Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier: aP3y7CGPr2dh03BGcFyPniaqhOlzPkasYMdQ31+i4ZI=
Subject key identifier: 99:A6:2D:CA:6D:7D:57:0D:BC:1F:E5:91:97:12:CC:AE:EA:86:B8:75
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial: 019FA3A970E3B9FDD78827AD6CD9661D924E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number: 0896
Signing time: Mon 27 Jul 2026 13:00:18 +0000
Manifest this update: Mon 27 Jul 2026 13:00:18 +0000
Manifest next update: Tue 28 Jul 2026 13:00:18 +0000
Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: PV3SaojjQCsEWCUxflt3AJtqzS7gxRE6aoprh6+QRls=)
2: z8hJl8rGyd_56TuV5GLYx9xFhho.roa (hash: XAMtoMHmL3C5zB92ZcL52Exd5SlTcXF5KJm8ioosamE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:a9:70:e3:b9:fd:d7:88:27:ad:6c:d9:66:1d:92:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
Validity
Not Before: Jul 27 13:00:18 2026 GMT
Not After : Jul 28 13:00:18 2026 GMT
Subject: CN=99a62dca6d7d570dbc1fe5919712ccaeea86b875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:ff:1e:5a:c0:da:27:df:e7:50:e7:22:f6:
fb:55:05:4f:74:08:a1:1f:8a:f1:9d:61:9a:cf:04:
95:bd:f3:db:e3:67:cc:aa:0d:d8:64:ce:61:d1:16:
8d:dc:9e:85:00:e7:39:ec:cc:54:11:10:97:45:67:
a6:e1:98:99:5c:84:79:69:d6:65:6e:86:7c:d8:fd:
2d:97:8c:71:c0:43:57:84:55:fa:8c:ad:2a:af:c8:
c2:f1:3c:0e:1e:5b:c1:1e:bc:cd:53:70:b4:c1:de:
84:ed:84:48:ab:68:83:05:7c:e3:78:10:5b:f4:49:
7b:ca:8d:fb:ec:2b:2c:6d:18:e1:e9:54:cb:dc:49:
0e:d0:03:07:97:11:1c:f1:ec:6d:8c:38:8a:09:63:
9d:bb:78:29:61:c1:1e:1a:58:3a:c2:8b:3d:c5:19:
53:3d:dc:3d:52:86:11:9d:6d:1e:b0:01:96:81:47:
b7:c3:c5:f0:e3:19:09:aa:e4:b9:67:e1:be:4d:b7:
b9:8e:b9:f8:61:3d:48:7a:d3:6e:68:1a:79:35:71:
eb:e8:9c:16:b2:c3:fe:ee:e3:63:84:a0:c4:b3:c2:
b4:bd:2f:0e:53:52:e5:7c:aa:6f:59:46:2f:b2:32:
72:46:4d:b6:14:6c:d6:6c:0c:1b:34:6d:69:52:1d:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A6:2D:CA:6D:7D:57:0D:BC:1F:E5:91:97:12:CC:AE:EA:86:B8:75
X509v3 Authority Key Identifier:
keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:61:f6:d1:ef:0f:35:23:2d:b1:8e:54:19:c0:9d:df:14:aa:
c7:44:8f:ce:4e:46:3f:62:7c:22:74:be:dc:74:ca:0e:2f:be:
53:00:65:26:69:83:62:7e:33:d6:10:82:24:16:02:ea:6a:f9:
d4:7f:0d:e3:29:21:bc:e6:77:1c:23:21:2a:43:94:6b:cf:de:
39:ad:aa:16:bb:ea:b3:0c:7b:33:10:ca:db:86:49:4e:ee:20:
a1:60:df:35:83:d7:09:cb:b0:4b:6c:1d:88:a7:0d:07:f6:de:
18:0e:72:eb:e9:74:f8:2a:a7:a2:88:7d:fa:6d:62:0a:94:bb:
34:95:33:18:98:6c:bd:b3:4e:29:a8:81:1b:93:81:7f:27:a4:
4a:4c:59:96:38:af:c9:ad:6a:bc:83:4a:3c:e9:09:38:1b:e3:
e6:bd:08:94:78:9f:7b:ae:58:ed:48:23:1a:a1:02:13:eb:c8:
45:21:ad:c4:12:5d:95:1d:ee:d4:f2:fc:2f:47:45:31:fb:52:
9e:2a:6b:2f:9b:d3:17:86:5b:6f:c7:90:b0:d1:cd:aa:da:56:
10:dd:21:fc:ea:cc:89:b5:14:fa:3c:82:78:7d:7b:00:48:7d:
90:08:8a:6b:ef:09:0e:67:b0:fb:08:bd:31:f7:5b:24:a6:31:
d0:d1:fa:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:50:50 2026 by rpki-client