Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
File: gLBji4dvOXjKe9KNfeNwmWs5aj8.mft (raw, json)
Hash identifier: Q7PB8p4zTv0VPpyplqa4ZM5DKqTsst21YCWNJ6SuwD4=
Subject key identifier: D7:D2:E7:7E:84:E1:6B:62:10:58:AC:4A:EA:FF:1A:E1:78:7D:54:F1
Authority key identifier: 80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
Certificate issuer: /CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Certificate serial: 019CEB93CB124F9F5D43DA7CD980130132BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
Manifest number: 098E
Signing time: Sat 14 Mar 2026 09:00:57 +0000
Manifest this update: Sat 14 Mar 2026 09:00:57 +0000
Manifest next update: Sun 15 Mar 2026 09:00:57 +0000
Files and hashes: 1: VBmr-5LpIjSQ6myjINReT6R1vMo.roa (hash: qg+Z2r3TWn/McCuaCe1xwiAMWjaHkNEjXrq2W1LrDUU=)
2: Y61lvfTY0IfOHOaNCazwXGsL2N8.roa (hash: 52xFh0jAqOfccjKrhy8KiqEx7vruviP8tzZ1IxwQ/As=)
3: gLBji4dvOXjKe9KNfeNwmWs5aj8.crl (hash: vw4/Usdcq52nCibcigfBvQ2d0VQHY9F+Erx8lw5b9Ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:eb:93:cb:12:4f:9f:5d:43:da:7c:d9:80:13:01:32:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80b0638b876f3978ca7bd28d7de370996b396a3f
Validity
Not Before: Mar 14 09:00:57 2026 GMT
Not After : Mar 15 09:00:57 2026 GMT
Subject: CN=d7d2e77e84e16b621058ac4aeaff1ae1787d54f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7d:a8:12:a8:d3:b4:5c:89:21:51:c9:23:fd:
eb:f7:15:18:db:cb:9a:a5:89:27:24:ba:e7:95:b6:
cc:5c:09:52:32:aa:98:87:35:7f:6e:64:9b:24:2e:
ca:52:20:31:6f:54:c0:31:e8:b6:3b:8d:8b:35:53:
c4:b4:b9:45:04:e8:ec:30:5f:b1:ca:6a:ee:37:da:
76:ab:53:bf:6c:70:b7:06:f3:58:8c:f3:f1:5a:36:
31:a5:a0:98:a6:a4:4d:40:84:69:fa:20:5e:bf:9e:
8b:a1:dd:cd:ed:37:e3:69:a1:29:c0:5f:3d:57:ab:
51:b0:3f:bc:47:9f:d0:43:d4:3e:7f:6c:70:0b:2b:
bf:7e:2f:3c:f7:fb:b3:8d:b2:14:88:c0:e6:38:a2:
5e:c0:87:a2:75:68:78:3f:27:6d:e4:48:a9:c8:ce:
13:8f:46:f8:c6:79:7e:1a:3a:1b:a9:e7:c7:26:f9:
d3:e4:02:34:67:9b:2e:bc:3e:de:19:7b:e5:f8:84:
33:4a:9e:43:ff:08:16:42:f9:6f:9a:9a:1a:80:3a:
ed:e9:ed:2b:5b:de:cf:6a:f9:50:55:6c:3c:b5:38:
90:f4:51:36:2d:9b:02:65:82:47:74:08:c4:99:29:
6b:b7:35:f3:14:3f:3e:76:d1:be:2c:2a:ac:a7:db:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D2:E7:7E:84:E1:6B:62:10:58:AC:4A:EA:FF:1A:E1:78:7D:54:F1
X509v3 Authority Key Identifier:
keyid:80:B0:63:8B:87:6F:39:78:CA:7B:D2:8D:7D:E3:70:99:6B:39:6A:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gLBji4dvOXjKe9KNfeNwmWs5aj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/f4663f-484e-42db-89a0-15b09f5f6ed7/1/gLBji4dvOXjKe9KNfeNwmWs5aj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:37:98:2e:e0:ad:e2:5c:da:56:ce:a6:5a:19:f5:fd:0f:6c:
a2:30:dd:06:a4:d6:68:36:f7:84:65:5f:8d:f0:f0:1a:18:24:
17:b1:88:e3:4a:0e:6f:f3:73:bf:d8:9b:b2:2a:e0:8d:9b:5e:
24:bb:6a:79:e6:e5:b4:c5:85:cb:60:d4:d9:cc:65:f4:2a:c9:
ff:27:e9:ec:06:7e:f5:da:d1:33:c8:9e:78:e0:6d:0b:1f:e7:
f2:90:4d:bf:b7:ad:03:9a:93:62:6f:85:86:75:6e:15:b7:8f:
74:c7:5a:01:ab:e1:cc:56:37:c0:19:d9:c3:f3:70:00:93:b5:
b3:a5:37:54:a9:02:91:f6:05:68:42:c5:69:75:85:c7:fc:c3:
5b:00:b7:0e:a7:fe:bc:b1:38:29:c4:68:04:20:a9:d1:03:5b:
02:a4:e9:85:42:e7:72:f3:99:57:11:6c:ed:52:31:72:8f:0c:
b3:a8:aa:fa:47:89:7c:74:85:a7:84:0f:13:65:98:a7:c2:0a:
4b:a6:1e:ab:ae:45:c8:89:17:87:a0:89:78:db:38:b3:0c:02:
58:97:3b:d7:6a:f9:ff:79:3e:99:ea:10:4f:49:d1:51:f4:22:
80:74:25:4a:20:64:8e:cc:fc:13:8a:85:d3:35:69:2d:b8:e2:
a2:f5:9e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 19:18:31 2026 by rpki-client