Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: nHY1b6DMp11PHJQZQn3ZQs08VrdRvRf309Fl+e8IVVU=
Subject key identifier: E4:32:1A:5E:CB:C2:0E:62:AF:1F:C2:C4:D8:1F:5F:15:32:D6:CA:E1
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 019CA9EB86B952FA28FD1D694EEF5FD05884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 096C
Signing time: Sun 01 Mar 2026 15:01:50 +0000
Manifest this update: Sun 01 Mar 2026 15:01:50 +0000
Manifest next update: Mon 02 Mar 2026 15:01:50 +0000
Files and hashes: 1: VBmr-5LpIjSQ6myjINReT6R1vMo.roa (hash: qg+Z2r3TWn/McCuaCe1xwiAMWjaHkNEjXrq2W1LrDUU=)
2: Y61lvfTY0IfOHOaNCazwXGsL2N8.roa (hash: 52xFh0jAqOfccjKrhy8KiqEx7vruviP8tzZ1IxwQ/As=)
3: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: 030tu//SB/aZ/4uQUqfNkuz5P1yQtpLrB/dFSLw2mTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:86:b9:52:fa:28:fd:1d:69:4e:ef:5f:d0:58:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Mar 1 15:01:50 2026 GMT
Not After : Mar 2 15:01:50 2026 GMT
Subject: CN=e4321a5ecbc20e62af1fc2c4d81f5f1532d6cae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:46:52:2f:37:0c:b1:6c:5a:31:0f:d9:ab:18:
e2:b8:1a:e3:85:1d:fb:c7:aa:ba:b9:fe:46:51:ca:
98:a6:f9:2a:41:e3:72:c5:cc:c5:00:93:c4:6f:2a:
0f:85:95:fa:55:b3:06:9e:82:cd:b1:ef:1b:8f:8b:
7e:36:78:b7:6f:e0:dc:ed:cf:97:8e:b4:9f:0f:0f:
d9:91:01:60:ee:f8:21:d8:3c:cf:6e:f2:76:81:aa:
7c:97:6a:3b:f4:1a:4d:3f:f6:0d:59:f6:93:e4:5d:
ab:73:e9:72:3f:96:2e:67:8c:24:87:58:84:48:8b:
71:0c:7d:f6:63:50:4e:57:1f:bf:89:94:67:b6:31:
c1:38:fb:b9:33:db:68:c3:91:0e:79:62:cc:f7:f3:
b2:d5:1f:15:c2:64:0d:95:ad:fd:d3:cc:bc:ed:9a:
88:cb:f0:a6:e4:c8:a8:dd:0b:eb:a3:d8:c6:df:d9:
d5:69:d5:27:e9:e8:0b:15:57:0a:ea:eb:58:ae:2f:
3d:81:5d:05:d6:23:db:08:8f:7e:26:75:88:6d:3d:
93:8a:53:c1:da:ca:9b:80:1d:f3:54:10:91:8c:90:
f4:de:f8:51:98:ea:8f:5e:6f:9c:c3:fb:b3:c2:41:
3e:f0:0c:85:94:16:19:52:8e:48:a2:1a:03:86:75:
fe:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:32:1A:5E:CB:C2:0E:62:AF:1F:C2:C4:D8:1F:5F:15:32:D6:CA:E1
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:29:bd:3d:fd:61:9a:4b:c5:f8:56:44:f7:95:37:57:27:5c:
0a:32:ca:34:9c:cf:56:da:cf:d7:fe:4e:43:69:5d:fa:33:fb:
59:8b:66:58:61:3a:e3:43:20:d6:4b:fa:68:6e:85:7c:9c:31:
21:95:75:45:d0:9a:37:a6:24:f4:14:b0:41:d6:72:80:97:c6:
af:96:b5:cc:94:c7:67:28:0d:67:1a:0d:b0:46:62:6a:80:74:
6e:22:d9:db:1b:99:89:96:15:d0:5e:0e:08:6b:2e:d7:90:5b:
f0:ad:68:14:8d:56:2b:39:3b:55:47:b6:d4:ff:19:20:c3:20:
f3:d4:58:fa:ae:f3:67:6b:73:87:74:90:eb:95:f5:21:10:9b:
cd:31:de:f5:1d:42:0a:ec:8f:5e:12:87:16:af:83:fe:5b:c7:
66:e7:b8:70:02:31:51:0b:7e:7f:b5:53:6e:d1:01:6f:6d:c3:
ca:4e:4c:93:06:7f:9c:4d:da:0c:56:c8:66:30:b6:43:74:74:
6a:3a:6e:da:d4:fe:e0:06:d4:a7:2e:46:21:92:63:ee:0e:a6:
40:f0:ed:7c:aa:4d:4b:1f:66:e7:ce:2c:a5:4b:69:db:2f:fc:
6e:f3:81:ef:ac:a6:61:9f:78:50:ed:02:0d:ae:72:19:43:fd:
48:85:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:44 2026 by rpki-client