Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: 6kzCK0zKtKnRQAFBf0yHmfV6frr9KXlvpx8qnki2s1w=
Subject key identifier: 0A:CA:9F:8F:12:23:FD:F5:46:6E:31:30:6C:1A:FE:74:DB:C9:03:41
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 01A169EC0DC2C045EC6A3F94315C4DE2E5AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 0BE2
Signing time: Fri 23 Oct 2026 18:00:40 +0000
Manifest this update: Fri 23 Oct 2026 18:00:40 +0000
Manifest next update: Sat 24 Oct 2026 18:00:40 +0000
Files and hashes: 1: JtRvpoQ6v5bFd3bqNHp70RkQlEw.roa (hash: /oF7VKyAqIh3Dj5gAD5HaY2Wmq8Ex+sQiaIQTG8GOuw=)
2: VBmr-5LpIjSQ6myjINReT6R1vMo.roa (hash: qg+Z2r3TWn/McCuaCe1xwiAMWjaHkNEjXrq2W1LrDUU=)
3: Y61lvfTY0IfOHOaNCazwXGsL2N8.roa (hash: 52xFh0jAqOfccjKrhy8KiqEx7vruviP8tzZ1IxwQ/As=)
4: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: QrurkHl+JivUEIX6uVFf49XrI54NAfV5RxVRyHp0RvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:69:ec:0d:c2:c0:45:ec:6a:3f:94:31:5c:4d:e2:e5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Oct 23 18:00:40 2026 GMT
Not After : Oct 24 18:00:40 2026 GMT
Subject: CN=0aca9f8f1223fdf5466e31306c1afe74dbc90341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:24:0f:c6:59:13:a4:79:81:05:7a:75:ae:32:
6a:67:4d:91:8e:d8:da:96:89:d8:8b:54:fa:71:5f:
8b:1e:de:f6:fd:1d:0f:5c:de:49:0c:05:66:ca:b1:
3c:0d:6a:de:0b:8a:6e:f5:3f:63:55:09:5e:59:fe:
71:2b:a7:69:83:b4:19:e4:b7:72:55:ec:af:ea:b9:
80:09:b5:90:06:74:da:83:7b:ed:35:2f:87:0f:36:
2a:14:30:a3:5a:c9:4e:5d:fc:1f:6c:53:af:91:50:
c9:88:ec:a9:76:a5:f0:ad:7a:6d:b2:57:d3:e8:b2:
0b:ca:16:ca:ac:2d:b5:7a:66:59:bf:a9:52:c8:6d:
b5:18:97:a6:51:8e:e7:fb:9b:fe:39:0a:fa:12:d2:
09:da:a1:62:ed:6a:7e:4e:99:0b:7e:4b:c8:4b:ae:
6b:e3:6a:e5:0b:7e:1f:70:3b:04:9c:f1:fc:fa:98:
46:77:3e:50:79:cc:e1:bc:23:05:23:31:b4:9f:35:
88:9c:d5:46:a5:ae:00:ab:9a:68:d8:40:c0:7c:9d:
86:f8:cf:b9:25:7f:d3:19:82:b6:4e:06:4e:9d:a9:
3e:89:66:93:9c:22:83:ec:53:00:5d:b7:75:77:c9:
08:c5:90:31:c3:41:9d:5e:61:f4:8c:94:71:d6:59:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:CA:9F:8F:12:23:FD:F5:46:6E:31:30:6C:1A:FE:74:DB:C9:03:41
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:bd:42:17:d8:6f:e2:8a:65:44:9e:bb:a7:42:a6:61:09:79:
f7:d3:3b:95:7c:5f:2f:bc:88:b7:f2:5e:d8:a4:88:dd:d3:18:
3e:a0:18:a6:1b:3a:a6:83:9c:41:9d:01:cd:fb:a3:6d:80:8a:
32:8c:0d:06:da:45:a2:e3:93:1b:ca:fe:d5:c1:3c:14:08:b9:
a0:76:5d:4b:14:a6:76:51:c9:b2:16:11:ed:cf:93:3d:e1:42:
95:28:ce:a9:c5:65:cb:4e:68:46:3a:c6:12:86:44:30:65:88:
08:eb:df:ba:bd:dc:6a:ec:8f:71:c8:45:0d:ac:e3:9b:93:5b:
77:94:12:54:b9:21:ce:eb:77:29:5a:31:fc:90:0b:14:c7:00:
99:42:6c:1b:9e:26:8c:99:f3:ce:eb:e5:3c:3e:07:cb:51:73:
c8:15:20:71:d1:64:18:ee:e8:d6:4b:0a:02:17:92:2b:ea:6d:
ec:56:3a:05:54:37:a6:56:e7:12:6f:b3:08:81:34:89:54:ef:
37:d2:f9:b3:3b:4d:4b:e7:87:a2:b6:3f:2c:f5:d3:36:a4:96:
e2:da:c8:53:b5:c9:51:6b:1b:63:73:86:35:e8:fa:91:5b:d4:
2f:87:06:9b:a8:19:d4:e4:a3:6f:7d:76:84:33:40:55:a9:b1:
1a:8d:71:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:47:30 2026 by rpki-client