Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
File: Gloi28jb0tckjer_R-M5D3f7Sws.mft (raw, json)
Hash identifier: ltg29VbK1ODn0B2slu0A8G0TYH6qUQstKL0PiTyoCZ8=
Subject key identifier: 35:E9:69:F5:D2:1C:11:5E:C8:32:E8:C0:BD:A4:59:64:6A:C1:1F:C8
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Certificate issuer: /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial: 019FF8DA956D13FA93E2ED53C19031AB20BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
Manifest number: 1A03
Signing time: Thu 13 Aug 2026 02:01:42 +0000
Manifest this update: Thu 13 Aug 2026 02:01:42 +0000
Manifest next update: Fri 14 Aug 2026 02:01:42 +0000
Files and hashes: 1: Gloi28jb0tckjer_R-M5D3f7Sws.crl (hash: lVyu/WHgyTeEp4cLkbKevftb5Y4LNIrqU4ltf3APyV0=)
2: Suhh8wT3AT5mNSncT2o5IDBX68I.asa (hash: tisB4erk3EB45R0ami9NUuqag4XnzvX758+PaZr7EPg=)
3: nyYsyw_puc-6G9sAkIDHBW-qklo.roa (hash: r1YY5k2s3y2JyRlqz7YZwgJSL6r2URPlvPPK7VlHG6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:da:95:6d:13:fa:93:e2:ed:53:c1:90:31:ab:20:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Validity
Not Before: Aug 13 02:01:42 2026 GMT
Not After : Aug 14 02:01:42 2026 GMT
Subject: CN=35e969f5d21c115ec832e8c0bda459646ac11fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:0d:fc:93:38:48:1c:e6:4f:c8:4e:00:ec:
19:c8:25:84:b2:16:af:bb:84:bb:c6:b3:93:c2:21:
c0:ac:b3:67:e3:41:31:7f:47:38:e2:88:a0:d1:88:
8f:de:fe:d6:1e:73:10:b9:8a:6c:9e:8b:68:58:34:
ba:55:55:82:0c:66:e1:5e:bc:a7:3e:e0:46:0a:84:
be:e5:bd:01:40:7f:54:8f:c3:87:40:be:e8:af:3d:
94:3c:03:17:c9:62:81:59:75:af:d1:b6:e8:7b:4c:
a7:85:eb:36:ad:dd:99:aa:99:d4:d4:e7:c3:fa:56:
7a:5d:44:3e:34:7c:73:93:cb:49:01:bd:a4:b2:fe:
77:d5:40:ea:9c:54:03:65:d9:25:9a:6e:2d:97:45:
e3:1c:f7:a7:37:ea:75:8a:4e:ff:52:7f:55:aa:d2:
3b:48:50:36:25:8f:e8:39:a9:65:3c:f6:18:2a:bc:
5d:17:80:3c:cd:ce:c0:d4:66:e5:4c:f4:ee:72:75:
e6:99:f0:35:da:b2:99:f2:5a:47:f1:a7:d5:03:6a:
dc:3c:d4:ba:63:d5:03:9f:ea:5d:9d:b1:e2:36:22:
c1:b9:7b:bd:a0:45:a8:8e:0c:7a:85:2a:ad:84:96:
d3:c8:28:c7:ed:7f:8a:24:af:4a:cf:ea:c2:ae:74:
03:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E9:69:F5:D2:1C:11:5E:C8:32:E8:C0:BD:A4:59:64:6A:C1:1F:C8
X509v3 Authority Key Identifier:
keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:ba:c5:6a:a5:06:09:98:37:58:55:81:f6:d7:74:86:e7:32:
b4:f0:76:59:c4:62:a5:04:2a:c5:93:40:ee:3a:bc:7b:84:68:
70:5b:11:59:b8:69:39:a9:9e:f7:de:46:cb:8e:4b:b4:4b:5c:
c2:45:26:a6:e2:2e:51:0b:12:72:04:4d:54:c6:3f:6a:1f:40:
a6:05:5a:b9:3e:77:69:b9:9a:1c:ea:b1:1d:f6:40:58:b5:5a:
0f:92:72:6c:9e:9a:71:d0:ab:8f:70:79:3a:04:b3:e4:22:10:
38:35:1b:26:5b:00:5a:ca:f2:9b:8e:39:9d:9b:2b:e3:10:9e:
ab:c9:ef:82:00:72:44:71:04:89:be:3b:09:99:f8:1c:7f:56:
07:58:59:23:86:78:0a:37:4d:57:26:02:a7:15:60:d2:bf:ec:
ea:bb:6d:e1:d2:b8:4d:6a:90:77:3d:0c:50:7a:61:7e:62:36:
d4:11:91:d5:eb:1b:74:5c:d5:c8:05:a7:55:1d:37:a6:55:0a:
f3:81:cf:3a:20:8f:16:5e:03:3a:6e:95:3a:3d:97:07:cd:bc:
23:d8:ac:b6:8a:8d:02:30:b6:c4:54:b8:e6:f3:7c:bb:93:e5:
f4:99:c7:a3:f8:7f:0f:ea:f1:0e:98:ff:80:0d:3a:f8:c2:0e:
90:23:9e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:46 2026 by rpki-client