Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
File: Gloi28jb0tckjer_R-M5D3f7Sws.mft (raw, json)
Hash identifier: JRTtwEefcAhPd7mnefX1Z5t6XfmvB3G7Jl4hvVOf4Fs=
Subject key identifier: 31:A4:7D:C5:5D:6E:62:D6:21:77:97:84:D5:81:CD:E3:FA:02:AC:3B
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Certificate issuer: /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial: 01A0E853B4F70C5E81E8DDBC99330EFEE7A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
Manifest number: 1A7F
Signing time: Mon 28 Sep 2026 14:03:14 +0000
Manifest this update: Mon 28 Sep 2026 14:03:14 +0000
Manifest next update: Tue 29 Sep 2026 14:03:14 +0000
Files and hashes: 1: Gloi28jb0tckjer_R-M5D3f7Sws.crl (hash: p0ZDVD+GeYKl89d99jgn+bmSjg35OJjRtubn2ae9rGs=)
2: Suhh8wT3AT5mNSncT2o5IDBX68I.asa (hash: tisB4erk3EB45R0ami9NUuqag4XnzvX758+PaZr7EPg=)
3: nyYsyw_puc-6G9sAkIDHBW-qklo.roa (hash: r1YY5k2s3y2JyRlqz7YZwgJSL6r2URPlvPPK7VlHG6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:53:b4:f7:0c:5e:81:e8:dd:bc:99:33:0e:fe:e7:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Validity
Not Before: Sep 28 14:03:14 2026 GMT
Not After : Sep 29 14:03:14 2026 GMT
Subject: CN=31a47dc55d6e62d621779784d581cde3fa02ac3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3e:eb:ac:09:73:e4:a2:c9:be:79:52:b3:8b:
f2:eb:ee:49:87:3d:ab:65:dd:3e:42:70:2d:87:8b:
b9:3f:25:3a:36:41:28:f1:7b:05:49:7c:1d:5d:10:
7f:1d:c1:a9:6f:1b:a4:62:20:8f:71:f7:c3:d9:91:
4d:1a:38:9b:a0:8b:25:d6:f7:dc:b8:13:97:b9:c8:
b2:b3:fa:0d:58:70:6f:b4:7b:96:fc:81:fe:4d:b9:
b3:43:d6:a3:a7:3a:b8:4d:52:19:38:8b:26:b8:23:
54:5e:ba:33:ae:ca:1c:f9:19:01:49:e0:b7:aa:ba:
db:6b:a4:05:9e:ea:72:aa:f9:1d:7b:21:aa:f0:ab:
4d:13:ca:6a:86:ab:d0:85:07:81:fe:d8:c4:0b:34:
c9:ba:86:de:7b:75:41:e0:02:26:a7:40:a1:06:0d:
90:e4:19:a4:81:a1:d1:bc:47:33:e5:71:bb:3c:58:
46:f8:6a:ba:2b:02:b9:e4:8a:b5:4d:e1:a6:b2:f8:
d2:3d:84:27:2f:15:6d:9d:b3:d8:4b:4e:b6:b0:ff:
2e:aa:95:d3:43:8f:c9:0c:7c:94:35:86:37:8b:3c:
d9:39:f2:cc:bb:f5:ab:26:4e:07:5b:f9:c5:59:f0:
c0:8e:00:da:96:5e:89:34:7f:2f:f1:07:08:5e:ab:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A4:7D:C5:5D:6E:62:D6:21:77:97:84:D5:81:CD:E3:FA:02:AC:3B
X509v3 Authority Key Identifier:
keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:6c:b2:8e:33:c3:3c:ce:d5:e8:13:96:58:86:7c:27:79:74:
7b:8c:f2:17:eb:1f:86:34:82:78:cc:66:d7:19:0d:76:37:fb:
d4:c5:5d:a9:48:7f:41:92:cd:cb:c8:b1:d9:1c:57:b2:d6:6a:
b0:92:c2:d5:8f:ab:c2:59:7c:99:44:1c:40:5a:6d:db:d5:73:
23:01:cd:f6:06:d3:f5:b8:37:ac:59:b7:87:43:ae:3c:6d:af:
04:4e:67:5e:8a:ea:10:cc:35:7c:30:24:a7:1d:49:be:60:95:
95:60:ce:21:13:73:d5:84:44:43:96:71:cc:42:99:f0:e1:d8:
86:12:f8:cd:ef:7d:88:f9:49:cc:24:8e:4b:a4:a1:b1:ef:a6:
0e:85:6b:0a:ce:e7:9c:3c:7f:63:d9:2f:ed:c2:0f:03:34:7c:
0a:b8:5d:87:c5:90:ab:9d:0b:47:d5:ee:3d:a0:86:49:9e:72:
75:26:85:84:67:51:71:98:19:21:36:6d:c1:bf:af:0f:13:c3:
98:3e:27:b2:fb:3c:ea:83:b3:6f:ad:46:08:ee:2a:bb:36:3f:
33:31:53:c0:c2:15:8e:82:ba:96:84:57:91:e4:34:a0:57:d2:
70:17:6e:32:39:68:11:3a:a4:4d:be:8e:fd:72:70:3d:da:1f:
64:32:4d:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDoU7T3DF6B6N28mTMO/uenMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNWEyMmRiYzhkYmQyZDcyNDhkZWFmZjQ3ZTMzOTBmNzdm
YjRiMGIwHhcNMjYwOTI4MTQwMzE0WhcNMjYwOTI5MTQwMzE0WjAzMTEwLwYDVQQD
EygzMWE0N2RjNTVkNmU2MmQ2MjE3Nzk3ODRkNTgxY2RlM2ZhMDJhYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD7rrAlz5KLJvnlSs4vy6+5Jhz2r
Zd0+QnAth4u5PyU6NkEo8XsFSXwdXRB/HcGpbxukYiCPcffD2ZFNGjiboIsl1vfc
uBOXuciys/oNWHBvtHuW/IH+TbmzQ9ajpzq4TVIZOIsmuCNUXrozrsoc+RkBSeC3
qrrba6QFnupyqvkdeyGq8KtNE8pqhqvQhQeB/tjECzTJuobee3VB4AImp0ChBg2Q
5BmkgaHRvEcz5XG7PFhG+Gq6KwK55Iq1TeGmsvjSPYQnLxVtnbPYS062sP8uqpXT
Q4/JDHyUNYY3izzZOfLMu/WrJk4HW/nFWfDAjgDall6JNH8v8QcIXqvbZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGkfcVdbmLWIXeXhNWBzeP6Aqw7MB8GA1UdIwQY
MBaAFBpaItvI29LXJI3q/0fjOQ93+0sLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8xOTIyYzktNDk0OS00MDU1LWE2NmUt
MTVkMzI3MDliZDBmLzEvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8xOTIyYzktNDk0OS00MDU1LWE2NmUtMTVkMzI3MDliZDBm
LzEvR2xvaTI4amIwdGNramVyX1ItTTVEM2Y3U3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmyyjjPD
PM7V6BOWWIZ8J3l0e4zyF+sfhjSCeMxm1xkNdjf71MVdqUh/QZLNy8ix2RxXstZq
sJLC1Y+rwll8mUQcQFpt29VzIwHN9gbT9bg3rFm3h0OuPG2vBE5nXorqEMw1fDAk
px1JvmCVlWDOIRNz1YREQ5ZxzEKZ8OHYhhL4ze99iPlJzCSOS6Shse+mDoVrCs7n
nDx/Y9kv7cIPAzR8Crhdh8WQq50LR9XuPaCGSZ5ydSaFhGdRcZgZITZtwb+vDxPD
mD4nsvs86oOzb61GCO4quzY/MzFTwMIVjoK6loRXkeQ0oFfScBduMjloETqkTb6O
/XJwPdofZDJNCA==
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:31:20 2026 by rpki-client