Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: /cIaH3GMeL3Tus2BVXnbpsGqmqydT8sjl+1Ch7jytoc=
Subject key identifier: 9D:97:BD:01:C8:2E:B7:60:22:41:B8:8A:13:2A:DD:B4:15:0B:00:BC
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 019FA9E2C61EB04BD54844034DAB2DD676CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 0AFA
Signing time: Tue 28 Jul 2026 18:00:39 +0000
Manifest this update: Tue 28 Jul 2026 18:00:39 +0000
Manifest next update: Wed 29 Jul 2026 18:00:39 +0000
Files and hashes: 1: JtRvpoQ6v5bFd3bqNHp70RkQlEw.roa (hash: /oF7VKyAqIh3Dj5gAD5HaY2Wmq8Ex+sQiaIQTG8GOuw=)
2: VBmr-5LpIjSQ6myjINReT6R1vMo.roa (hash: qg+Z2r3TWn/McCuaCe1xwiAMWjaHkNEjXrq2W1LrDUU=)
3: Y61lvfTY0IfOHOaNCazwXGsL2N8.roa (hash: 52xFh0jAqOfccjKrhy8KiqEx7vruviP8tzZ1IxwQ/As=)
4: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: XzHbTty9vfy8COeqypQjzqRACGDEP7bU7DntviSkv9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:c6:1e:b0:4b:d5:48:44:03:4d:ab:2d:d6:76:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Jul 28 18:00:39 2026 GMT
Not After : Jul 29 18:00:39 2026 GMT
Subject: CN=9d97bd01c82eb7602241b88a132addb4150b00bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:20:8b:eb:ea:ba:39:19:36:fa:b6:35:b5:6a:
ca:fd:6d:97:d8:10:5f:8e:4f:ec:a2:72:d7:09:7c:
e0:2a:ca:f0:78:6c:8a:83:e8:8d:26:1c:7b:63:43:
47:17:35:d5:61:ab:0e:ac:86:6e:a6:18:65:cf:d8:
e8:22:54:cc:a2:e2:20:94:ef:42:3b:f6:fe:af:ed:
97:ed:84:9e:90:36:e0:8a:ec:b2:9f:16:a1:fd:fd:
a3:2f:1d:79:77:3b:cf:88:67:66:f0:e3:6d:60:b1:
42:c4:e7:0d:0a:2a:32:ad:ea:9a:a8:87:73:85:42:
9e:0e:3d:41:4c:66:ad:f2:af:25:fd:ea:2d:9e:f3:
99:62:b3:6b:c2:99:03:29:fa:23:35:5b:d1:55:4c:
d9:d8:83:fa:72:61:42:af:ce:19:34:51:a7:20:28:
ee:a5:ee:e9:7a:d4:e5:8c:ab:51:05:6d:e6:ac:cc:
cd:a2:8d:9d:d0:8b:70:82:06:77:91:65:3f:50:f5:
0f:bd:47:57:86:49:6a:4b:cb:e1:28:28:ea:46:e9:
77:a7:7d:90:77:0d:29:82:20:2a:ed:ad:21:8e:b9:
6a:5a:11:90:a8:a9:01:42:cd:5d:a5:dc:bf:66:a2:
11:99:ef:b7:2e:c5:cd:40:58:c9:53:96:53:a8:43:
c7:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:97:BD:01:C8:2E:B7:60:22:41:B8:8A:13:2A:DD:B4:15:0B:00:BC
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:dc:e4:85:e3:01:07:b9:81:ba:78:46:7d:78:84:a9:51:9a:
74:60:f4:1d:7c:2e:b2:7a:4c:70:62:eb:47:a9:f1:a0:ab:64:
d5:59:b0:58:3b:66:3e:df:20:f5:49:47:f7:75:29:0e:5d:1f:
e1:ad:db:40:97:e2:15:45:0c:98:8f:8e:88:59:54:b0:fc:9a:
89:d9:39:de:76:83:48:ea:90:f2:12:14:41:d8:b1:24:6f:6c:
73:32:dc:54:51:52:57:4f:6c:fa:57:29:4a:aa:e0:4b:b8:79:
48:08:41:d0:91:9d:d2:8c:c0:a4:8e:18:3e:ac:87:5d:6b:d8:
2d:5c:9e:a2:16:fa:46:1b:fc:f9:98:74:3a:2b:44:19:c1:96:
c8:02:58:69:89:ae:d0:b3:28:0d:bc:3e:d9:c0:66:3a:44:81:
96:4c:dc:34:14:ba:08:9e:a8:d7:42:4f:5d:38:25:a5:56:fa:
de:19:d0:d2:37:42:1f:8f:b1:1f:cd:b2:ce:53:6f:f6:c5:84:
3f:1d:56:fb:f8:4d:29:60:ed:ad:ad:8c:b1:34:ff:8c:c5:10:
cb:52:11:57:65:81:8d:72:99:a4:e7:44:4c:2b:a5:4d:53:27:
71:f7:54:48:30:e3:cf:3b:6b:43:0a:32:a9:89:c4:c4:d6:b5:
a5:c8:70:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:21:40 2026 by rpki-client