Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: WV/S2gUAhZYWbFBt91KI0f5ADHlz3B5eVVLMuNVDiNU=
Subject key identifier: 42:72:06:69:A0:6D:D3:8D:71:D4:16:79:35:D9:DC:E7:94:B8:02:3E
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 019DA30AECA33ADB1B5E2AFF495050EA0FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 09ED
Signing time: Sun 19 Apr 2026 00:01:35 +0000
Manifest this update: Sun 19 Apr 2026 00:01:35 +0000
Manifest next update: Mon 20 Apr 2026 00:01:35 +0000
Files and hashes: 1: VBmr-5LpIjSQ6myjINReT6R1vMo.roa (hash: qg+Z2r3TWn/McCuaCe1xwiAMWjaHkNEjXrq2W1LrDUU=)
2: Y61lvfTY0IfOHOaNCazwXGsL2N8.roa (hash: 52xFh0jAqOfccjKrhy8KiqEx7vruviP8tzZ1IxwQ/As=)
3: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: d8rBuwceUjhOaTwY3q/pNHbxsWX3spsrzLh9AoQUyG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:ec:a3:3a:db:1b:5e:2a:ff:49:50:50:ea:0f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Apr 19 00:01:35 2026 GMT
Not After : Apr 20 00:01:35 2026 GMT
Subject: CN=42720669a06dd38d71d4167935d9dce794b8023e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:eb:a3:b1:70:4a:9c:42:ea:8a:87:84:14:77:
09:86:03:20:62:dc:ff:b9:98:2f:28:d8:4d:0e:71:
e1:bb:3f:74:1c:c1:df:f1:3b:8e:60:c0:dd:80:62:
40:fb:9e:0c:e1:2c:7a:56:98:b1:19:0d:43:dd:b7:
8e:cf:6c:d3:e9:c4:84:66:bd:80:dd:21:5e:45:01:
f5:b1:ab:0a:ce:7a:50:b2:9c:f5:eb:d6:90:d3:ec:
b1:cc:f5:c6:27:9b:33:ee:e5:7e:32:86:cb:53:8b:
56:37:cc:b3:a9:01:31:7d:13:67:3c:97:50:d0:7f:
37:67:59:f2:37:62:c0:a2:12:b6:34:d3:c7:01:53:
1b:25:d8:05:6a:60:1d:fd:95:fb:de:30:21:37:dc:
5a:83:69:9f:e8:13:9d:61:a5:34:4f:2d:2d:18:4e:
54:c3:60:f7:30:d6:e5:e9:14:f0:ce:98:8a:8c:28:
11:51:85:67:d6:70:cd:e1:97:3f:8f:fa:d4:e5:a8:
05:9e:03:c4:20:0e:5b:4f:be:09:84:fe:54:99:c1:
fe:74:e8:af:7b:10:b8:10:06:5d:1c:b6:55:48:52:
76:57:ad:b2:91:a0:57:37:1a:21:eb:cb:b8:1a:ed:
1b:ec:54:b2:b7:ae:fb:06:06:b4:f5:af:b4:27:3f:
08:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:72:06:69:A0:6D:D3:8D:71:D4:16:79:35:D9:DC:E7:94:B8:02:3E
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:0a:83:be:8a:b9:2c:ec:af:2b:e8:70:76:70:d1:c7:04:ed:
7f:76:88:7a:bd:9c:fa:d0:e6:0f:b0:28:7f:4e:dd:23:0d:34:
b2:69:4e:48:22:88:ef:c7:5e:f3:57:98:4b:e4:17:4e:7c:2b:
ec:a8:d7:a9:30:07:64:c2:00:1c:74:81:77:58:b0:7b:02:c5:
15:1a:31:b8:5a:11:c3:b8:db:f3:bf:6b:62:df:e4:10:9b:be:
45:e9:43:8f:b2:6f:af:84:45:75:5c:b4:ae:13:44:22:d2:63:
e1:e2:38:2f:2a:4d:be:da:cb:c5:12:e9:3f:71:f5:5c:a8:cb:
63:68:a1:fb:4b:6a:5a:4e:02:ae:56:f7:a8:5f:5b:b8:0c:63:
0d:14:a5:24:e0:9a:50:b9:a3:07:b2:15:b0:22:9a:19:62:b9:
26:31:a1:16:95:e8:a6:cd:fb:41:f8:75:4c:52:74:af:ac:4f:
95:e7:67:44:a5:eb:ce:4d:b2:49:9a:96:ef:fa:2a:01:64:fb:
7b:e6:02:9e:3b:6c:10:90:12:95:7b:56:44:ef:73:cd:4c:52:
7d:14:8b:8e:9d:a9:da:9a:41:a2:a7:82:2f:b1:9b:7b:28:ec:
ff:fb:f0:ce:a4:06:79:f7:03:ab:d1:a1:e2:4c:6c:7a:81:3d:
49:62:a9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:59 2026 by rpki-client