Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
File: GLIwW_twBOUp1iOkd3G45uzQUdY.mft (raw, json)
Hash identifier: 5j4JAlZYB1qaw7LhfSJvOeL60F5oVxrl7ik7tyzO3c4=
Subject key identifier: AE:F4:BF:40:0C:7A:DE:0B:52:E5:FC:F6:B6:C9:CD:93:D6:2F:88:C1
Authority key identifier: 18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
Certificate issuer: /CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Certificate serial: 019D382E6142CD0DEEF7CD5F7C83036D4AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
Manifest number: 025C
Signing time: Sun 29 Mar 2026 06:00:56 +0000
Manifest this update: Sun 29 Mar 2026 06:00:56 +0000
Manifest next update: Mon 30 Mar 2026 06:00:56 +0000
Files and hashes: 1: BsB1weTRtbb_w5a2aWqr7c8Cgpg.asa (hash: HwOzHFJxF3HhEQ9N7dXbh3+iApRhiXxh7m6fcvockMY=)
2: GLIwW_twBOUp1iOkd3G45uzQUdY.crl (hash: Lid0VEkRobMk0fEzIT03MjkyrmN3HQz4zcWFdkgR21k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:61:42:cd:0d:ee:f7:cd:5f:7c:83:03:6d:4a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Validity
Not Before: Mar 29 06:00:56 2026 GMT
Not After : Mar 30 06:00:56 2026 GMT
Subject: CN=aef4bf400c7ade0b52e5fcf6b6c9cd93d62f88c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:55:18:77:96:f7:2a:c7:cb:93:8a:f3:6a:
ff:18:4b:25:1c:8c:c8:d4:81:21:85:ed:bf:09:d9:
d7:55:df:0c:41:f2:f5:c6:78:01:49:b4:ac:4d:62:
c5:8a:4f:e9:46:e6:66:d4:c3:29:b8:5d:b3:65:c0:
f9:f4:91:fb:f4:17:15:42:43:6d:0f:13:2c:99:c8:
30:eb:69:56:8b:c5:49:0a:eb:db:99:95:20:6f:92:
ad:79:8c:9d:70:ad:91:f3:8a:05:97:b7:77:69:32:
2d:c5:45:a2:69:2b:1c:2b:c7:b0:2f:be:fd:5c:b4:
71:e5:83:5a:32:e2:94:8c:3e:1b:7f:57:01:94:02:
85:f1:35:c1:7b:d2:82:99:c2:19:a4:ee:41:16:a7:
f4:e2:83:6f:82:10:73:82:b6:49:18:5e:83:5a:5f:
b3:b6:33:b6:6b:01:bc:c4:8e:6a:bc:3e:52:fc:58:
09:7e:28:ad:ec:20:0d:ba:0d:04:a4:61:59:db:f1:
d1:cf:0d:74:b2:7c:8a:d0:ba:8d:33:d9:22:e0:83:
a0:49:3e:86:57:06:c9:31:55:15:6c:2e:72:63:1f:
e5:71:4f:ad:6f:20:6e:63:32:cf:bb:5b:b4:93:d1:
11:fc:32:46:94:2b:4b:bf:90:ea:e4:05:13:f4:55:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:F4:BF:40:0C:7A:DE:0B:52:E5:FC:F6:B6:C9:CD:93:D6:2F:88:C1
X509v3 Authority Key Identifier:
keyid:18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:25:cd:30:16:18:13:ce:5b:2c:4b:e8:97:c0:68:34:ff:14:
c6:70:d0:ab:c7:1d:a3:3e:40:ff:b4:6c:10:cd:13:fa:ea:66:
e7:ce:a3:e9:bc:6a:98:a1:a0:dc:2a:77:5c:06:35:74:60:14:
cd:ae:a8:74:a9:2f:c6:b3:61:ec:fd:60:2b:11:90:2f:26:73:
f7:21:cf:e7:14:7b:8d:b1:2f:9f:4c:41:91:a2:72:13:af:d3:
53:a1:12:19:61:84:f0:52:ee:9e:ed:1c:97:62:05:d5:b0:a0:
84:35:5c:e8:ed:a7:4a:8b:a4:55:40:02:08:3d:e6:4a:03:b4:
4c:96:51:65:a7:f0:55:05:60:45:96:aa:cb:70:1c:16:12:d2:
d5:47:7c:3e:36:52:12:ca:f8:b8:77:12:5d:98:eb:a0:5f:d6:
33:63:df:b3:4c:c7:df:17:94:6c:cd:bb:97:56:4c:df:d2:45:
01:35:d7:c1:1c:44:82:e7:30:84:ee:3d:f8:83:80:06:3a:d0:
3b:55:5a:bb:4f:c0:5d:98:94:eb:b1:31:fe:7a:de:e0:82:ce:
0f:8b:ae:33:72:8f:3e:99:ef:2d:f0:ba:bc:4a:c4:ad:45:86:
da:ab:6f:10:ba:9d:2b:c9:df:8e:59:dc:1e:5b:4c:7a:7f:78:
aa:38:c2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:41 2026 by rpki-client