Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier: rYT+TIX3wT5r9aCtfFrYTAW+wrfETsxSBD/TIyh0hZY=
Subject key identifier: 63:3B:F9:DD:C8:C1:C0:C4:25:3A:B5:66:DD:71:2F:52:E2:0C:E3:F6
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial: 019DA5666B49D5E950AAC7A60D6CADFEFBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number: 0FA9
Signing time: Sun 19 Apr 2026 11:00:45 +0000
Manifest this update: Sun 19 Apr 2026 11:00:45 +0000
Manifest next update: Mon 20 Apr 2026 11:00:45 +0000
Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: XhJxd0eB/pt8fc1Jo86z25SFAUIy1icwmJeYV32xw3s=)
2: t6uJnjT04JxAMbhWunFCrGch9dE.roa (hash: ipX6tbTTZfYSopPgMvzN1VwXoXH9Z4uS/A5CMI0tQEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:6b:49:d5:e9:50:aa:c7:a6:0d:6c:ad:fe:fb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Validity
Not Before: Apr 19 11:00:45 2026 GMT
Not After : Apr 20 11:00:45 2026 GMT
Subject: CN=633bf9ddc8c1c0c4253ab566dd712f52e20ce3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:60:a9:c7:42:59:29:0d:b7:f7:04:95:b8:51:
3e:13:f0:82:ae:03:ad:bb:c8:94:b9:7c:95:63:2c:
8b:92:bf:16:82:a7:25:37:72:08:12:52:ad:47:89:
a0:48:dd:ef:f6:4b:99:dd:56:7e:99:3f:9e:62:80:
ae:d0:90:01:b7:e8:da:57:73:8f:f5:69:ee:96:be:
28:b7:73:26:4f:ab:d6:05:ba:f2:14:81:d2:c5:35:
06:0b:2c:25:fc:11:19:56:94:24:51:13:74:05:cc:
ff:8f:bf:c6:72:0a:86:a9:19:e7:4f:01:8f:46:57:
73:6e:6f:69:2b:25:43:74:2e:41:97:28:98:d3:d8:
ab:ba:73:5b:7c:25:47:76:1c:16:f8:2c:f0:09:7a:
32:4e:f8:78:2c:57:74:87:29:fd:6f:a1:23:f8:54:
7f:f9:d2:58:95:63:d9:e9:c4:d8:00:21:7e:29:de:
da:a9:29:3e:46:82:0a:1f:08:6c:ce:c3:f3:31:7c:
3b:c2:bf:e2:2b:59:06:dc:c5:1d:82:43:ef:9b:b7:
33:73:8f:e4:c2:2f:86:8e:bc:2a:2e:03:c6:0a:03:
79:70:ce:ca:ba:cb:18:6c:c4:9a:33:d0:30:20:09:
b1:08:2e:82:b4:6c:2f:2a:9f:b0:7c:20:d3:37:5a:
3b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:3B:F9:DD:C8:C1:C0:C4:25:3A:B5:66:DD:71:2F:52:E2:0C:E3:F6
X509v3 Authority Key Identifier:
keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:bb:17:ca:20:74:5f:1b:80:74:27:36:1e:94:8c:11:90:21:
08:dd:c2:52:4a:e3:b3:d8:92:c8:ef:a9:39:ec:f2:96:db:89:
0c:67:36:f2:24:4f:8a:78:c8:29:87:bb:65:af:af:65:07:68:
35:36:0d:82:40:73:7e:65:49:0e:65:6e:59:3d:ee:a5:b5:6e:
a5:70:1b:86:a2:71:f4:75:2c:b3:26:6b:5a:ce:dc:f2:61:7d:
f0:91:98:aa:e8:e9:0a:c8:00:c7:03:ef:e6:c5:d5:2a:db:d7:
7a:3e:d1:e6:aa:4d:12:6b:00:fb:44:c8:66:7c:f3:2a:e4:30:
e9:e3:f3:85:e5:ca:40:b4:bf:e7:46:c1:3a:99:a3:24:71:b2:
d3:a7:88:e8:3a:db:ee:00:be:91:d1:d4:7b:b4:50:74:97:e1:
f2:83:eb:94:3b:75:70:43:d8:8b:40:63:b6:66:1b:b9:d6:d6:
0d:6e:45:73:b8:84:af:e5:33:d3:2c:8d:f9:1a:77:87:1b:99:
7c:2a:82:85:b4:7d:9f:b4:9e:fb:dd:40:5f:ba:3e:6b:d5:33:
ba:cc:63:a0:6a:f8:58:26:ff:83:80:09:cb:89:08:52:21:76:
39:c5:88:9b:98:c9:93:59:db:f0:88:97:d7:7f:d4:15:37:26:
22:11:5d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:35 2026 by rpki-client