Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
File: GlBzFFuSbpppBeupGOIetM8crhA.mft (raw, json)
Hash identifier: p4rDb79bjMNr8zFM8qaCB9prCOEfRuKDWp95N0xVEMM=
Subject key identifier: 3E:79:47:11:57:80:DD:15:0E:91:1B:AF:3B:E1:76:77:93:D9:EE:A5
Authority key identifier: 1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
Certificate issuer: /CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Certificate serial: 019D38655261738447B033E80F3B92F8EC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 07:00:57 +0000
Manifest this update: Sun 29 Mar 2026 07:00:57 +0000
Manifest next update: Mon 30 Mar 2026 07:00:57 +0000
Files and hashes: 1: GlBzFFuSbpppBeupGOIetM8crhA.crl (hash: WpyKSo+BSy7EZicBWed7EsK8zV2sEHGL4Z/xdz2tLok=)
2: pregM6BDoh2HWEQHPv67MtqnAfQ.roa (hash: De/BoyOlsQu9RdcTHEChfgcsiNtul5qAGlcozd5f7DQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:52:61:73:84:47:b0:33:e8:0f:3b:92:f8:ec:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5073145b926e9a6905eba918e21eb4cf1cae10
Validity
Not Before: Mar 29 07:00:57 2026 GMT
Not After : Mar 30 07:00:57 2026 GMT
Subject: CN=3e7947115780dd150e911baf3be1767793d9eea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e5:fa:aa:1a:b0:67:5b:a0:30:6e:6e:0d:ee:
65:ce:0c:10:1a:d6:f9:dd:e1:d0:fa:29:f7:79:bf:
44:de:b6:b9:e9:8a:c8:e0:95:bc:9e:5d:82:07:1a:
29:ca:3a:bb:72:e8:2a:13:ad:7c:c5:0b:b2:42:bd:
ba:4e:5d:03:f9:9e:ba:f4:27:2f:22:fb:52:b0:5e:
db:4a:f3:bc:16:0a:5a:be:0f:0c:90:4f:87:96:4a:
4b:bb:34:95:0e:f3:13:5b:5b:71:5f:01:02:ff:69:
db:15:9c:d5:92:04:41:e3:ef:78:af:c9:11:76:83:
c1:10:bf:f7:b5:91:8b:f3:48:36:c8:86:a2:38:e9:
2a:3d:ff:f0:13:ca:fe:f2:ed:4a:12:54:4b:c4:8b:
b9:6c:21:45:d9:da:3f:14:aa:c0:37:1d:a7:b7:9c:
41:d4:30:a1:58:ec:0d:d5:ee:f9:6b:77:90:b4:b7:
bf:d0:e0:4d:d1:02:af:88:1f:90:30:84:9e:38:f0:
c6:5a:a8:b6:39:da:03:49:23:7c:4d:45:53:62:7d:
65:b7:89:32:28:56:7f:95:eb:27:a5:d3:88:6a:4b:
89:b7:3d:c4:ef:bd:db:e8:4f:27:ae:8a:d4:2b:a9:
7e:85:3d:95:5d:38:03:d5:d7:55:60:17:17:d5:cd:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:79:47:11:57:80:DD:15:0E:91:1B:AF:3B:E1:76:77:93:D9:EE:A5
X509v3 Authority Key Identifier:
keyid:1A:50:73:14:5B:92:6E:9A:69:05:EB:A9:18:E2:1E:B4:CF:1C:AE:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlBzFFuSbpppBeupGOIetM8crhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e6f5d7-1be1-4851-b994-1a143e971cee/1/GlBzFFuSbpppBeupGOIetM8crhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:09:ee:fc:2a:c2:5b:81:78:f2:b0:e6:2d:dc:43:c1:f6:89:
d3:fc:0f:93:fe:5f:b4:67:56:0e:73:c2:b4:d0:03:0c:49:95:
82:a2:20:e8:dd:22:29:b6:5f:d2:81:18:9c:fc:18:06:d7:8c:
7d:5f:6d:78:bf:a8:63:14:ff:62:83:34:79:f1:40:cc:67:c0:
2c:24:88:0c:92:4f:b1:47:86:98:c4:ba:17:27:50:f6:a1:74:
2f:9d:22:12:66:fc:7e:17:34:c2:d1:53:fb:d8:3c:43:7c:9d:
23:e0:97:39:ab:d2:9b:85:4a:17:15:21:f7:3a:0a:e0:dc:ac:
ce:ca:12:54:95:ca:10:ae:c0:82:00:ba:60:33:32:4e:40:8d:
fa:c7:8d:df:b2:c6:85:b1:d9:89:38:96:5d:1b:a7:77:44:80:
a2:a3:62:35:2a:14:54:e5:f2:2a:0d:96:90:ca:3d:9f:69:16:
6b:3e:fb:5e:9b:97:19:b6:f4:d7:96:7b:53:e6:01:25:ae:08:
e2:7b:66:e0:04:62:d7:67:0f:2d:2b:8a:9c:c9:43:17:1d:1d:
37:09:b7:cc:62:70:aa:f3:a5:fc:60:3a:4a:b4:c6:2d:8c:ca:
ce:ca:b5:42:68:bc:b7:dc:1f:5d:76:88:28:b1:dd:df:eb:68:
37:34:8a:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZVJhc4RHsDPoDzuS+OxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNTA3MzE0NWI5MjZlOWE2OTA1ZWJhOTE4ZTIxZWI0Y2Yx
Y2FlMTAwHhcNMjYwMzI5MDcwMDU3WhcNMjYwMzMwMDcwMDU3WjAzMTEwLwYDVQQD
EygzZTc5NDcxMTU3ODBkZDE1MGU5MTFiYWYzYmUxNzY3NzkzZDllZWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOX6qhqwZ1ugMG5uDe5lzgwQGtb5
3eHQ+in3eb9E3ra56YrI4JW8nl2CBxopyjq7cugqE618xQuyQr26Tl0D+Z669Ccv
IvtSsF7bSvO8Fgpavg8MkE+HlkpLuzSVDvMTW1txXwEC/2nbFZzVkgRB4+94r8kR
doPBEL/3tZGL80g2yIaiOOkqPf/wE8r+8u1KElRLxIu5bCFF2do/FKrANx2nt5xB
1DChWOwN1e75a3eQtLe/0OBN0QKviB+QMISeOPDGWqi2OdoDSSN8TUVTYn1lt4ky
KFZ/lesnpdOIakuJtz3E773b6E8nrorUK6l+hT2VXTgD1ddVYBcX1c00ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD55RxFXgN0VDpEbrzvhdneT2e6lMB8GA1UdIwQY
MBaAFBpQcxRbkm6aaQXrqRjiHrTPHK4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lNmY1ZDctMWJlMS00ODUxLWI5OTQt
MWExNDNlOTcxY2VlLzEvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lNmY1ZDctMWJlMS00ODUxLWI5OTQtMWExNDNlOTcxY2Vl
LzEvR2xCekZGdVNicHBwQmV1cEdPSWV0TThjcmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhgnu/CrC
W4F48rDmLdxDwfaJ0/wPk/5ftGdWDnPCtNADDEmVgqIg6N0iKbZf0oEYnPwYBteM
fV9teL+oYxT/YoM0efFAzGfALCSIDJJPsUeGmMS6FydQ9qF0L50iEmb8fhc0wtFT
+9g8Q3ydI+CXOavSm4VKFxUh9zoK4NyszsoSVJXKEK7AggC6YDMyTkCN+seN37LG
hbHZiTiWXRund0SAoqNiNSoUVOXyKg2WkMo9n2kWaz77XpuXGbb015Z7U+YBJa4I
4ntm4ARi12cPLSuKnMlDFx0dNwm3zGJwqvOl/GA6SrTGLYzKzsq1Qmi8t9wfXXaI
KLHd3+toNzSKpg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:34 2026 by rpki-client