Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File: 1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier: EKh1wRVU8WCHOPWhT/e3wP7o8RLK950E8TbVjZ5IW8c=
Subject key identifier: C9:3A:DD:11:86:4C:C8:67:62:8B:C6:72:BC:DA:43:AF:95:E2:1C:6D
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 01A00101FABAD74AFE40C41B1BA6D49D1CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number: 0997
Signing time: Fri 14 Aug 2026 16:01:41 +0000
Manifest this update: Fri 14 Aug 2026 16:01:41 +0000
Manifest next update: Sat 15 Aug 2026 16:01:41 +0000
Files and hashes: 1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: mSvtZN+zIqhu9sxe1yqOiKP6+86VGF89U3bCQXNFwUk=)
2: GpK1qyRmRdQTMv9rJuBvrLPAPCA.roa (hash: 6pjGKy0zNDxK6EGW3iKdJRBjUTjPWde8CyQwLbHqWIc=)
3: iTaV7elHXW3QykhmVM8s9S75IWo.roa (hash: I33OFLbbVy5ULnfJGK6BAuTPAY6ngasZNHORp7xBvjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:fa:ba:d7:4a:fe:40:c4:1b:1b:a6:d4:9d:1c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Aug 14 16:01:41 2026 GMT
Not After : Aug 15 16:01:41 2026 GMT
Subject: CN=c93add11864cc867628bc672bcda43af95e21c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:5b:ed:0e:9f:70:31:70:a1:91:60:f0:d6:
f2:58:1d:ae:f0:e4:d2:d0:81:19:18:3b:81:37:a1:
16:cc:cb:e3:43:93:d8:d3:7e:4e:04:f0:bc:70:e4:
cf:60:e5:4b:f8:1d:59:c1:75:c1:a4:e1:3b:92:e9:
c6:df:ac:4c:5f:3e:54:5f:44:c3:5b:99:80:d3:cc:
f8:c6:bc:5b:4c:5f:8b:a4:9e:75:87:e8:9f:aa:9c:
88:8e:b3:e8:c7:7a:ae:b5:2d:28:8b:ab:f6:cb:d5:
42:41:e2:2c:23:b0:59:e7:05:ff:b9:e6:44:f6:f2:
81:7c:74:d9:ad:37:ed:17:a9:21:eb:18:bb:ea:f7:
99:b6:a6:76:55:c4:c4:37:3a:35:04:ed:4c:2a:18:
41:9c:5b:91:d1:52:7b:c6:67:03:f4:35:03:7b:03:
46:e7:98:c3:3b:be:0e:f0:9c:cd:a7:0f:7d:17:b3:
12:61:4c:44:1e:9e:e8:ff:f9:9b:9b:a9:6f:90:df:
b9:93:af:1d:28:94:e4:3e:c0:2f:65:53:a7:4b:c1:
bf:8e:18:53:d9:c1:56:2b:10:02:e0:d8:49:e7:2d:
a6:f0:26:cb:01:91:60:2e:17:72:31:6b:2b:15:4b:
2f:6b:a8:9a:02:21:64:ba:50:65:00:05:24:29:2c:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:3A:DD:11:86:4C:C8:67:62:8B:C6:72:BC:DA:43:AF:95:E2:1C:6D
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8d:23:3f:2d:33:15:bf:be:59:04:54:59:e2:31:ca:ac:6f:
72:ac:41:d6:dc:17:1e:07:eb:38:33:32:f5:87:5d:d3:8a:be:
21:62:c1:e8:b9:4a:cc:8e:57:aa:0f:fc:45:c6:f6:7c:1b:bf:
fd:c2:55:cb:c2:76:72:8b:c7:25:8f:c8:78:a4:e1:c7:a8:c6:
eb:12:74:6b:ef:9c:04:df:63:95:34:a4:37:1e:e7:ee:66:dc:
fb:38:a2:44:b2:02:bc:f1:f5:f0:3c:b8:ce:f9:5f:88:84:0b:
bf:ef:af:a1:f5:42:3b:15:0b:c9:fb:18:0f:44:9e:bc:39:31:
57:1a:09:91:01:21:18:41:08:98:f8:23:d8:68:fa:f2:39:b7:
25:c1:27:6e:f9:90:12:ef:7c:12:bf:c6:3a:9a:b9:43:8c:6a:
2c:ec:6f:ba:52:fd:28:12:b3:d3:84:1f:6c:51:83:61:19:82:
e9:30:d1:ab:2b:c6:f0:b6:52:a6:88:78:d9:3b:06:a4:89:d9:
32:82:29:c3:dc:6e:74:df:1a:6a:e2:f1:f8:33:94:29:31:39:
c1:f5:6d:27:9c:5d:51:53:a0:8e:c8:a8:d7:ac:b2:25:fe:48:
4c:d3:90:41:9a:5c:f1:7c:e2:3e:a6:ef:ec:4b:11:46:4f:5b:
65:45:f4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:46:12 2026 by rpki-client