Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
File: GLIwW_twBOUp1iOkd3G45uzQUdY.mft (raw, json)
Hash identifier: iGInIyRBrdQY/HmVLhoZzjyIRulQUnYeZG++hFr12aI=
Subject key identifier: 64:B1:5C:74:48:CF:AF:AC:1C:EB:96:15:72:19:28:C9:65:F7:61:EC
Authority key identifier: 18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
Certificate issuer: /CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Certificate serial: 01A0EC2E67D9269BE076B7CB598903C0A878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
Manifest number: 0447
Signing time: Tue 29 Sep 2026 08:00:58 +0000
Manifest this update: Tue 29 Sep 2026 08:00:58 +0000
Manifest next update: Wed 30 Sep 2026 08:00:58 +0000
Files and hashes: 1: BsB1weTRtbb_w5a2aWqr7c8Cgpg.asa (hash: HwOzHFJxF3HhEQ9N7dXbh3+iApRhiXxh7m6fcvockMY=)
2: GLIwW_twBOUp1iOkd3G45uzQUdY.crl (hash: sulJiKOLz1SBo+zaAEVjt1+CFJjB57me7HYrOHC3BE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2e:67:d9:26:9b:e0:76:b7:cb:59:89:03:c0:a8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18b2305bfb7004e529d623a47771b8e6ecd051d6
Validity
Not Before: Sep 29 08:00:58 2026 GMT
Not After : Sep 30 08:00:58 2026 GMT
Subject: CN=64b15c7448cfafac1ceb9615721928c965f761ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:44:77:15:cf:25:67:56:99:41:8b:55:a8:ba:
72:6a:2d:61:29:1a:2b:d7:ce:f0:a7:a5:ef:7b:74:
67:ba:df:06:91:c6:7d:c9:f4:fd:02:10:a3:c1:22:
78:a7:fc:09:f0:a3:c1:a2:57:39:1e:eb:b7:65:6d:
8b:38:54:1d:8d:3e:e4:8e:70:a2:b4:8b:b1:b0:46:
d1:5b:63:a2:3d:ff:c4:bd:4f:ed:e3:14:d9:03:14:
5a:52:f0:c1:9a:3a:ad:cc:3c:d8:17:a6:44:1a:67:
f6:ad:39:5d:b1:52:3e:93:38:2e:1c:c5:0d:7a:fc:
73:0b:c9:74:af:f1:10:14:e0:c0:9b:cc:f5:01:fb:
99:ad:44:b5:ef:a9:0c:71:d1:0f:3a:74:de:a0:a0:
d2:96:9b:b7:de:11:c8:c0:25:25:1a:91:02:b0:64:
b4:47:13:41:87:3e:68:e8:4f:1e:96:65:a0:3c:3a:
53:a5:1e:5b:b0:26:6e:f4:ce:90:30:1c:6e:9f:69:
4e:97:c6:73:65:ff:2c:3e:f0:e5:2a:71:3a:73:4d:
cd:ae:5e:e7:d1:91:0e:e9:d9:8e:63:39:a3:7a:c2:
47:52:95:03:30:70:36:7b:88:85:37:5b:be:fa:53:
d6:c0:21:ac:82:91:b8:b5:54:6b:da:e5:06:92:aa:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B1:5C:74:48:CF:AF:AC:1C:EB:96:15:72:19:28:C9:65:F7:61:EC
X509v3 Authority Key Identifier:
keyid:18:B2:30:5B:FB:70:04:E5:29:D6:23:A4:77:71:B8:E6:EC:D0:51:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GLIwW_twBOUp1iOkd3G45uzQUdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/d3b9a1-ed9d-42c5-86e9-68b86eec2ffc/1/GLIwW_twBOUp1iOkd3G45uzQUdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:76:3a:11:c0:a8:f1:0d:1e:95:89:da:9c:46:02:19:84:56:
64:ea:cd:e7:d2:09:8f:01:87:7d:af:7e:5d:fc:a0:4f:b4:e2:
b7:d6:a7:01:cb:ab:0a:60:c2:6b:b2:e1:8f:fd:ae:85:90:e3:
f7:9d:d9:16:3c:22:93:af:51:68:00:48:99:27:dd:b8:74:4f:
f2:34:a8:f7:58:d9:6b:ac:60:8b:7a:8d:ba:15:ec:1e:50:50:
57:79:55:63:27:74:e6:f1:04:db:93:86:ab:b7:83:8d:ee:ac:
8d:7a:ad:14:39:d1:96:8d:da:56:6c:b3:9b:c7:bf:7c:fb:bc:
b6:49:0f:d4:44:2d:6c:0e:7a:93:10:63:8c:9a:ad:2a:b1:e1:
59:63:0f:ec:c3:46:03:4a:2f:f6:45:49:0d:33:f8:69:4f:97:
ef:2a:d5:44:84:2e:c4:f8:c4:7d:41:0e:33:a2:d5:d6:2a:b1:
1d:90:5a:e5:0b:87:e0:ba:40:12:0f:f3:7c:c7:a2:3b:a0:27:
55:d5:cf:6f:7b:d0:f6:8b:a2:26:56:ed:ed:95:1c:dd:4b:2d:
77:49:e1:94:9a:e8:d5:9c:d2:1d:93:6b:8b:35:ba:60:00:d0:
20:c4:dc:4a:1c:68:88:48:aa:16:bc:3a:ae:63:82:c9:b0:7a:
ea:67:cc:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDsLmfZJpvgdrfLWYkDwKh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4YjIzMDViZmI3MDA0ZTUyOWQ2MjNhNDc3NzFiOGU2ZWNk
MDUxZDYwHhcNMjYwOTI5MDgwMDU4WhcNMjYwOTMwMDgwMDU4WjAzMTEwLwYDVQQD
Eyg2NGIxNWM3NDQ4Y2ZhZmFjMWNlYjk2MTU3MjE5MjhjOTY1Zjc2MWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkR3Fc8lZ1aZQYtVqLpyai1hKRor
187wp6Xve3Rnut8GkcZ9yfT9AhCjwSJ4p/wJ8KPBolc5Huu3ZW2LOFQdjT7kjnCi
tIuxsEbRW2OiPf/EvU/t4xTZAxRaUvDBmjqtzDzYF6ZEGmf2rTldsVI+kzguHMUN
evxzC8l0r/EQFODAm8z1AfuZrUS176kMcdEPOnTeoKDSlpu33hHIwCUlGpECsGS0
RxNBhz5o6E8elmWgPDpTpR5bsCZu9M6QMBxun2lOl8ZzZf8sPvDlKnE6c03Nrl7n
0ZEO6dmOYzmjesJHUpUDMHA2e4iFN1u++lPWwCGsgpG4tVRr2uUGkqpt6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSxXHRIz6+sHOuWFXIZKMll92HsMB8GA1UdIwQY
MBaAFBiyMFv7cATlKdYjpHdxuObs0FHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kM2I5YTEtZWQ5ZC00MmM1LTg2ZTkt
NjhiODZlZWMyZmZjLzEvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kM2I5YTEtZWQ5ZC00MmM1LTg2ZTktNjhiODZlZWMyZmZj
LzEvR0xJd1dfdHdCT1VwMWlPa2QzRzQ1dXpRVWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnY6EcCo
8Q0elYnanEYCGYRWZOrN59IJjwGHfa9+XfygT7Tit9anAcurCmDCa7Lhj/2uhZDj
953ZFjwik69RaABImSfduHRP8jSo91jZa6xgi3qNuhXsHlBQV3lVYyd05vEE25OG
q7eDje6sjXqtFDnRlo3aVmyzm8e/fPu8tkkP1EQtbA56kxBjjJqtKrHhWWMP7MNG
A0ov9kVJDTP4aU+X7yrVRIQuxPjEfUEOM6LV1iqxHZBa5QuH4LpAEg/zfMeiO6An
VdXPb3vQ9ouiJlbt7ZUc3Ustd0nhlJro1ZzSHZNrizW6YADQIMTcShxoiEiqFrw6
rmOCybB66mfMzQ==
-----END CERTIFICATE-----
Generated at Tue Sep 29 15:28:14 2026 by rpki-client