Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File: 1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier: hGEehfkQ9PW38Ud1C2WPjCdUK1kHOzhg3gxAnBOCP3c=
Subject key identifier: 14:84:05:4C:1B:F6:D7:CE:21:BD:3B:5C:AF:B7:6E:6F:3D:97:75:E5
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 019D38658DCCFFD97EEDBBA3E19FE228206C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number: 0826
Signing time: Sun 29 Mar 2026 07:01:12 +0000
Manifest this update: Sun 29 Mar 2026 07:01:12 +0000
Manifest next update: Mon 30 Mar 2026 07:01:12 +0000
Files and hashes: 1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: DOJeIVFLMg/v41/OA3ejYdGPH1vEDTihmKQ7k8zY/sQ=)
2: GpK1qyRmRdQTMv9rJuBvrLPAPCA.roa (hash: 6pjGKy0zNDxK6EGW3iKdJRBjUTjPWde8CyQwLbHqWIc=)
3: iTaV7elHXW3QykhmVM8s9S75IWo.roa (hash: I33OFLbbVy5ULnfJGK6BAuTPAY6ngasZNHORp7xBvjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:8d:cc:ff:d9:7e:ed:bb:a3:e1:9f:e2:28:20:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: Mar 29 07:01:12 2026 GMT
Not After : Mar 30 07:01:12 2026 GMT
Subject: CN=1484054c1bf6d7ce21bd3b5cafb76e6f3d9775e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:b5:9c:14:45:d3:08:22:60:ff:bd:b5:98:
d9:96:f7:08:6f:08:54:10:bc:04:16:3c:d9:66:4c:
04:b2:f8:8b:b4:a1:9d:2b:d1:ad:b4:bd:b9:3f:59:
d6:54:69:b0:68:af:da:5e:16:a3:fc:54:22:ef:fc:
0a:d2:f8:13:83:34:af:63:d0:28:26:ee:f1:29:3d:
64:12:f9:a5:f6:da:be:c1:9b:07:be:cd:b5:ac:c2:
00:99:e4:83:3c:de:5c:0e:78:b5:74:7e:91:f1:ab:
0b:df:6c:4f:7f:02:bf:cd:e1:f3:77:ff:70:8e:90:
49:27:05:66:76:4e:5d:f7:c1:e1:85:fb:c0:eb:0c:
f6:c0:5f:04:41:b6:35:e2:cb:45:0e:c0:67:74:d0:
73:5d:92:dd:dd:ef:65:b3:c2:c0:8e:2c:7e:08:46:
8d:e5:f5:cc:cb:be:e9:b0:38:b1:da:85:df:e7:fe:
8d:fd:07:04:81:24:c4:5c:3b:5d:70:6a:35:86:53:
70:b5:45:0c:d7:57:81:a9:a3:2d:8e:07:ca:50:65:
bf:de:3d:d6:b5:ba:55:f2:30:ab:51:54:ff:1b:55:
1d:fe:31:ab:df:39:26:ca:1b:67:d1:7e:c9:d3:d0:
5d:99:f4:58:b1:30:24:83:6c:bf:4d:7b:45:a3:b1:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:84:05:4C:1B:F6:D7:CE:21:BD:3B:5C:AF:B7:6E:6F:3D:97:75:E5
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:f0:79:2e:d2:2d:0f:f4:c8:03:7f:a0:25:75:2e:09:0c:85:
5c:50:96:0f:7b:de:dd:73:b4:91:31:8a:51:bd:03:10:88:3b:
a0:13:ee:43:5f:81:98:5a:76:5e:dd:bb:e4:c9:3f:a3:dd:f1:
31:af:9a:2e:7c:3b:ae:62:83:82:f6:e7:f5:8b:71:8c:7e:82:
52:66:79:ad:78:0e:21:ea:42:7b:c6:51:53:72:78:66:2e:e2:
b0:f5:9e:74:fd:5a:c6:3c:35:12:6f:4f:46:0a:93:2f:e9:a6:
9b:4c:5a:d1:ed:2b:f2:29:0b:38:0d:4c:89:33:36:87:6f:f2:
4d:9a:39:60:74:13:59:a2:d4:27:7a:fe:ab:15:af:5b:41:3c:
cd:05:34:ed:5a:73:13:96:63:ca:99:bd:8c:df:13:a5:ec:8e:
9a:99:13:76:df:0a:ce:e1:f7:49:b1:ad:eb:8e:63:19:5c:f7:
06:00:95:f8:7e:79:72:42:62:62:f0:c0:71:58:3a:19:cd:fd:
0d:0c:b8:be:a5:3e:b0:49:79:46:89:05:ab:59:6f:79:72:a0:
72:ec:3c:56:10:f1:0b:4f:fc:0c:13:13:90:0b:b9:34:16:65:
48:91:a2:17:cf:d4:c8:73:13:2d:32:cd:bf:28:68:48:76:b7:
1b:d4:a7:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZY3M/9l+7buj4Z/iKCBsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Njk0OGZiYzkyNWY5NzU5ZmI2OWY5ZWZiMTJlZTNmMWNk
NDE2MTUwHhcNMjYwMzI5MDcwMTEyWhcNMjYwMzMwMDcwMTEyWjAzMTEwLwYDVQQD
EygxNDg0MDU0YzFiZjZkN2NlMjFiZDNiNWNhZmI3NmU2ZjNkOTc3NWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf+1nBRF0wgiYP+9tZjZlvcIbwhU
ELwEFjzZZkwEsviLtKGdK9GttL25P1nWVGmwaK/aXhaj/FQi7/wK0vgTgzSvY9Ao
Ju7xKT1kEvml9tq+wZsHvs21rMIAmeSDPN5cDni1dH6R8asL32xPfwK/zeHzd/9w
jpBJJwVmdk5d98HhhfvA6wz2wF8EQbY14stFDsBndNBzXZLd3e9ls8LAjix+CEaN
5fXMy77psDix2oXf5/6N/QcEgSTEXDtdcGo1hlNwtUUM11eBqaMtjgfKUGW/3j3W
tbpV8jCrUVT/G1Ud/jGr3zkmyhtn0X7J09BdmfRYsTAkg2y/TXtFo7GOowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSEBUwb9tfOIb07XK+3bm89l3XlMB8GA1UdIwQY
MBaAFNRpSPvJJfl1n7afnvsS7j8c1BYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTkt
MTgxZTY0MDU5ZDMxLzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy85ZTZjMmItNTk1Ni00M2I2LWFjYTktMTgxZTY0MDU5ZDMx
LzEvMUdsSS04a2wtWFdmdHAtZS14THVQeHpVRmhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMPB5LtIt
D/TIA3+gJXUuCQyFXFCWD3ve3XO0kTGKUb0DEIg7oBPuQ1+BmFp2Xt275Mk/o93x
Ma+aLnw7rmKDgvbn9YtxjH6CUmZ5rXgOIepCe8ZRU3J4Zi7isPWedP1axjw1Em9P
RgqTL+mmm0xa0e0r8ikLOA1MiTM2h2/yTZo5YHQTWaLUJ3r+qxWvW0E8zQU07Vpz
E5Zjypm9jN8TpeyOmpkTdt8KzuH3SbGt645jGVz3BgCV+H55ckJiYvDAcVg6Gc39
DQy4vqU+sEl5RokFq1lveXKgcuw8VhDxC0/8DBMTkAu5NBZlSJGiF8/UyHMTLTLN
vyhoSHa3G9SnmA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:16 2026 by rpki-client