Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
File: GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft (raw, json)
Hash identifier: rmMnYasfAhNGeleNLkSuLfyNKXq+WBelez/Y/2WYoOo=
Subject key identifier: C8:1A:A0:5D:DF:A3:87:22:D7:75:98:02:FF:0D:88:60:89:98:EC:12
Authority key identifier: 18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
Certificate issuer: /CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Certificate serial: 019D38664AFCCC3A4E390CD386874716B332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
Manifest number: 128A
Signing time: Sun 29 Mar 2026 07:02:01 +0000
Manifest this update: Sun 29 Mar 2026 07:02:01 +0000
Manifest next update: Mon 30 Mar 2026 07:02:01 +0000
Files and hashes: 1: GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl (hash: s0XRlSme2LzrsMKGFnvxI88HO8tG8dWL7XcyWpNfO7Y=)
2: WwK0wQVJ37gM0FPBexlboGpvdWY.roa (hash: 8GMUVCoh7go5d/bcS0qlu+v+yNBlwVof7wqc0z0ILNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:4a:fc:cc:3a:4e:39:0c:d3:86:87:47:16:b3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b7377ce5efa3ca030ebb4dd77567fc032fcd01
Validity
Not Before: Mar 29 07:02:01 2026 GMT
Not After : Mar 30 07:02:01 2026 GMT
Subject: CN=c81aa05ddfa38722d7759802ff0d88608998ec12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:36:7c:62:e6:4f:30:86:bb:ef:01:6a:9f:b5:
1d:2f:0d:d0:cb:e5:99:bd:75:5c:80:fe:2a:ee:cb:
92:cd:fa:3d:59:42:1a:79:a5:06:9f:f6:c3:55:2b:
3a:52:0b:9a:df:d5:64:31:a5:63:59:68:6f:eb:eb:
37:e4:37:9a:7b:32:02:cb:0f:58:b5:f1:8c:bd:eb:
64:e4:41:e5:15:00:9f:fd:66:0b:30:3b:ed:81:44:
27:27:f8:71:c3:3e:60:20:bb:22:34:9a:c1:06:3c:
be:3b:37:1b:39:37:e2:54:b6:78:f2:d0:7a:bc:5a:
5f:fc:ea:68:91:09:d0:d0:7d:2b:b5:fb:7e:68:70:
97:67:33:87:bd:9e:9f:1a:9c:b4:5d:71:6c:a8:ef:
ca:6d:a7:53:4f:92:45:4e:d9:57:c5:e0:3c:f9:37:
18:ac:da:46:73:31:fa:48:c6:e0:b0:b0:9f:c9:bf:
2b:c4:0d:22:6e:9c:96:3d:e7:9d:77:94:b2:ea:61:
22:cb:91:c3:df:64:ac:14:94:ad:51:64:cc:48:85:
3d:48:ad:4d:ed:63:a1:2c:2d:5a:72:15:81:03:32:
ae:0b:16:ab:72:6a:85:8b:0d:53:82:8c:d8:23:8d:
71:fb:84:ad:8b:a4:61:0c:dd:65:88:98:ea:cf:15:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1A:A0:5D:DF:A3:87:22:D7:75:98:02:FF:0D:88:60:89:98:EC:12
X509v3 Authority Key Identifier:
keyid:18:B7:37:7C:E5:EF:A3:CA:03:0E:BB:4D:D7:75:67:FC:03:2F:CD:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLc3fOXvo8oDDrtN13Vn_AMvzQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a0ba88-4d88-4691-aa6c-b5b8f5784dfe/1/GLc3fOXvo8oDDrtN13Vn_AMvzQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3d:06:9b:68:92:cc:5b:ec:24:d0:2a:08:19:07:56:58:c3:
a6:cb:d0:93:35:9a:b6:ba:2c:7b:c5:31:b2:13:b2:88:1d:00:
ef:24:bb:70:e4:e8:5a:dd:77:58:df:18:43:eb:ed:65:ef:3e:
4d:06:3f:25:a1:f6:7c:f4:68:04:8b:45:e6:78:61:19:f3:1c:
af:aa:23:b4:47:f1:3f:ca:0b:fb:20:07:56:6b:88:87:35:13:
0f:39:25:d7:55:83:5f:4c:7a:c1:2d:57:b9:c8:1b:7b:48:95:
e8:7f:9b:dd:f3:ae:aa:78:55:79:e2:02:4b:4a:a4:64:3f:a2:
14:31:eb:3a:fb:5c:55:5f:67:68:fd:73:ea:3c:ed:71:d7:ce:
02:46:22:09:82:9b:8f:8a:62:4b:4e:7f:04:bf:d2:e6:63:83:
d8:9d:d8:a8:f0:f9:6f:28:94:8d:7a:11:cf:59:01:3b:bd:bd:
91:ca:b8:88:89:6e:d7:68:36:56:3c:e8:74:3e:26:7f:b9:a4:
2d:d5:19:71:4d:32:68:43:0b:8c:12:83:5c:10:9f:89:78:af:
06:99:09:16:66:83:c9:cc:a6:77:9a:e0:5b:64:12:66:10:54:
c7:e4:86:a5:62:24:e5:11:08:5e:e1:40:ee:68:2d:31:dc:04:
e3:02:53:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:47 2026 by rpki-client