Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
File: GlN6DAozEJGzByU8bwfo-ChU5rA.mft (raw, json)
Hash identifier: AGJtyj2liSqSpAVtpVO2RQsKysT6VSViQgVmPTq+woQ=
Subject key identifier: EB:31:55:21:DD:E4:18:12:40:D1:FD:30:D5:CB:02:BA:A2:19:6D:26
Authority key identifier: 1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
Certificate issuer: /CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Certificate serial: 019FA1BBB60D2262DFCE6DB0BAC3F58D3149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 04:01:01 +0000
Manifest this update: Mon 27 Jul 2026 04:01:01 +0000
Manifest next update: Tue 28 Jul 2026 04:01:01 +0000
Files and hashes: 1: 3o9USRveK81MSe2kQ4zc3sxEt9w.roa (hash: IFKuL1PDKwNZHcGFxJk8ylaICmG+MyPGR58awe6xsGU=)
2: GlN6DAozEJGzByU8bwfo-ChU5rA.crl (hash: m7+aU+hKTr3jl7ffwdR2yqCPCQs6n4LG+/MC9TNbWY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:b6:0d:22:62:df:ce:6d:b0:ba:c3:f5:8d:31:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a537a0c0a331091b307253c6f07e8f82854e6b0
Validity
Not Before: Jul 27 04:01:01 2026 GMT
Not After : Jul 28 04:01:01 2026 GMT
Subject: CN=eb315521dde4181240d1fd30d5cb02baa2196d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:fa:34:f9:5b:e0:f3:00:07:70:1f:3e:25:
98:a9:07:9d:d7:d3:9c:e4:6d:ec:df:09:92:03:04:
ca:f6:01:62:69:38:dc:77:c4:ec:a1:d0:f3:f1:7f:
02:94:6d:fa:1c:05:e7:19:68:a3:27:0d:99:c0:ad:
8d:e5:72:27:d4:5e:22:97:16:a5:12:19:81:6c:2a:
0a:a4:0f:1f:96:27:6d:eb:a0:d1:c4:db:67:cc:67:
2b:ef:28:75:af:82:9d:f4:bb:10:cd:84:ec:83:92:
38:fa:2f:0f:d3:2e:b0:52:b5:8c:93:cc:58:6d:76:
8c:b1:44:a4:5c:d3:ef:0c:f1:7e:4b:ff:b9:4b:9a:
35:81:39:7b:3d:9d:cf:62:c6:06:a2:4d:ef:f0:19:
83:25:46:11:34:d3:be:59:e9:9e:89:d9:c8:95:aa:
44:95:27:dc:01:50:3e:90:dc:88:cb:0c:a5:89:2f:
2a:4d:f3:c0:6a:21:a8:f5:33:ac:c3:72:89:8d:94:
37:96:c5:1b:f7:ab:1c:62:e3:13:c3:4d:fd:4f:ad:
d6:a4:49:6b:19:ae:0d:03:86:8d:73:d9:f8:84:d8:
bf:93:9e:23:71:3e:59:73:4f:e4:7c:89:40:6d:29:
be:69:3a:d3:17:5e:4f:e3:b0:17:4d:61:e8:7a:49:
76:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:31:55:21:DD:E4:18:12:40:D1:FD:30:D5:CB:02:BA:A2:19:6D:26
X509v3 Authority Key Identifier:
keyid:1A:53:7A:0C:0A:33:10:91:B3:07:25:3C:6F:07:E8:F8:28:54:E6:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GlN6DAozEJGzByU8bwfo-ChU5rA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/46169f-cf94-4d1b-b2d7-72125297af28/1/GlN6DAozEJGzByU8bwfo-ChU5rA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:3d:28:d9:c8:9a:b4:85:ed:79:bb:d8:7e:ce:8d:30:96:d8:
85:01:91:34:39:7f:1e:9e:2e:fb:d6:60:3e:8e:68:27:06:c4:
e6:e8:fa:a6:ee:46:a9:74:52:35:8e:c6:55:da:72:ec:68:be:
fc:a8:d6:a6:ba:9d:db:ba:28:43:35:a4:81:d7:e0:92:84:71:
13:43:35:31:e4:69:44:b1:5f:29:66:9e:34:48:ea:8f:10:1a:
83:d8:f7:f9:c0:4c:e2:71:02:41:0e:15:dc:9e:0c:94:f2:c1:
b8:55:b8:84:b5:c0:18:56:fb:10:7d:41:e0:9d:51:da:6d:08:
fa:91:b0:b0:e3:79:19:b1:7b:3b:eb:50:82:ab:8f:42:cf:df:
dc:4a:e1:56:c7:4e:e0:c0:90:fe:3c:ed:52:11:69:7e:e0:ae:
ac:19:af:94:e6:96:ad:1c:55:28:f6:d6:eb:ac:7f:d0:ed:1a:
a4:3c:3e:a8:55:54:ab:40:85:3a:e7:50:8b:90:8c:56:07:82:
a7:5d:f4:87:0c:c6:99:81:9a:4f:6f:8b:62:07:a6:e0:27:d1:
5e:79:bf:e0:b7:58:b7:2d:7b:26:7b:38:13:0e:96:47:5a:e3:
b5:bc:7e:2b:9c:fd:64:98:b2:db:fa:88:9c:35:3c:5a:64:ce:
ef:74:00:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:27 2026 by rpki-client