Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File: 1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier: h0wFoEkJou8R0UYmbgJqGOmuN6+1M8D2sjkuKJ4MF1M=
Subject key identifier: 27:91:C6:9B:DC:96:3D:CE:E3:74:17:5B:20:E5:C4:1C:71:07:9E:29
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 01A13FA75673952804C21DA1B5C08286145C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number: 0A3C
Signing time: Thu 15 Oct 2026 13:01:33 +0000
Manifest this update: Thu 15 Oct 2026 13:01:33 +0000
Manifest next update: Fri 16 Oct 2026 13:01:33 +0000
Files and hashes: 1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: +A5uCfrOZuRkLLDD9dHfFi87daFr73t7MZP99oBnn/A=)
2: GpK1qyRmRdQTMv9rJuBvrLPAPCA.roa (hash: 6pjGKy0zNDxK6EGW3iKdJRBjUTjPWde8CyQwLbHqWIc=)
3: iTaV7elHXW3QykhmVM8s9S75IWo.roa (hash: I33OFLbbVy5ULnfJGK6BAuTPAY6ngasZNHORp7xBvjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:56:73:95:28:04:c2:1d:a1:b5:c0:82:86:14:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Oct 15 13:01:33 2026 GMT
Not After : Oct 16 13:01:33 2026 GMT
Subject: CN=2791c69bdc963dcee374175b20e5c41c71079e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:35:b9:ac:39:2e:04:34:5e:aa:0d:07:21:
3b:d9:3f:49:ec:3f:2f:fb:3d:05:f6:cd:6a:b6:8a:
ff:3d:5d:59:36:3f:ce:0a:7c:f5:c2:88:b4:67:ec:
08:da:f6:10:2a:15:86:c3:51:43:99:a3:ef:98:1e:
6d:e7:88:f2:f6:18:54:9f:9f:e1:00:50:80:79:83:
45:3c:09:e9:7a:b0:a6:59:21:85:61:9a:13:83:d4:
80:c2:f1:33:28:c3:3e:f5:ae:3d:3d:7e:98:af:df:
49:5c:a3:c7:b8:4f:d2:4e:02:72:c4:8c:70:2b:6d:
fd:91:d1:c8:d2:42:a8:6c:5d:e1:2e:a8:3f:ab:d8:
57:d4:e2:41:e0:4e:fc:4f:fe:26:78:3e:4c:64:37:
19:e0:05:89:9f:dd:98:84:2f:b0:47:3a:cc:86:e9:
2f:05:87:37:e6:35:15:01:86:92:bd:de:b2:de:f7:
4e:1d:5f:b6:6a:87:a4:06:a6:a0:ce:0b:c9:62:4c:
aa:56:65:e6:14:41:8f:42:5a:d1:80:66:be:6f:96:
e3:5e:f2:d9:26:77:c1:2e:8c:d8:a7:e0:e6:0e:d9:
51:9c:92:16:6c:0e:d0:ce:23:ca:df:26:82:79:8c:
0e:15:68:59:4d:d2:c1:65:ff:4e:9c:55:33:42:b7:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:91:C6:9B:DC:96:3D:CE:E3:74:17:5B:20:E5:C4:1C:71:07:9E:29
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3f:ab:e2:d4:2c:0a:27:86:50:fa:86:d0:a8:b9:4e:aa:94:
78:33:8e:8a:be:8c:e6:65:bf:66:72:65:da:fd:7a:da:86:cc:
8d:cd:e3:23:73:d1:2d:0d:fb:0a:df:d7:9f:ac:c5:36:07:70:
58:cf:88:60:f8:6e:b8:6b:5c:c8:91:cc:7c:09:55:05:24:97:
a0:4e:3c:2a:c0:32:6a:55:46:39:40:52:65:2a:03:b8:4e:d2:
e6:88:40:26:20:5d:53:f6:31:25:85:1c:5a:c4:66:4a:c0:6d:
11:e3:b7:68:34:8c:3a:b0:69:30:dd:4c:dd:ca:57:93:79:96:
02:e8:20:6b:5e:86:1c:0b:47:5a:0d:82:27:78:f0:69:1f:3d:
22:dc:9c:cf:58:08:14:f9:67:29:88:6a:c4:a8:f8:44:96:b9:
5a:85:0c:f0:8a:60:f2:84:72:51:19:a6:98:a7:aa:bf:37:6e:
e7:9d:46:07:18:3e:42:e2:ca:a1:a9:b9:0c:b6:af:00:8d:a5:
e9:c1:cb:c0:05:7d:eb:6a:53:46:92:05:7b:4b:a7:93:f0:64:
3b:c6:a9:30:bc:44:4d:75:87:cb:d6:c0:5f:4c:67:ac:81:1c:
5b:43:c9:d1:09:3e:c7:b0:d1:cf:d9:47:e0:e9:5b:61:6f:c6:
b7:b4:f2:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/p1ZzlSgEwh2htcCChhRcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Njk0OGZiYzkyNWY5NzU5ZmI2OWY5ZWZiMTJlZTNmMWNk
NDE2MTUwHhcNMjYxMDE1MTMwMTMzWhcNMjYxMDE2MTMwMTMzWjAzMTEwLwYDVQQD
EygyNzkxYzY5YmRjOTYzZGNlZTM3NDE3NWIyMGU1YzQxYzcxMDc5ZTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2c1uaw5LgQ0XqoNByE72T9J7D8v
+z0F9s1qtor/PV1ZNj/OCnz1woi0Z+wI2vYQKhWGw1FDmaPvmB5t54jy9hhUn5/h
AFCAeYNFPAnperCmWSGFYZoTg9SAwvEzKMM+9a49PX6Yr99JXKPHuE/STgJyxIxw
K239kdHI0kKobF3hLqg/q9hX1OJB4E78T/4meD5MZDcZ4AWJn92YhC+wRzrMhukv
BYc35jUVAYaSvd6y3vdOHV+2aoekBqagzgvJYkyqVmXmFEGPQlrRgGa+b5bjXvLZ
JnfBLozYp+DmDtlRnJIWbA7QziPK3yaCeYwOFWhZTdLBZf9OnFUzQrd8SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCeRxpvclj3O43QXWyDlxBxxB54pMB8GA1UdIwQY
MBaAFNRpSPvJJfl1n7afnvsS7j8c1BYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTkt
MTgxZTY0MDU5ZDMxLzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTktMTgxZTY0MDU5ZDMx
LzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeD+r4tQs
CieGUPqG0Ki5TqqUeDOOir6M5mW/ZnJl2v162obMjc3jI3PRLQ37Ct/Xn6zFNgdw
WM+IYPhuuGtcyJHMfAlVBSSXoE48KsAyalVGOUBSZSoDuE7S5ohAJiBdU/YxJYUc
WsRmSsBtEeO3aDSMOrBpMN1M3cpXk3mWAugga16GHAtHWg2CJ3jwaR89Itycz1gI
FPlnKYhqxKj4RJa5WoUM8Ipg8oRyURmmmKeqvzdu551GBxg+QuLKoam5DLavAI2l
6cHLwAV962pTRpIFe0unk/BkO8apMLxETXWHy9bAX0xnrIEcW0PJ0Qk+x7DRz9lH
4OlbYW/Gt7TyvQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:13 2026 by rpki-client