Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
File: 1GlI-8kl-XWftp-e-xLuPxzUFhU.mft (raw, json)
Hash identifier: 4qB/edmcrUOY3OeDxxP3EXJ2af11xlZhamfAJzcUKUo=
Subject key identifier: 8E:38:9F:9D:2F:11:A8:94:20:73:CC:86:E7:2B:BD:D3:7D:0A:3C:18
Authority key identifier: D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
Certificate issuer: /CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Certificate serial: 019E29CB84DBDF9B17CA4A598939432BBBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
Manifest number: 08A3
Signing time: Fri 15 May 2026 04:01:04 +0000
Manifest this update: Fri 15 May 2026 04:01:04 +0000
Manifest next update: Sat 16 May 2026 04:01:04 +0000
Files and hashes: 1: 1GlI-8kl-XWftp-e-xLuPxzUFhU.crl (hash: bKnBYwytKiWpAHhyc8+8HknB4Vmft7IwhJfJR+YUAZ8=)
2: GpK1qyRmRdQTMv9rJuBvrLPAPCA.roa (hash: 6pjGKy0zNDxK6EGW3iKdJRBjUTjPWde8CyQwLbHqWIc=)
3: iTaV7elHXW3QykhmVM8s9S75IWo.roa (hash: I33OFLbbVy5ULnfJGK6BAuTPAY6ngasZNHORp7xBvjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cb:84:db:df:9b:17:ca:4a:59:89:39:43:2b:bb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d46948fbc925f9759fb69f9efb12ee3f1cd41615
Validity
Not Before: May 15 04:01:04 2026 GMT
Not After : May 16 04:01:04 2026 GMT
Subject: CN=8e389f9d2f11a8942073cc86e72bbdd37d0a3c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a9:bb:1e:5e:0d:cf:91:03:cc:79:7b:f1:d5:
64:39:d2:da:8e:4f:7e:6c:d8:94:40:63:91:61:8e:
43:f7:d0:57:e0:f5:71:bb:37:3e:04:a1:63:d3:b7:
43:71:db:38:9a:a7:69:da:d2:4c:6e:b4:7b:b3:6d:
d5:bf:65:d0:9a:0a:17:b3:3d:6c:46:2f:54:26:ad:
cc:df:c2:47:52:13:51:e0:4d:65:15:08:6d:04:54:
5c:6a:1c:d6:8d:f9:bf:65:7d:59:35:d6:49:7d:f2:
50:e9:02:50:e4:e7:f8:ea:f6:30:e5:3b:1b:eb:bf:
45:d8:e1:8d:8c:89:45:11:e2:7f:52:5a:19:78:d5:
c4:b9:dd:8b:e5:07:f6:af:2f:3e:61:82:13:89:3a:
5c:e4:9a:19:92:6e:9a:02:14:c4:ef:33:31:af:4e:
0f:47:b2:6d:cd:40:61:34:83:ec:fe:4b:9e:38:13:
90:3d:6d:d3:c0:8a:8f:b9:58:ca:1f:6c:31:e9:c4:
bd:f0:bb:bc:1f:b4:28:bc:25:13:46:02:4f:d8:62:
a4:fd:6b:e8:ed:77:4c:61:86:b6:58:94:09:ef:f1:
ad:81:b9:21:57:cd:d7:aa:08:ae:15:a6:bd:8c:e1:
4f:51:e2:29:3d:21:1a:7c:67:54:ec:49:12:35:16:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:38:9F:9D:2F:11:A8:94:20:73:CC:86:E7:2B:BD:D3:7D:0A:3C:18
X509v3 Authority Key Identifier:
keyid:D4:69:48:FB:C9:25:F9:75:9F:B6:9F:9E:FB:12:EE:3F:1C:D4:16:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GlI-8kl-XWftp-e-xLuPxzUFhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9e6c2b-5956-43b6-aca9-181e64059d31/1/1GlI-8kl-XWftp-e-xLuPxzUFhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:c7:d5:1b:3d:ec:41:43:09:f3:0b:58:da:62:a3:be:2d:65:
85:6f:83:60:a1:da:6c:f1:6b:82:9b:7e:57:b5:97:22:54:81:
cb:05:14:d8:97:d4:1d:3e:bc:3a:08:1a:e9:75:2c:30:2c:f0:
46:d8:f3:d9:76:84:b7:e1:b0:d3:1d:09:62:00:0c:60:fd:29:
b7:ff:22:65:54:18:2a:57:0e:99:f3:cc:43:3a:e7:0a:06:2b:
8e:57:31:a4:a6:e0:a6:e1:8b:d4:d1:31:44:b4:4e:63:8c:a0:
b9:7b:ce:f5:fe:35:0e:7a:bc:b7:b8:b7:fe:cc:26:71:67:08:
b4:9e:c3:a3:d8:9b:52:8e:80:f7:9b:09:2e:f2:5c:6b:1b:7c:
18:6f:2d:3c:2e:5e:fc:32:90:db:a4:d4:3a:5a:f4:68:ba:35:
58:ad:09:83:d2:7c:7d:52:85:42:77:13:7d:de:dd:db:b2:99:
21:88:93:cc:61:db:2c:d0:64:1f:f3:86:1c:47:5b:96:ad:6e:
12:e3:c6:b0:03:5f:1f:f5:e3:ab:51:17:5a:e4:24:db:d8:23:
9f:05:c3:89:05:ee:50:13:ec:da:23:ff:7a:77:08:f5:47:8c:
96:e0:3a:a3:17:c1:80:69:05:cc:55:33:04:4b:f2:0f:30:95:
fa:e4:96:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:38:00 2026 by rpki-client