Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
File: glHn-2uWDUBrIjbSXk4g4kU1nbI.mft (raw, json)
Hash identifier: uYN02zgK9ObFT4qCeFU+984MM68g9+IUDUIFiyr8v9k=
Subject key identifier: D3:65:32:65:3E:E5:55:55:8B:CD:2D:D8:37:02:CD:31:BC:C8:6B:11
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Certificate issuer: /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial: 019D37F738A07043AD6E7705B057A02C8BB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:41 +0000
Manifest this update: Sun 29 Mar 2026 05:00:41 +0000
Manifest next update: Mon 30 Mar 2026 05:00:41 +0000
Files and hashes: 1: 4FDNWntT8HGm47C46owaTOgYZFY.roa (hash: MNnKoAQqNIz7h2yGseXPJCLeJOP5/UFE0Y/s3x5Ddio=)
2: INjnRxc1KDjJdK0P3v0NKp9zXSA.roa (hash: U1Y8u0AecjgXDJowXa0cOGElTwu53RvRkwL+O2WLn8c=)
3: LfgI9rpN293BrrnzaHSQkYw-4Vo.roa (hash: 17vv8CHDmx8Pt5VIpPIqTVbzDuzHnEYkz/7k/nREMI0=)
4: MxTmbVkJmB_lTh2o1kTnP_BFeDY.roa (hash: ttGF8f4pFYCjKqu0HAUvABDoHst3U1ecGF8sI6MFc/8=)
5: SSZXBlYC8HRLyEBgcVeFIXi-Zbg.roa (hash: 7JMK2h+HH0ge6JJyog9isIH7U/WCw5GQsuyNPYb8o94=)
6: glHn-2uWDUBrIjbSXk4g4kU1nbI.crl (hash: KyHSCvDju8bLo6FCYn56vth8xY/n0tZ48YfvuQG3+Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:38:a0:70:43:ad:6e:77:05:b0:57:a0:2c:8b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Validity
Not Before: Mar 29 05:00:41 2026 GMT
Not After : Mar 30 05:00:41 2026 GMT
Subject: CN=d36532653ee555558bcd2dd83702cd31bcc86b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b1:32:7e:3c:a4:95:3a:ee:2c:c8:98:09:1c:
0e:97:72:d4:91:12:ba:74:51:72:4e:9f:b9:6b:aa:
a8:f9:c9:17:25:64:c0:8e:95:55:84:72:ca:3e:1f:
93:d4:21:b0:a6:f0:33:dd:a0:6b:08:35:db:ab:3b:
4a:83:e7:dd:8b:3f:d5:00:27:ca:86:91:18:ba:6f:
3b:82:d1:a9:e1:19:f7:2b:4e:6e:63:42:90:67:86:
94:8f:e9:fd:fd:c1:15:6a:bc:2d:d2:05:f8:4e:84:
b7:c0:88:31:22:36:2c:6e:30:b9:bc:fa:c2:a8:27:
17:f7:d0:20:ab:95:6f:5d:07:17:f2:d2:08:44:e7:
6e:70:8a:50:c4:cc:a7:82:05:c1:f2:e0:ea:cf:e8:
e0:1e:5d:ca:f1:c1:b7:00:3c:0c:6f:5c:a4:36:02:
11:18:22:e1:27:80:5f:ed:c6:1f:e7:89:e7:1a:88:
89:95:37:82:3e:08:74:2f:1f:34:0d:ba:d5:02:17:
a9:64:56:84:1d:8f:76:48:14:b4:b3:35:c9:5e:5f:
a9:f1:d3:78:cf:d7:05:ca:fd:80:9b:4b:fe:79:01:
d1:40:c9:19:37:6d:d0:18:6d:d2:94:1d:6f:af:b4:
ac:0c:bd:16:f5:02:51:54:e3:09:9b:5d:65:d6:db:
ab:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:65:32:65:3E:E5:55:55:8B:CD:2D:D8:37:02:CD:31:BC:C8:6B:11
X509v3 Authority Key Identifier:
keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5c:28:17:ad:1f:8b:33:87:ff:f4:9c:10:bc:58:b0:a5:13:
69:9c:36:29:5f:d9:84:ab:b1:32:ab:97:0c:51:ac:cd:9b:b9:
e4:be:27:86:bd:87:7e:ca:e5:e5:be:41:8f:e1:3b:78:2d:58:
e4:e1:5b:a2:c0:36:00:b3:de:13:ab:fc:06:d3:86:49:8b:85:
0e:da:3d:d8:40:c0:62:c3:5f:32:37:29:cc:65:b1:d8:2f:83:
d5:c0:05:bf:d3:b5:ee:79:77:54:4e:4b:ab:0c:de:a1:21:e7:
0b:3e:18:f2:b5:c4:b8:0f:fc:53:70:6a:9b:91:c6:9b:20:a1:
f5:58:d9:5b:21:90:a8:de:80:39:71:b3:41:25:d7:4f:fd:2c:
de:c0:30:dc:78:7a:5e:cd:4e:db:30:01:d9:46:0d:d5:30:34:
9f:f0:29:2a:e6:02:58:6d:77:3c:13:ec:81:e6:a7:af:d8:de:
aa:9e:1a:c8:c3:8c:0e:09:80:5c:aa:55:26:25:a7:04:89:eb:
db:4f:56:98:05:83:73:6d:09:7c:1a:37:aa:8f:99:f4:80:df:
cb:07:ac:e4:4a:f7:43:2f:ee:28:e1:c9:b8:33:4c:56:48:5b:
27:61:52:83:a6:b3:bb:02:1e:9e:85:de:31:e5:25:58:e9:f7:
d6:bd:64:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:15 2026 by rpki-client