Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: xiud14FP1fMforkZSizjnvogNjCij0v355A3jvs9tBQ=
Subject key identifier: 76:48:FD:04:4E:F7:58:FA:DD:84:BA:FC:62:BE:65:02:7F:71:20:EB
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 019D2929379D0988AF763D0942C0AC60C471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 142E
Signing time: Thu 26 Mar 2026 08:01:00 +0000
Manifest this update: Thu 26 Mar 2026 08:01:00 +0000
Manifest next update: Fri 27 Mar 2026 08:01:00 +0000
Files and hashes: 1: RpMIwwKNDJ2StC4zRLgKJPlvR8w.roa (hash: cXPNnS64bUQTjJNvAeCad/jzk4TlUd0umXx2TLacFB0=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: FchW87s2NA1qye5z7KFv8V7JT7M9HMTJNohNLWdXmsI=)
3: kp-VMkih7qc6B23hHp-3gThKHNw.roa (hash: bxojK3FurSVV0NeQ9kkDlIbku+sPTPShkBdp5lGAEYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:37:9d:09:88:af:76:3d:09:42:c0:ac:60:c4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Mar 26 08:01:00 2026 GMT
Not After : Mar 27 08:01:00 2026 GMT
Subject: CN=7648fd044ef758fadd84bafc62be65027f7120eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f6:8c:fc:2c:1e:68:4c:7f:d2:df:fc:0b:0f:
28:80:07:6b:11:08:97:b2:80:b5:7f:0a:79:7c:d2:
fe:14:8c:50:35:89:2d:ee:1e:1e:28:ab:9f:d0:e2:
c5:13:85:6f:bb:4c:6e:83:02:e8:c0:cb:29:0f:85:
08:2d:78:8b:76:72:2c:c3:31:c9:6b:e0:23:b0:3d:
7b:ea:45:8f:82:6f:10:a3:7c:78:91:fe:b3:11:f3:
cd:8e:2d:3c:c3:22:ec:73:d9:e6:f8:01:fe:25:e2:
15:0f:22:97:7d:40:29:8a:0d:d1:28:d9:94:1e:2b:
6c:6f:ec:2c:b4:d8:9f:ed:a2:a4:74:b2:67:ca:c1:
93:ee:5d:ec:16:24:d7:20:da:41:dd:1c:cb:7f:86:
85:c9:6a:5b:24:4e:73:5b:18:81:02:b3:e5:1c:11:
78:2c:60:9c:e6:b5:1b:37:0b:06:5b:df:63:b1:0a:
00:fe:d0:a2:d0:fb:f5:6d:94:49:d4:80:0b:02:78:
af:d3:25:dc:b5:72:a5:ee:e1:39:77:9a:ba:bd:bc:
eb:e1:d1:34:d1:b3:ea:8c:11:30:d6:c6:36:b9:1b:
68:e3:1c:59:25:7b:24:52:b2:e4:09:1b:49:2a:fd:
b4:07:04:46:3f:aa:68:71:a0:82:49:ef:45:71:7e:
5b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:48:FD:04:4E:F7:58:FA:DD:84:BA:FC:62:BE:65:02:7F:71:20:EB
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:98:21:64:29:26:fb:cc:38:3e:ef:81:d6:04:d7:ea:4d:b4:
52:6f:6a:d4:ad:fd:1b:da:4f:28:36:14:6e:ac:41:97:49:37:
cf:12:b6:6c:d8:3f:21:ee:6d:40:9a:e0:31:35:f1:52:f1:2a:
d4:a5:85:12:cd:37:35:01:c3:eb:c5:eb:7f:d3:57:c5:66:62:
92:11:d8:fa:b1:93:3f:f7:52:ac:e3:7d:17:98:6a:d6:2a:eb:
f3:8e:9e:86:b9:64:c4:e5:a5:f2:34:f0:e3:54:f4:87:c9:d6:
3e:12:f0:6d:92:d0:94:e5:4b:a9:6f:e6:af:4d:89:c9:04:e0:
7a:e2:f9:d2:21:91:c7:9c:d8:76:da:36:72:36:36:d0:aa:1e:
51:5f:6f:6e:51:38:40:00:6f:7b:e4:58:45:96:82:8a:3e:21:
d3:25:09:1f:80:70:8b:18:ee:8d:b1:d1:ae:b5:5f:27:0c:32:
c2:1c:89:f8:d1:f8:f3:96:30:6a:a8:4b:f6:6d:7d:3a:b0:e2:
1a:2a:71:0f:96:37:64:85:81:5d:34:2c:73:46:ce:c5:41:07:
c4:2e:66:13:7e:5a:18:23:3e:47:27:dc:80:c4:0d:73:c8:54:
d3:b9:25:6b:f5:17:15:4e:80:3c:bd:83:3c:3e:1b:fc:a1:77:
58:08:2d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:57:35 2026 by rpki-client