Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
File: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft (raw, json)
Hash identifier: 7D3EsD+XJVC8AOxkyoff+S+2QFu+hMjW4pG/k3344hs=
Subject key identifier: E8:40:C1:EF:27:5B:D5:01:0A:B4:80:10:2C:4F:C1:3D:A6:A7:19:70
Authority key identifier: 1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
Certificate issuer: /CN=1a5763d41bb533558a8520de5a96eb2258068941
Certificate serial: 01A1046DD5CD6A3950C6EE754400021785C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
Manifest number: 15CB
Signing time: Sun 04 Oct 2026 01:01:09 +0000
Manifest this update: Sun 04 Oct 2026 01:01:09 +0000
Manifest next update: Mon 05 Oct 2026 01:01:09 +0000
Files and hashes: 1: CXNncTCsuwzDylA9XErMW-s33Aw.asa (hash: 9FVo2YChLRpaZGyr4m7XQZjIsysXpsuWXIuW+MOA+bo=)
2: Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl (hash: VySI8oN8PviZemWquDcqthGbJo4pEfmWziH0XdcK6wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:6d:d5:cd:6a:39:50:c6:ee:75:44:00:02:17:85:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5763d41bb533558a8520de5a96eb2258068941
Validity
Not Before: Oct 4 01:01:09 2026 GMT
Not After : Oct 5 01:01:09 2026 GMT
Subject: CN=e840c1ef275bd5010ab480102c4fc13da6a71970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:45:75:68:3a:98:fd:2c:74:dd:48:dc:a7:
57:e4:02:a5:a0:30:d1:ea:71:6f:15:4b:64:ee:31:
d2:b8:10:a7:0e:3f:31:80:1b:74:c0:c1:53:aa:da:
f6:9f:d5:b3:e3:08:f6:8d:d0:80:ed:f7:ca:f9:10:
80:86:3b:3a:80:b6:c1:5c:1d:a2:a0:fa:a6:c6:6c:
80:98:2d:fc:f4:e0:f6:7d:dc:1a:79:a1:f5:61:d4:
ea:6a:40:66:7d:91:68:90:c6:66:a4:fa:0b:9a:4c:
34:a8:49:50:7e:68:b4:6f:cf:9c:25:58:31:da:c7:
dc:78:32:44:77:78:11:39:ec:60:ae:a5:16:bf:c6:
ce:b6:64:fe:16:d2:55:5c:3b:82:7c:e0:a3:bf:0e:
d2:0d:47:b8:c9:cc:aa:ff:d8:1a:a1:59:ba:b5:e1:
10:c5:a6:c4:2f:02:07:ee:60:ea:51:08:fc:3c:10:
6a:fa:f3:98:4c:9f:8a:2f:6e:66:b0:f1:f0:45:1b:
12:49:91:e6:2f:0a:f8:c0:13:1e:dc:5e:31:af:34:
59:4e:0c:e5:d6:d5:63:4f:4b:e4:2d:b3:51:4d:2a:
1d:95:2a:bb:4e:4f:af:c9:91:67:fb:33:1c:c1:7a:
9e:f1:85:63:b5:89:27:a9:67:87:6c:f9:39:44:2f:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:40:C1:EF:27:5B:D5:01:0A:B4:80:10:2C:4F:C1:3D:A6:A7:19:70
X509v3 Authority Key Identifier:
keyid:1A:57:63:D4:1B:B5:33:55:8A:85:20:DE:5A:96:EB:22:58:06:89:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2effbe-109c-4956-b4a0-4c8365515965/1/Gldj1Bu1M1WKhSDeWpbrIlgGiUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:b3:32:e6:d3:f4:95:a5:67:85:c5:d2:d3:c6:fa:6e:ed:bf:
63:46:ca:99:59:c2:7a:8f:f6:00:18:b9:d4:0a:17:91:e1:a8:
dc:64:9c:0b:41:c0:f8:8f:48:03:81:8b:14:bc:e5:1e:2b:5c:
d9:d4:ca:ed:39:7d:50:d4:a4:6f:a2:5b:c8:1a:c2:e4:a4:d9:
80:ff:21:37:17:06:18:05:51:7f:25:11:d4:48:55:d3:50:91:
fd:a1:74:ee:1f:c0:f9:00:fc:ce:a8:09:4d:fd:f7:00:45:34:
e7:42:c7:d4:c9:41:a4:87:84:d5:6e:75:08:12:8a:e0:1a:3c:
92:f9:7a:c3:fc:61:c2:19:ab:9d:bb:a5:c3:dc:fd:f9:ed:13:
87:0d:d0:da:69:c7:cf:f7:35:c4:c9:36:f7:17:ab:10:09:1f:
08:f4:af:e7:7c:03:9a:72:cb:60:c4:93:b0:e6:d5:1c:5c:bd:
98:10:30:bc:4a:bf:e8:9a:3c:87:cd:3b:f9:41:48:dd:19:99:
60:c7:d8:f8:54:c3:9d:51:40:bd:02:04:ba:20:80:5c:9e:c5:
54:64:2d:cf:c4:99:52:7c:db:04:5d:5f:7e:12:3a:85:e1:20:
06:1b:cf:05:5b:30:37:33:58:32:81:4e:a0:1c:9a:b9:ea:cb:
d7:34:79:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:43:49 2026 by rpki-client