Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier: trAxnLEO/u6OmhF2xhwZSWT4QcBRfI0YsbeLXNZw1y0=
Subject key identifier: 7A:9B:4C:BE:22:29:1F:48:49:4D:6B:A7:0E:DD:C5:22:15:77:2A:5C
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial: 019CAA581E26849A3C728D077DA37C2B6FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number: 0F27
Signing time: Sun 01 Mar 2026 17:00:27 +0000
Manifest this update: Sun 01 Mar 2026 17:00:27 +0000
Manifest next update: Mon 02 Mar 2026 17:00:27 +0000
Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: NK+6xB9wGe7MYldAwGuvBLA8yiqPgMzuC9bh6bMuMJw=)
2: t6uJnjT04JxAMbhWunFCrGch9dE.roa (hash: ipX6tbTTZfYSopPgMvzN1VwXoXH9Z4uS/A5CMI0tQEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:1e:26:84:9a:3c:72:8d:07:7d:a3:7c:2b:6f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Validity
Not Before: Mar 1 17:00:27 2026 GMT
Not After : Mar 2 17:00:27 2026 GMT
Subject: CN=7a9b4cbe22291f48494d6ba70eddc52215772a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:52:9e:f3:cf:5d:db:91:f9:f3:fc:63:1e:
96:76:e7:33:c8:ee:bf:a4:aa:e7:02:5d:89:09:8e:
d6:e9:10:80:70:ec:f6:d7:37:9f:b3:d5:e3:1e:0e:
19:a4:b8:22:41:ad:09:05:f2:f1:d2:2c:f3:e4:18:
f1:b6:02:85:2f:1a:02:e9:60:c7:7c:86:05:68:7f:
33:fc:31:77:9e:81:9b:8e:be:77:49:4d:5f:6e:58:
ae:7e:08:8b:7e:3d:40:83:c4:b2:a1:47:8b:0a:68:
97:4e:9b:a2:03:1d:ed:98:ea:70:a8:03:cd:13:08:
c7:f3:f2:92:dc:1f:77:b0:5b:a0:e9:fa:cb:c1:7e:
4d:57:72:3d:35:28:7e:49:89:b8:de:ea:d1:f2:b3:
0e:90:5e:49:91:f8:14:df:46:80:20:56:1e:4b:8a:
3c:ea:c3:c4:52:21:5d:8b:2f:de:d3:a3:17:28:8d:
1a:fd:ba:05:3f:73:4e:93:0b:64:1d:c1:7b:d7:ed:
84:f0:c0:5a:a8:f2:e7:d2:26:61:bc:47:da:34:93:
72:95:8b:6d:12:1c:14:f2:52:0b:cb:5f:5f:2b:68:
6e:fd:c7:93:ba:46:b3:71:4c:92:f7:16:d4:53:e9:
68:b9:04:c5:23:2e:75:04:a9:46:cf:99:a9:a2:e0:
ae:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9B:4C:BE:22:29:1F:48:49:4D:6B:A7:0E:DD:C5:22:15:77:2A:5C
X509v3 Authority Key Identifier:
keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:88:30:d2:18:01:08:eb:36:07:56:77:d4:7b:54:0d:92:a4:
d1:5a:3d:26:fb:68:6a:5b:e3:33:09:23:ca:81:bd:0d:8e:82:
d8:3b:4d:2c:0c:9f:8d:2f:0e:39:bf:1d:d0:80:20:b2:f0:ee:
47:4c:87:91:8d:2d:62:fe:84:45:08:24:16:5d:cd:dd:d4:a7:
37:34:d0:8e:b6:16:ea:73:cd:58:ee:1b:40:47:7a:77:98:75:
c7:65:78:75:5e:60:f2:49:06:f2:e0:f5:68:0a:b6:e9:11:e0:
f0:81:e8:2b:3c:91:c9:bc:ca:29:40:f0:f8:04:8a:2e:2f:bf:
58:44:92:d4:f8:8f:c8:a5:75:eb:86:e2:f9:cb:b4:b8:49:a3:
79:6d:15:0b:ab:c2:cf:4a:13:45:10:3b:28:e2:c5:40:79:7a:
1c:5e:19:0b:c8:14:49:ef:59:dc:ea:d0:ce:2c:c1:35:ee:f8:
40:03:47:3b:5d:dc:a4:73:a6:29:c8:38:25:71:65:13:7d:a8:
63:58:a1:ef:53:b8:6c:1b:07:d0:e1:08:cd:33:02:eb:03:8b:
af:e4:85:1e:43:33:40:08:f6:cc:49:ba:be:0d:66:94:48:8b:
2b:11:d8:ff:ce:e8:4d:af:f1:c2:fa:63:86:94:0d:50:91:6f:
aa:ba:06:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:29 2026 by rpki-client