Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.mft
File: GlhGL-ulRhBLR5cpLdI6RrAvftI.mft (raw, json)
Hash identifier: 6CaqQlVLFvMQVEPuJQLCks7DxD2x16HJpGhTi8RkW18=
Subject key identifier: 6B:E7:A6:53:FE:5D:4F:2E:1C:2B:E7:2C:41:5A:B5:19:7A:C3:68:09
Authority key identifier: 1A:58:46:2F:EB:A5:46:10:4B:47:97:29:2D:D2:3A:46:B0:2F:7E:D2
Certificate issuer: /CN=1a58462feba546104b4797292dd23a46b02f7ed2
Certificate serial: 019D382DD8688D26400383A68EC0D2F3B1D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlhGL-ulRhBLR5cpLdI6RrAvftI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.mft
Manifest number: 0195
Signing time: Sun 29 Mar 2026 06:00:21 +0000
Manifest this update: Sun 29 Mar 2026 06:00:21 +0000
Manifest next update: Mon 30 Mar 2026 06:00:21 +0000
Files and hashes: 1: GlhGL-ulRhBLR5cpLdI6RrAvftI.crl (hash: nbWks2bDNNWFVLz003Gd6+JXBvCVDtLLFlO1b5G7nVo=)
2: ZenpZaPwibfOmlVAv-TXRHjBtwo.roa (hash: 0ehuNaSCp+tbF/K/SnZ+V5bAmTlPs3tw4jnWUFFDmpM=)
3: p15GuFvixgoTOyyIbT-KTRAIEp0.roa (hash: UQuqR5EhC1mtt9aEgvSOw9iiUShCJRPN8GbN8v3CyZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlhGL-ulRhBLR5cpLdI6RrAvftI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:d8:68:8d:26:40:03:83:a6:8e:c0:d2:f3:b1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a58462feba546104b4797292dd23a46b02f7ed2
Validity
Not Before: Mar 29 06:00:21 2026 GMT
Not After : Mar 30 06:00:21 2026 GMT
Subject: CN=6be7a653fe5d4f2e1c2be72c415ab5197ac36809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:79:ea:0e:05:25:08:d8:41:af:f5:d3:04:
d4:b0:9f:c1:53:73:ad:7a:f3:6b:2e:8e:87:ea:99:
b0:ff:d0:61:9f:de:b4:ba:22:10:40:4e:8c:64:d9:
db:fa:f2:93:a5:68:ac:03:09:2b:ca:6c:29:8c:56:
1d:ed:ac:3e:58:df:8b:48:6e:9c:9d:c7:70:27:2d:
c9:2d:03:41:28:05:63:89:30:8b:a5:93:15:ac:b4:
88:35:4e:a9:09:b5:85:30:1a:41:a5:fb:7a:89:ea:
47:4f:34:e2:86:88:40:48:18:5b:ac:00:6b:6f:60:
41:8c:da:26:a7:64:d2:d5:0e:49:bc:08:d0:ed:a3:
68:2d:1d:4b:47:fe:15:4d:82:05:e8:3a:f5:c4:a2:
38:7f:e3:7d:74:80:ec:54:2f:a1:e7:be:a6:71:bc:
7c:8b:2a:39:b7:8a:87:2e:34:39:3b:e8:4b:85:da:
ee:29:5e:41:be:60:52:93:4f:f2:02:de:74:6d:d3:
f4:ae:a8:92:af:26:f6:65:78:af:ef:81:c3:21:14:
1f:20:d3:b6:b9:94:a1:50:a5:26:a3:75:4f:b0:a5:
18:c7:91:b4:6d:56:57:5f:84:f7:a4:f1:22:55:15:
6d:df:27:a9:44:3c:9a:0b:08:c8:3f:71:e4:44:93:
80:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E7:A6:53:FE:5D:4F:2E:1C:2B:E7:2C:41:5A:B5:19:7A:C3:68:09
X509v3 Authority Key Identifier:
keyid:1A:58:46:2F:EB:A5:46:10:4B:47:97:29:2D:D2:3A:46:B0:2F:7E:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlhGL-ulRhBLR5cpLdI6RrAvftI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/06b7ee-6752-450e-b852-9e908d077f4f/1/GlhGL-ulRhBLR5cpLdI6RrAvftI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1b:d7:8f:de:ae:f2:7c:ac:8c:cd:a8:a8:52:c2:1f:f7:6a:
0e:06:12:28:8f:db:15:86:e5:8f:da:f9:36:8c:3b:2d:5f:c0:
7f:ce:c5:98:aa:23:12:79:81:99:d0:9c:30:ee:3a:1e:18:d3:
ad:a0:1c:49:8f:9b:c9:3b:1e:4b:f1:08:a9:bd:b1:5b:f9:1a:
a1:bf:4e:59:aa:fb:d1:11:f4:6e:e9:a7:21:f1:29:88:1a:40:
4b:ac:46:f2:6b:ed:8f:dc:4f:de:f0:99:3c:43:bb:ae:44:e7:
b8:bf:11:88:c7:5f:28:3f:3f:04:86:16:6e:49:36:69:cf:af:
94:f1:b9:54:60:cc:a7:de:ed:9d:16:fc:b7:e4:49:47:bf:84:
cb:7d:f7:0a:57:6f:09:3b:59:6d:6d:3d:00:0a:c9:95:9c:28:
6e:33:1f:cb:a4:ec:4c:e3:25:70:bc:df:ee:7d:f8:40:e7:41:
23:08:22:98:68:0e:73:13:68:e6:d2:b6:2a:68:a1:54:3e:55:
46:be:91:37:69:e1:30:64:86:1b:7a:f2:f0:8e:8c:fc:27:4d:
7b:47:b7:c6:64:00:b5:40:bf:d8:49:67:a9:87:91:09:52:a7:
53:ff:06:45:ae:e1:f7:78:bd:fa:25:86:3e:a9:e5:d7:f4:d0:
fc:b7:6a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:54 2026 by rpki-client