Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
File: GlFygaz5bTjnmjXIvraLjAWXmm8.mft (raw, json)
Hash identifier: UwC977N7SM20oRn0IkIwxcujrs3qjGSSNCjj1kZEzYk=
Subject key identifier: 2C:E9:7A:54:EB:4A:43:DE:03:38:67:CF:6B:C9:5C:C4:59:F9:33:C0
Authority key identifier: 1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
Certificate issuer: /CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Certificate serial: 019D37C0E5052212E10A0D1852CC3C6D38CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
Manifest number: 0745
Signing time: Sun 29 Mar 2026 04:01:21 +0000
Manifest this update: Sun 29 Mar 2026 04:01:21 +0000
Manifest next update: Mon 30 Mar 2026 04:01:21 +0000
Files and hashes: 1: GlFygaz5bTjnmjXIvraLjAWXmm8.crl (hash: 9SdqiAcacxFRiB6qaXOy5kYLy1C98i6KcGuU6cmyVHU=)
2: ZYe946WWsJLWYqwE2jrnQ5CvbLs.roa (hash: YzJAKJVzdhVwg2Wfzuv11ahwmdOVCIuLQiQ88WgRMJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e5:05:22:12:e1:0a:0d:18:52:cc:3c:6d:38:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a517281acf96d38e79a35c8beb68b8c05979a6f
Validity
Not Before: Mar 29 04:01:21 2026 GMT
Not After : Mar 30 04:01:21 2026 GMT
Subject: CN=2ce97a54eb4a43de033867cf6bc95cc459f933c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:41:6e:84:6a:ec:e1:1a:8d:20:e3:3c:3a:
79:2b:3d:f1:05:e8:7c:ad:2d:1d:a2:ed:d4:8d:25:
41:a7:15:86:9b:de:0b:19:d4:4d:96:a8:8b:1a:13:
e6:25:62:df:2e:38:30:2c:75:df:c5:7c:46:41:fc:
b7:82:3c:37:be:56:6e:c8:b1:26:ca:5d:9e:a2:da:
ce:f3:d5:c3:0a:62:b9:9e:4d:ae:0f:7f:8c:a0:fb:
ac:27:40:e9:c6:ea:da:8c:01:6e:5e:47:89:f5:62:
b0:28:46:f6:66:2b:f5:ce:99:9d:22:7e:be:4b:6e:
0d:3f:59:10:58:62:ff:6d:a7:97:30:e9:8e:5a:92:
5d:6d:45:47:a4:3c:18:47:05:2d:52:59:71:6c:94:
da:23:39:ec:0f:c8:87:64:f0:0c:c0:22:50:80:7d:
91:0b:bd:85:9b:f9:7d:92:be:b7:bd:cb:38:cb:51:
36:d5:e5:fa:6b:f4:b5:ed:41:71:8e:50:51:3f:36:
e5:90:4d:8a:76:bb:e4:4a:f8:a7:86:4c:c6:e3:5f:
31:81:be:15:0a:96:f7:94:42:e0:1a:88:45:8f:79:
fc:83:51:b3:a8:ef:de:47:f9:0c:99:d0:ee:c2:c8:
61:10:32:b8:6e:f7:73:ce:fc:5d:0f:fb:d4:6f:76:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E9:7A:54:EB:4A:43:DE:03:38:67:CF:6B:C9:5C:C4:59:F9:33:C0
X509v3 Authority Key Identifier:
keyid:1A:51:72:81:AC:F9:6D:38:E7:9A:35:C8:BE:B6:8B:8C:05:97:9A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlFygaz5bTjnmjXIvraLjAWXmm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/14ffe2-4e45-4af2-b685-70272688e970/1/GlFygaz5bTjnmjXIvraLjAWXmm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f6:80:5b:b1:59:68:c1:ed:9f:99:5c:75:f3:9e:86:d0:d7:
b2:78:ff:93:45:6a:fa:2a:7e:85:d7:40:90:37:9f:7a:d0:de:
d9:ee:9a:29:d4:66:e0:c4:0d:e8:65:f0:82:c4:17:de:ad:a9:
93:15:3d:e3:61:cf:f7:0d:fc:a7:9f:97:bc:6d:b4:a9:35:0b:
21:1f:8b:87:a2:df:02:cf:4d:cf:ce:75:14:3e:d8:d0:0a:b7:
d7:ed:5e:9e:40:c0:2f:58:ec:61:35:19:b6:89:3b:dd:2a:c7:
85:13:00:67:7d:89:05:0e:42:0c:b6:31:31:76:ea:87:9e:6a:
ee:c2:db:2f:e8:e2:a6:cb:4c:1a:b6:06:89:2d:9d:d5:18:13:
50:d9:cb:7c:a6:65:a4:fe:f2:b1:b6:95:f4:e9:ac:ee:3a:e2:
e4:81:e9:2c:cf:bd:83:a1:22:ef:5e:6b:d6:d5:91:a6:7a:ae:
db:0f:f6:b5:0e:32:aa:67:ad:73:3b:64:7f:0e:e6:52:d3:58:
de:d3:82:51:0c:dd:b1:eb:ea:06:a5:10:b3:8f:f0:0a:68:c7:
99:dd:e4:e7:fa:da:dc:d0:40:e8:2e:55:14:9e:0b:bf:cd:90:
3d:d3:fb:86:d9:55:f5:c0:d6:5b:25:26:1c:03:a2:a5:a8:57:
ee:b9:e8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:56 2026 by rpki-client