Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
File: GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft (raw, json)
Hash identifier: pdHamZ8765x1CIIJbeBxFsI/15K2O6WgFYP98Qwxons=
Subject key identifier: AC:70:5E:A9:00:A6:2F:39:EB:A2:56:B1:98:57:A4:52:42:B7:41:CF
Authority key identifier: 1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6
Certificate issuer: /CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
Certificate serial: 019D38662FEDAD0EDF63E04690322B5A948A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
Manifest number: 13D3
Signing time: Sun 29 Mar 2026 07:01:54 +0000
Manifest this update: Sun 29 Mar 2026 07:01:54 +0000
Manifest next update: Mon 30 Mar 2026 07:01:54 +0000
Files and hashes: 1: GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl (hash: /nRhy5eQI9y7dv9FW3NrQdulLjsWx0X0s61gxzDjvkc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2f:ed:ad:0e:df:63:e0:46:90:32:2b:5a:94:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a55bab425eac4b6a824c65163fa9ef500e9f8c6
Validity
Not Before: Mar 29 07:01:54 2026 GMT
Not After : Mar 30 07:01:54 2026 GMT
Subject: CN=ac705ea900a62f39eba256b19857a45242b741cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:ad:e4:88:5a:f3:12:97:fb:35:51:57:68:
af:15:8f:fd:b0:ad:31:12:d5:6a:b5:89:c5:1a:88:
70:e6:2f:2b:57:1e:e4:d7:4e:fe:47:d7:3c:d4:c5:
a9:f5:5b:50:7c:81:10:82:37:29:11:d0:53:99:a8:
05:58:f5:01:71:37:af:ac:53:fe:94:47:b0:5c:4f:
75:66:18:b9:ab:46:97:99:ec:d1:b5:4e:36:7b:39:
9d:21:81:e3:a3:9c:26:33:e3:e5:05:c3:6e:e5:2b:
66:a5:df:db:d2:0a:05:cb:cc:27:82:c3:b1:33:4f:
f9:6b:6b:be:0d:64:3b:7d:57:7b:0b:5a:a8:08:95:
e4:7e:3b:6e:c3:c3:0d:e8:32:4e:1e:c5:4c:d2:06:
d8:ee:38:85:0c:9e:3f:da:62:bd:22:d4:07:49:a2:
02:8a:8a:03:b5:b5:f7:3f:7a:d0:e6:3b:90:8b:cd:
18:0f:b2:2c:1d:c5:d7:e8:4e:44:5a:7f:a8:2c:a0:
cb:c7:32:d3:d8:b6:ad:68:ee:37:ab:30:b9:8d:b7:
77:1c:b4:71:40:eb:20:77:87:c9:23:51:67:e2:fd:
72:87:dc:4e:c3:33:c4:80:eb:4b:93:ce:63:92:da:
7e:f5:9a:ea:62:56:3c:74:1e:bf:35:ea:37:53:ed:
e4:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:70:5E:A9:00:A6:2F:39:EB:A2:56:B1:98:57:A4:52:42:B7:41:CF
X509v3 Authority Key Identifier:
keyid:1A:55:BA:B4:25:EA:C4:B6:A8:24:C6:51:63:FA:9E:F5:00:E9:F8:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlW6tCXqxLaoJMZRY_qe9QDp-MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8b46fb-0317-443a-b615-3d419ed4312d/1/GlW6tCXqxLaoJMZRY_qe9QDp-MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:46:96:81:22:64:c7:07:be:1e:89:e5:be:25:6b:0e:50:66:
47:ec:25:c7:df:77:72:ec:7d:13:91:93:cf:b1:42:fb:98:3a:
7e:0d:6b:b3:04:15:f3:ff:3b:eb:14:d8:07:4c:d5:14:81:be:
90:c3:65:98:d6:64:6e:7b:31:fc:30:27:da:3d:f6:63:87:9c:
c7:a0:c1:e6:e0:15:ca:b2:61:b2:4b:4c:c4:9d:14:8d:2a:32:
cb:32:a8:62:a9:fe:ad:e6:a0:81:71:71:91:67:14:19:9c:e4:
5c:6b:46:53:71:a1:85:07:b4:fa:9d:97:81:c5:06:6e:1f:43:
fd:db:1f:3b:5b:0b:9e:bc:d2:02:bc:81:c6:dd:8f:08:76:82:
32:e6:a1:7d:db:bd:5b:ad:26:c7:2d:d4:4d:22:6d:d6:b2:51:
a3:a9:91:b6:74:24:6e:fa:1b:c5:2c:fe:55:38:1c:c1:09:76:
6f:e9:5f:67:97:f2:eb:1b:b8:2f:bd:2e:18:fa:05:6e:59:16:
ad:60:e4:42:6b:af:97:f8:8e:4c:5a:7f:cc:44:d7:b8:18:5a:
7e:45:5c:d5:78:a5:5b:98:75:6a:4c:68:64:0f:fb:71:8a:19:
cd:75:08:5f:50:5a:82:46:3e:53:32:01:11:69:9d:93:89:bb:
63:dc:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:10 2026 by rpki-client