Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
File: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json)
Hash identifier: tlYIJiNh0lS9f7yKHhdScNgMvPlKFhtxYG0dx8Em+Po=
Subject key identifier: 28:D6:A9:62:1E:81:0A:11:F6:F1:8A:19:14:D2:0E:DE:08:72:29:9D
Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
Certificate issuer: /CN=1a5763d41bb533558a8520de5a96eb2258068941
Certificate serial: 019FA116C1425C5C948D71EFBADAA1EEF970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
Manifest number: 1513
Signing time: Mon 27 Jul 2026 01:00:50 +0000
Manifest this update: Mon 27 Jul 2026 01:00:50 +0000
Manifest next update: Tue 28 Jul 2026 01:00:50 +0000
Files and hashes: 1: CXNncTCsuwzDylA9XErMW-s33Aw.asa (hash: 9FVo2YChLRpaZGyr4m7XQZjIsysXpsuWXIuW+MOA+bo=)
2: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: IL4fBbyIe4pgPmgjwvt4fEw/Vf+Jfac2j8RrspMlzxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:c1:42:5c:5c:94:8d:71:ef:ba:da:a1:ee:f9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941
Validity
Not Before: Jul 27 01:00:50 2026 GMT
Not After : Jul 28 01:00:50 2026 GMT
Subject: CN=28d6a9621e810a11f6f18a1914d20ede0872299d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cd:76:b1:8b:12:9b:19:f3:6a:70:c1:33:46:
9a:5f:83:3b:29:80:00:2c:98:e6:99:72:d1:82:44:
55:3d:a4:ec:28:e0:90:46:f3:91:0d:78:9b:db:7b:
4f:0e:2f:1c:90:44:73:60:7c:5f:f1:a4:2c:ce:68:
42:cf:a8:27:9e:6f:5c:d7:42:24:c8:47:9e:82:4e:
50:3c:aa:6a:1b:8e:f4:cc:41:d6:69:ef:4f:48:2b:
ac:43:a1:e6:9c:69:b4:5a:9a:63:3a:33:dd:f2:88:
7f:bb:e4:8d:8d:de:8f:8a:00:53:cd:0e:76:e7:95:
1b:b1:9b:91:88:98:e7:0b:06:bd:fe:8b:21:15:06:
2a:c8:f2:f4:9a:26:4e:90:b4:ea:b2:5b:74:fd:40:
25:9c:a9:3f:89:3a:e4:7b:34:e1:c7:52:91:c2:8e:
cc:25:02:d7:92:68:4a:49:40:9d:12:75:65:11:a3:
c8:fd:d7:b7:a2:0c:9a:7c:b8:ca:ac:9a:6d:d2:2a:
de:ba:9f:a4:60:20:05:90:79:d1:fb:12:db:f1:32:
78:1f:6e:60:cf:0e:4e:f0:b7:8c:38:51:d8:62:d1:
3e:fd:7b:2b:60:ac:04:ca:30:6f:1f:b2:e3:73:e5:
3a:9a:cd:14:16:16:49:b8:46:ec:54:3f:d2:37:1a:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D6:A9:62:1E:81:0A:11:F6:F1:8A:19:14:D2:0E:DE:08:72:29:9D
X509v3 Authority Key Identifier:
keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:9b:2b:5b:98:0e:5f:76:7c:14:01:cf:03:f8:f8:59:3e:10:
49:d5:1a:22:37:da:08:b0:c0:47:04:4e:88:3a:0e:58:76:61:
a3:7e:1d:2d:9c:a9:32:80:ab:cc:8f:b1:60:ca:32:1a:6f:b3:
df:b3:ff:a4:e4:81:4e:13:be:69:58:f0:62:b8:ab:32:04:77:
60:b5:fb:1f:77:ee:bc:4b:7f:bd:97:b0:51:cf:ac:b4:0f:d9:
fc:b0:09:66:24:25:f1:97:20:6a:a2:50:6b:d7:a4:5c:a2:b3:
a7:ee:44:53:65:ab:01:1a:19:9e:7e:48:d9:f2:63:a5:ed:86:
a2:1f:42:11:d7:28:9d:c7:5f:49:c8:ba:52:ca:4d:82:f1:34:
07:89:b1:fc:40:28:a2:5f:35:f4:e6:90:7d:2f:f7:2c:ff:68:
11:fc:61:f7:a4:06:fa:68:4c:c8:cc:26:f1:36:19:4d:92:07:
96:a3:94:23:63:99:74:22:26:81:a5:bc:49:c4:80:ca:ed:1e:
3e:4d:2e:bc:2a:e6:71:62:1e:ec:68:60:30:3b:b5:e8:37:5b:
88:db:9d:8b:82:7d:57:68:9f:41:ac:ec:53:da:21:f8:3b:10:
66:c1:49:f4:29:52:b4:bd:25:f3:4e:e0:4d:ec:bc:7e:9d:4a:
92:e1:89:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:16:52 2026 by rpki-client