Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
File: glNFBYRfoKk_goWm2ovObR1yAN0.mft (raw, json)
Hash identifier: U+zKtgE+vxe97CHqYtRCP3TTuxODP3i+/gJf9+6K8LI=
Subject key identifier: 61:03:60:7A:58:45:A7:3B:0F:1B:33:EE:B5:29:C1:64:A3:F2:82:8D
Authority key identifier: 82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
Certificate issuer: /CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Certificate serial: 019CC93EE6D2B8940A61E5883F56CAC88587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
Manifest number: 0F37
Signing time: Sat 07 Mar 2026 17:01:08 +0000
Manifest this update: Sat 07 Mar 2026 17:01:08 +0000
Manifest next update: Sun 08 Mar 2026 17:01:08 +0000
Files and hashes: 1: glNFBYRfoKk_goWm2ovObR1yAN0.crl (hash: EDw7Ie+Nu5Vp5j0O+bb11E2g89H7ypeVgdDPJbolYDE=)
2: t6uJnjT04JxAMbhWunFCrGch9dE.roa (hash: ipX6tbTTZfYSopPgMvzN1VwXoXH9Z4uS/A5CMI0tQEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c9:3e:e6:d2:b8:94:0a:61:e5:88:3f:56:ca:c8:85:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82534505845fa0a93f8285a6da8bce6d1d7200dd
Validity
Not Before: Mar 7 17:01:08 2026 GMT
Not After : Mar 8 17:01:08 2026 GMT
Subject: CN=6103607a5845a73b0f1b33eeb529c164a3f2828d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c2:be:83:ff:33:8b:99:49:88:4c:61:ea:ad:
99:14:2d:20:cd:f9:ae:01:74:73:60:a5:d1:0e:bc:
04:af:62:bd:9d:50:09:a8:ab:39:76:bf:f9:7e:30:
32:a5:8d:ac:3f:77:57:ba:3c:df:ef:2e:1c:84:41:
f3:8b:44:89:83:9d:6e:58:e5:a2:ec:84:97:e9:54:
fa:87:53:49:6c:e9:62:66:bd:c2:10:6f:be:55:11:
74:20:cf:3d:aa:84:d0:72:5e:ed:f4:d9:12:ff:96:
35:41:2b:e8:68:e8:46:c5:b1:3a:3d:d6:a3:74:b2:
cd:1e:2c:8f:4e:95:67:f1:b9:41:50:73:2b:1f:cf:
b5:3b:f7:e2:3b:03:fa:aa:4d:57:f2:f5:4b:5f:9d:
5c:ac:9a:f4:a7:22:9c:f1:f7:31:e3:58:66:33:c3:
2d:79:d2:25:83:8c:4c:04:c3:a9:05:e6:01:71:ea:
e6:b5:c4:9d:7a:79:6d:25:d6:0c:21:b9:44:b9:c8:
68:6c:d2:39:9e:71:61:72:c5:4b:b5:75:df:0a:73:
79:6f:17:b3:fb:b0:99:09:82:3c:a2:95:e2:03:de:
2f:cc:ff:c8:19:23:ca:9a:bb:71:d6:de:b0:91:b9:
e4:f3:0f:43:bf:eb:47:c9:cf:73:ef:f6:da:ec:85:
b4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:03:60:7A:58:45:A7:3B:0F:1B:33:EE:B5:29:C1:64:A3:F2:82:8D
X509v3 Authority Key Identifier:
keyid:82:53:45:05:84:5F:A0:A9:3F:82:85:A6:DA:8B:CE:6D:1D:72:00:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glNFBYRfoKk_goWm2ovObR1yAN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6df248-ec5b-47d7-bdd0-47cc7d1abc6b/1/glNFBYRfoKk_goWm2ovObR1yAN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:eb:91:5f:aa:45:7c:38:fd:7d:69:14:87:ef:81:ef:59:bb:
41:20:46:d6:56:80:0b:a6:f7:53:93:21:f0:c5:f4:88:29:76:
a8:56:af:aa:15:be:39:b7:f8:1f:0b:bb:bb:c5:e9:61:4b:7a:
e2:e4:54:e0:c4:c0:e3:06:7e:ab:4a:8b:93:09:95:87:30:a1:
b1:ab:a2:98:e1:ec:e9:55:9d:fd:32:e9:1d:11:d3:47:1c:d9:
ae:e3:75:28:58:20:e2:88:dc:00:8d:e5:7b:4d:dd:41:32:79:
b5:11:95:75:5b:ad:9f:66:99:49:3c:77:fb:52:a3:4d:a3:ec:
69:02:37:9d:df:0b:83:22:fa:ab:b0:4d:ae:03:d8:a1:0e:47:
34:03:0c:9b:5f:6b:45:ae:4c:6b:da:92:88:2d:43:d9:82:d2:
a2:cd:a9:a8:b1:19:4e:f2:17:a8:5b:e5:43:c4:78:cf:16:52:
bc:80:a5:d1:2a:76:12:f0:05:8b:ba:3f:39:06:d7:71:9d:56:
50:4d:70:d8:1f:b5:b1:c4:77:c0:16:d9:45:2d:70:c8:0a:c2:
83:a2:1b:e1:f2:ac:5c:f0:6d:64:7d:1b:74:72:e5:d8:30:3f:
52:29:0f:ec:d5:26:d2:40:67:b7:96:88:db:db:39:e8:0e:c7:
d0:9c:38:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:35:34 2026 by rpki-client