
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
File: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft (raw, json)
Hash identifier: p6rhD86waG4zCOmDNxFN4Jx/K4ooonNei5Jiii2hN5E=
Subject key identifier: 1A:91:EE:6E:CF:D1:00:6C:F2:E8:F8:06:A5:0C:AB:8C:2B:80:0B:02
Authority key identifier: 18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
Certificate issuer: /CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Certificate serial: 01A029C60F46411C99D047F8456F92BCFFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
Manifest number: 188C
Signing time: Sat 22 Aug 2026 14:00:40 +0000
Manifest this update: Sat 22 Aug 2026 14:00:40 +0000
Manifest next update: Sun 23 Aug 2026 14:00:40 +0000
Files and hashes: 1: 4aCUeUm4DYpWSQ7MSed7gWheYek.roa (hash: 3dUedzWX4ggiRmXBQIk9G5+5iMNmw05uaAyT3EfChQQ=)
2: GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl (hash: xovmMRDk66JRnflxeRX2rFObdsz3E3JSRKUq1sUOXYg=)
3: LGAzazAsvBBjNUS-QipfT8L_rKc.roa (hash: D5sjWJz5RfyDQZFF/L4/mTT1RT97QDK5mPQgERHSqvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:c6:0f:46:41:1c:99:d0:47:f8:45:6f:92:bc:ff:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b889f0ddbb52801e2d2e7a2ebe1167cad34c06
Validity
Not Before: Aug 22 14:00:40 2026 GMT
Not After : Aug 23 14:00:40 2026 GMT
Subject: CN=1a91ee6ecfd1006cf2e8f806a50cab8c2b800b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ef:52:76:ce:3a:9d:b3:6e:db:f8:0b:5a:1f:
fc:1d:8e:0b:4f:f2:6c:2f:37:fb:f7:de:7d:96:84:
75:0f:03:37:03:6e:45:32:83:c7:5b:22:a9:0f:90:
f7:73:96:5f:52:b9:9d:48:7e:59:f0:29:32:8c:7c:
0e:34:87:9e:c8:99:89:d5:0e:c0:40:c0:ee:ac:d6:
89:b5:0b:28:ca:0c:64:10:93:ad:16:61:eb:2c:b7:
6f:d6:17:6b:1d:68:fa:fc:27:bd:fa:fb:b6:4c:b6:
68:f9:22:a3:fc:cb:7b:d6:8e:8a:d0:e7:f6:63:bd:
a2:e8:b3:e2:be:ff:f3:d8:2c:66:09:46:2d:37:71:
da:47:b1:80:44:a0:e6:1a:f5:4c:85:17:36:be:dd:
25:ec:a0:69:ee:3e:6a:ce:ce:b8:6f:80:05:2f:0f:
a8:df:4f:62:27:79:72:0c:e5:ba:d7:ec:1d:92:a5:
9d:56:30:c5:f5:bb:32:c5:4d:6f:96:2b:80:b3:f3:
6d:f2:70:9b:4c:1c:ab:c7:84:5e:c8:5c:02:cb:ae:
c2:8d:86:d8:f1:0a:9c:d0:5e:a1:a7:ce:7f:81:cb:
1b:05:be:0a:d2:d5:32:28:f2:05:6f:7c:14:3a:46:
4b:a3:67:e3:02:4c:69:fb:48:f9:2d:a2:66:8e:b8:
10:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:91:EE:6E:CF:D1:00:6C:F2:E8:F8:06:A5:0C:AB:8C:2B:80:0B:02
X509v3 Authority Key Identifier:
keyid:18:B8:89:F0:DD:BB:52:80:1E:2D:2E:7A:2E:BE:11:67:CA:D3:4C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/6e1961-3da6-47c1-9b6d-dbb64a6835ad/1/GLiJ8N27UoAeLS56Lr4RZ8rTTAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4b:31:e3:98:4f:ea:14:48:8d:9b:e1:ac:5a:82:10:4e:10:
62:8e:51:1a:ca:33:58:dd:d9:5f:a4:94:72:50:35:79:a7:b3:
87:b2:b7:9d:95:b9:a7:6c:b1:15:19:50:77:f7:ea:17:e3:fe:
16:a4:af:56:16:86:cb:e1:85:01:2f:07:6e:17:eb:79:d2:a9:
3b:b9:ee:46:d0:b4:43:7c:1b:b4:3b:e4:4c:a2:24:db:9e:25:
38:36:dd:e7:b7:0a:2d:b2:86:4b:81:13:17:ea:59:51:bf:e4:
c8:3b:e9:b5:d6:58:e6:ee:f6:15:be:4c:2b:69:56:33:64:e0:
28:ef:35:b1:6e:91:fb:e2:d7:aa:e7:a4:2b:d6:59:0f:b6:81:
f8:45:d2:db:74:3d:61:f9:e7:ef:5f:c2:f6:3d:35:c1:c4:b7:
35:30:b4:d0:27:ff:e8:57:b9:bd:2d:20:9c:47:4c:fb:42:9e:
9a:14:34:54:db:b9:66:13:8f:3e:0a:3f:8f:5b:ab:2d:83:e3:
5e:a6:5a:5a:4d:74:bb:6a:2f:7b:9a:53:b6:6e:ba:ea:05:0f:
c2:eb:e1:f8:23:43:bd:48:75:58:dc:93:50:18:30:e7:8a:72:
dc:a6:53:a5:6b:b8:54:87:e9:0b:8b:4c:4b:48:31:b1:06:65:
b3:e8:75:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:21:42 2026 by rpki-client