Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: nOh8ricz7cYv/h7ewbA4WgH0DcmEjaNFvj33ftdWp2A=
Subject key identifier: 20:67:52:6F:F1:02:F7:9F:0E:1F:CA:12:AA:FC:FE:C3:7C:71:0D:B1
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 019E91DD7843B59DE31D9D7D0FB4800085FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 0A69
Signing time: Thu 04 Jun 2026 09:01:10 +0000
Manifest this update: Thu 04 Jun 2026 09:01:10 +0000
Manifest next update: Fri 05 Jun 2026 09:01:10 +0000
Files and hashes: 1: JtRvpoQ6v5bFd3bqNHp70RkQlEw.roa (hash: /oF7VKyAqIh3Dj5gAD5HaY2Wmq8Ex+sQiaIQTG8GOuw=)
2: VBmr-5LpIjSQ6myjINReT6R1vMo.roa (hash: qg+Z2r3TWn/McCuaCe1xwiAMWjaHkNEjXrq2W1LrDUU=)
3: Y61lvfTY0IfOHOaNCazwXGsL2N8.roa (hash: 52xFh0jAqOfccjKrhy8KiqEx7vruviP8tzZ1IxwQ/As=)
4: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: tfBUu2IApWQJeywdqxK6bzlste56Ii37BzN1H8/HemM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:dd:78:43:b5:9d:e3:1d:9d:7d:0f:b4:80:00:85:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Jun 4 09:01:10 2026 GMT
Not After : Jun 5 09:01:10 2026 GMT
Subject: CN=2067526ff102f79f0e1fca12aafcfec37c710db1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7f:cf:57:26:8c:dc:b8:ef:2a:77:07:71:ac:
7a:fb:55:1e:b8:aa:93:58:9d:d0:f5:06:8f:26:e4:
ee:58:d0:cc:73:c1:dd:39:c6:76:e4:8b:d5:43:31:
93:af:a5:f3:22:6a:77:2d:69:a2:a7:8a:7b:13:31:
3f:6e:6e:2e:e7:f4:c0:14:fd:34:eb:35:6f:0c:87:
50:52:73:e3:2a:f5:56:8c:49:f0:37:cb:44:18:3d:
b5:0c:20:e9:87:da:0a:66:6e:89:f2:2a:3b:98:6e:
56:f6:25:55:76:15:f8:f0:7e:39:c0:55:2f:2e:38:
71:47:45:20:82:94:ed:8a:23:72:79:29:35:7a:40:
b0:e4:40:7a:f8:a6:42:27:69:e3:cd:7b:b5:fe:bf:
85:18:89:98:cb:7d:54:d4:06:09:49:03:c0:7e:bb:
dc:13:2e:7e:aa:9b:45:7b:48:e3:e7:aa:ce:4d:94:
c3:39:cd:07:25:17:c9:a9:5a:f7:a3:9f:76:e2:9e:
2f:96:00:f0:a5:9f:44:4d:68:fc:e1:e6:94:8e:6e:
79:22:09:65:52:4b:89:b4:e4:d5:7e:e3:3c:91:7f:
22:4e:8b:2e:8d:f3:a4:1d:89:ba:29:52:60:74:ca:
66:bf:57:da:ed:74:85:c7:cd:e2:14:d4:84:59:9e:
dd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:67:52:6F:F1:02:F7:9F:0E:1F:CA:12:AA:FC:FE:C3:7C:71:0D:B1
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cd:b6:30:4b:24:46:e5:bc:9c:16:d1:7a:d0:22:9e:01:41:
39:02:4a:ac:d7:74:e1:30:ff:90:00:8c:1c:32:02:68:24:19:
7c:d5:6a:f5:0e:0f:73:4f:9b:c9:6b:0c:1c:f1:5b:ff:66:8e:
cb:99:b3:5b:4e:48:50:cd:60:e9:ea:c6:12:43:31:e4:6b:ad:
94:f4:2d:b5:c0:09:e5:77:40:34:84:03:1f:2c:e1:8a:ca:51:
56:47:80:53:bf:9b:41:3e:fb:38:f5:85:26:1a:28:04:d6:f4:
d1:40:5a:f8:4a:97:20:b2:0c:38:85:cd:28:a1:14:ce:43:90:
51:33:3e:8b:4d:1d:79:b7:b0:81:6c:cf:02:8e:81:01:fb:e9:
bf:64:33:b6:2d:57:a1:b3:a7:0e:ab:c7:d9:e9:99:32:b0:02:
be:65:d2:47:ba:22:58:a4:97:55:6e:13:87:9e:f3:5b:d4:8c:
2a:1e:4d:ba:68:d9:24:8a:fb:10:55:78:d9:50:9b:20:74:74:
b7:b1:15:7a:71:3a:4e:47:3c:81:91:ec:a7:dd:fb:26:c5:08:
4e:9b:85:42:71:48:40:3a:a6:b4:20:25:27:e3:2a:9e:bf:03:
5d:b6:bf:59:3a:fc:27:1d:46:48:35:06:2a:fa:ea:e1:fa:fb:
fb:f3:42:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:24:50 2026 by rpki-client