Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
File: glLEw3Iyf9wsF7SVuFiRp23kJRA.mft (raw, json)
Hash identifier: JbPtp7YkZ8yOf0aruG7fc0mFiClzEG360B9k0tyq/OY=
Subject key identifier: 05:B7:77:38:0A:F3:17:02:A6:C5:BB:2D:AC:C1:7B:B6:D1:BC:B8:DF
Authority key identifier: 82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
Certificate issuer: /CN=8252c4c372327fdc2c17b495b85891a76de42510
Certificate serial: 01A1A74B2B7D34BB815D50415A2AD58CAD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
Manifest number: 09A1
Signing time: Wed 04 Nov 2026 16:01:23 +0000
Manifest this update: Wed 04 Nov 2026 16:01:23 +0000
Manifest next update: Thu 05 Nov 2026 16:01:23 +0000
Files and hashes: 1: glLEw3Iyf9wsF7SVuFiRp23kJRA.crl (hash: Zc559wByNfJoglnwo+oM/wd4PFK626pyUC0tPLpyKG8=)
2: z8hJl8rGyd_56TuV5GLYx9xFhho.roa (hash: XAMtoMHmL3C5zB92ZcL52Exd5SlTcXF5KJm8ioosamE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:4b:2b:7d:34:bb:81:5d:50:41:5a:2a:d5:8c:ad:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8252c4c372327fdc2c17b495b85891a76de42510
Validity
Not Before: Nov 4 16:01:23 2026 GMT
Not After : Nov 5 16:01:23 2026 GMT
Subject: CN=05b777380af31702a6c5bb2dacc17bb6d1bcb8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d6:d6:74:9c:e2:07:68:bc:2f:cb:52:ac:83:
94:fa:41:10:72:90:91:0f:60:a0:50:60:46:25:84:
d9:ac:16:29:96:59:de:91:8c:e5:34:8c:99:9a:9e:
a6:df:52:4c:f8:09:1d:25:df:8d:d4:e8:d0:ec:d0:
7b:74:2a:10:f3:20:88:ab:00:fa:51:53:89:00:2c:
86:a3:12:ed:64:ea:01:95:5c:0b:f9:77:33:ab:4c:
e8:cf:e0:f2:5b:ea:36:d3:07:ed:48:5d:ac:0e:b0:
df:37:e0:d4:90:f5:5c:03:d2:c8:d5:18:ed:2e:c2:
d3:8f:38:b3:d6:41:9e:2d:6a:15:bd:0a:74:2d:86:
f2:43:e0:a5:05:1a:5b:89:4d:1d:3c:b6:7f:31:ef:
de:5d:b4:d4:49:bb:ba:6f:e9:8d:06:d6:d5:ee:e4:
07:c5:29:b5:d2:71:ac:80:5a:ca:05:3c:fa:7c:98:
f2:74:17:4a:8e:3e:93:ef:cf:13:32:66:95:f3:fe:
d6:1d:0f:4d:33:6b:c5:b8:ba:ad:0f:06:56:34:ca:
21:46:ca:32:7b:12:8a:cd:aa:a9:54:42:b9:4a:f4:
c5:f4:03:ba:f8:34:bd:f1:de:4f:62:ec:65:6f:4a:
67:45:6d:36:ec:7e:9b:2f:9a:6b:24:d6:b5:be:4d:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B7:77:38:0A:F3:17:02:A6:C5:BB:2D:AC:C1:7B:B6:D1:BC:B8:DF
X509v3 Authority Key Identifier:
keyid:82:52:C4:C3:72:32:7F:DC:2C:17:B4:95:B8:58:91:A7:6D:E4:25:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glLEw3Iyf9wsF7SVuFiRp23kJRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/6c4532-07d8-4db3-9b55-fee1d02f1303/1/glLEw3Iyf9wsF7SVuFiRp23kJRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ec:5f:d2:e4:f5:c3:a6:76:80:45:b5:a7:6d:02:09:f9:c3:
ed:08:88:40:d5:a5:92:f9:8a:7d:80:ac:b7:10:b1:91:b9:c0:
d0:61:87:00:7e:82:31:b0:06:a7:bb:6f:2d:45:ac:e3:d4:26:
82:b6:7a:4f:eb:62:da:0c:6e:e6:83:68:9d:ae:f6:14:75:62:
0f:fa:b1:7a:43:0b:56:f4:3e:e8:63:77:64:b0:69:fb:89:ac:
e5:0c:a2:0f:1d:a1:be:b1:13:29:c3:80:02:04:91:2a:43:ad:
c3:d5:ae:19:b0:3d:6e:ab:cd:fe:99:c8:cc:1b:9e:2c:39:0b:
29:ca:03:bc:36:c0:b0:ae:e7:ad:2a:c5:9b:a6:7e:d9:6a:47:
fd:68:7c:b7:a4:95:22:ce:12:80:3c:35:f1:5c:5d:0d:08:58:
8d:fd:92:1e:a9:78:7e:ec:b5:aa:03:5d:d3:dc:53:ea:87:5a:
79:f3:91:4f:ee:17:70:87:ac:98:d8:9a:f5:aa:5c:78:3b:3e:
26:f9:de:e8:53:1a:b5:66:7b:bc:43:27:dd:60:f7:05:fa:81:
6d:39:cf:f4:28:38:06:9e:ff:45:ef:f5:19:ef:86:fb:78:15:
e4:5a:c5:72:bb:06:2d:51:6b:06:80:10:9b:ab:88:cd:93:74:
ef:bf:31:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:11:37 2026 by rpki-client