Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
File: GlN6DAozEJGzByU8bwfo-ChU5rA.mft (raw, json)
Hash identifier: EBvwFbjev34Pf6LTLgz2W7dfo+mw63hfjaUmZGhVjkk=
Subject key identifier: 74:DC:9C:C4:AA:38:83:23:30:58:FD:23:F8:2B:22:2B:53:6F:26:4F
Authority key identifier: 1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
Certificate issuer: /CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Certificate serial: 019D39AF705E4D296BAAEF62AAB6EFCE4788
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 13:01:31 +0000
Manifest this update: Sun 29 Mar 2026 13:01:31 +0000
Manifest next update: Mon 30 Mar 2026 13:01:31 +0000
Files and hashes: 1: 3o9USRveK81MSe2kQ4zc3sxEt9w.roa (hash: IFKuL1PDKwNZHcGFxJk8ylaICmG+MyPGR58awe6xsGU=)
2: GlN6DAozEJGzByU8bwfo-ChU5rA.crl (hash: 7ki5VOhPgUyGs9hBPCu6qXb4v4wcpjmuuHMb7K2uD8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:70:5e:4d:29:6b:aa:ef:62:aa:b6:ef:ce:47:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Validity
Not Before: Mar 29 13:01:31 2026 GMT
Not After : Mar 30 13:01:31 2026 GMT
Subject: CN=74dc9cc4aa3883233058fd23f82b222b536f264f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7e:69:9f:a2:9b:2b:0b:57:f6:0d:ff:08:21:
fb:dd:3b:a5:24:6d:ec:c8:e9:83:58:fa:ba:a5:c0:
c7:73:07:dc:42:78:d5:4f:a7:c9:e7:e7:9b:40:89:
ef:54:dc:5b:e3:5a:fa:03:68:a5:29:d0:79:0b:97:
29:b4:b5:ac:6c:66:8d:46:b4:0f:83:e1:e0:04:42:
8a:3c:0e:c2:22:1f:92:f2:eb:c5:d3:47:ff:65:e7:
62:63:20:54:64:35:76:19:17:a4:fc:12:24:e1:db:
eb:cf:7c:d3:b7:17:c2:a6:57:0e:eb:eb:3b:6d:d6:
89:f5:54:9e:b7:64:76:4c:54:14:dd:14:71:0d:f5:
c5:c5:53:9a:54:dd:6b:8a:74:79:df:84:90:7e:25:
bd:29:06:b6:bc:75:05:78:c9:e1:7c:cb:6b:64:c7:
46:7c:8a:b0:80:47:65:29:dd:14:76:8e:e3:cd:5f:
28:cd:e4:3e:a9:a8:72:65:dc:31:31:43:85:5c:b7:
84:fe:e0:33:c1:91:86:94:e9:02:ec:7f:44:19:72:
d4:58:7b:b2:d4:cf:9c:ea:0f:be:d6:50:62:3c:00:
95:c8:95:dd:3d:63:b8:c2:0c:fa:21:46:c5:5a:ca:
45:17:d5:7b:cc:a3:75:74:31:07:ec:b9:83:4c:ef:
e8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DC:9C:C4:AA:38:83:23:30:58:FD:23:F8:2B:22:2B:53:6F:26:4F
X509v3 Authority Key Identifier:
keyid:1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:20:d7:b4:89:f1:f3:e3:44:32:1d:82:7f:d2:b8:5e:e9:d6:
06:f1:22:b4:cd:6f:9b:5d:81:69:5c:5d:44:45:5a:ca:63:0f:
f2:de:d0:d6:ff:66:e5:d8:d7:56:3f:b1:1d:db:d9:5d:62:88:
2c:f5:e9:5f:ff:41:17:3d:32:2f:d7:03:29:5b:0c:35:a5:ce:
33:f5:d1:4d:df:41:53:9f:f9:42:fa:9f:ab:0e:ff:a8:dd:91:
43:84:00:a0:cd:6e:33:5d:9e:65:6a:4a:a6:3f:cb:fe:b8:a4:
58:ae:2b:84:d7:3d:f1:eb:d4:94:06:57:03:0b:2a:68:19:e7:
63:64:24:d8:c1:fe:c1:d6:e2:e9:fd:2e:09:94:a5:43:86:12:
fe:67:d5:0c:89:18:f3:3d:67:6d:8f:bc:1f:ca:6e:59:c8:53:
8b:6b:d9:24:97:17:b0:0d:2d:3d:3b:47:c2:0f:63:6c:61:a6:
8f:d0:b7:a2:d0:da:82:c8:fe:de:1e:fa:6a:42:d9:6b:b7:a0:
65:8e:21:0f:13:32:60:0c:39:19:cf:dc:02:d9:b2:f6:29:c0:
c8:ba:e7:ac:cb:79:99:02:a5:46:c8:a0:58:77:f9:e4:ff:50:
cb:5e:05:53:21:4f:38:b0:5c:c3:f4:2b:27:73:64:5a:14:83:
8b:77:79:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:19 2026 by rpki-client