2:c3:79:4b:43:
15:18:99:d3:58:4a:65:17:32:ba:66:49:f4:12:14:
1c:7f:51:ae:70:7a:d5:6e:7d:99:eb:96:4d:43:3c:
e5:9d:4e:43:30:79:87:4f:9e:92:04:13:19:36:4f:
30:3f:e4:dd:a3:80:69:e1:11:6f:62:5b:f1:61:1a:
14:b7:cf:e3:c1:66:c7:75:a1:d2:a2:b1:b4:af:51:
fa:65:d0:08:ab:1d:37:db:ce:97:96:02:09:9e:65:
b4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:04:C5:62:20:06:FC:63:D0:34:D8:07:B6:87:D4:37:D3:91:A4:84
X509v3 Authority Key Identifier:
keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0b:37:e7:77:74:2b:62:9d:4d:4c:d9:af:12:fd:c1:5b:49:
14:8d:3a:34:45:a4:a0:75:c5:8e:6e:c7:fc:a8:55:94:aa:f7:
d9:74:68:7d:ba:2d:d4:aa:d4:21:e2:eb:5a:d9:23:56:72:81:
29:2f:5b:db:26:c7:49:95:2d:0a:1f:a5:a1:75:53:a2:ff:3a:
62:9c:d7:2d:47:7d:be:2e:48:ee:7b:f6:e1:16:be:84:3d:66:
f1:fc:7f:9a:28:80:09:d2:8b:64:2d:42:16:3d:7c:44:f5:06:
4e:e1:27:a2:6f:ab:bb:fa:53:01:70:85:c9:f3:31:7a:b0:22:
62:02:e7:ab:db:fc:a6:e9:11:d9:41:cd:6c:4f:31:3c:ea:2d:
8e:4a:1a:02:65:64:b2:34:fa:90:fa:8e:af:a6:4b:89:a6:1d:
5a:5b:3f:63:27:c0:c6:45:49:8b:bd:f3:ba:4e:67:83:90:15:
80:35:89:b1:34:bb:ee:91:1b:eb:31:6d:d6:98:19:86:81:9e:
0c:20:58:cc:2e:a1:37:9e:15:65:f6:50:d7:db:16:68:e8:4e:
f2:ff:83:48:3a:37:8e:4f:65:3a:3c:cf:c2:50:56:12:c8:11:
02:ed:f7:f4:1e:78:72:fa:65:04:ab:a9:83:ef:09:91:c7:2a:
64:a9:6f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:27 2026 by rpki-client