Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: d9Joe+OCiSzDMuVdqo5cIBfCjPpB3BtHsW+UozVw6yU=
Subject key identifier: 1C:86:07:B9:FB:86:AA:9A:50:84:6E:F3:3F:63:7F:87:D6:E5:2D:55
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 019F9323CC7E714FD443D44451AF1CA4B8BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 156E
Signing time: Fri 24 Jul 2026 08:00:24 +0000
Manifest this update: Fri 24 Jul 2026 08:00:24 +0000
Manifest next update: Sat 25 Jul 2026 08:00:24 +0000
Files and hashes: 1: RpMIwwKNDJ2StC4zRLgKJPlvR8w.roa (hash: cXPNnS64bUQTjJNvAeCad/jzk4TlUd0umXx2TLacFB0=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: yXr2aUi5IG0QR6vJErc6ZV6HQp7ecH4si7R4nLn2ETg=)
3: kp-VMkih7qc6B23hHp-3gThKHNw.roa (hash: bxojK3FurSVV0NeQ9kkDlIbku+sPTPShkBdp5lGAEYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:cc:7e:71:4f:d4:43:d4:44:51:af:1c:a4:b8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Jul 24 08:00:24 2026 GMT
Not After : Jul 25 08:00:24 2026 GMT
Subject: CN=1c8607b9fb86aa9a50846ef33f637f87d6e52d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:45:04:1b:1b:8f:e1:3b:39:f1:b6:31:05:40:
93:eb:86:a0:94:a6:f2:28:19:d2:a9:51:48:d2:f0:
81:fe:5c:08:97:6e:a2:a0:8e:68:fd:63:09:45:23:
cc:30:90:fb:49:03:79:70:01:88:82:ff:db:c3:5a:
c6:3a:63:38:0c:21:8f:06:64:cd:34:dc:8e:c2:04:
27:d7:96:a7:47:24:75:f2:6f:fb:84:87:64:60:d8:
df:f6:61:45:b6:fe:fd:7d:09:48:ab:82:18:f8:f8:
10:a0:7f:e2:9f:22:ed:3f:6b:f8:b7:8f:4c:17:34:
25:34:b4:bd:33:e1:b4:16:e5:d4:47:13:b4:57:c4:
50:91:86:83:04:9f:b2:79:fc:b9:c2:20:e2:2d:cf:
39:d2:a3:d4:72:a9:86:a2:1a:3e:19:83:5f:f9:04:
b4:53:b1:36:cf:c4:92:e1:28:91:ec:0d:f7:24:54:
d2:78:5b:45:b7:26:1c:35:ab:8d:6a:be:0c:46:d8:
e2:f0:60:76:97:eb:d3:21:56:06:92:24:e1:39:a3:
eb:ac:ff:90:2d:e6:fa:34:d2:5f:f4:84:96:92:10:
f2:31:07:f4:62:06:2d:0f:04:b1:1e:21:7b:35:fb:
cf:24:27:fb:23:3b:fe:af:98:17:9c:d7:33:93:f8:
b7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:86:07:B9:FB:86:AA:9A:50:84:6E:F3:3F:63:7F:87:D6:E5:2D:55
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:e3:30:b8:83:ed:f4:2e:1b:0d:64:d7:ba:86:15:a2:01:9b:
7c:12:65:c5:6f:9c:e6:35:3d:d8:14:f7:8b:f6:6a:82:65:a4:
cb:48:6a:b7:90:ba:42:10:aa:0e:fe:84:31:56:04:a3:e0:33:
b9:27:96:66:ea:91:b3:92:84:7b:5f:a7:4d:da:9b:04:a5:c5:
fd:4d:0b:f9:af:95:d6:ec:a2:92:6c:0a:8f:0e:d6:ad:46:16:
f8:84:dc:be:b6:2f:56:5c:cb:e8:6c:d0:a0:4d:c0:f6:91:14:
1a:1a:10:56:26:15:b9:a5:7f:3a:cf:6d:af:26:3e:a0:9a:f1:
fc:3e:bf:1a:5c:98:06:a8:6b:22:84:b8:6e:7c:5c:1b:3f:d9:
9c:38:2e:0a:09:bf:cd:3c:9f:e2:c6:46:ac:20:91:4e:6e:6f:
cb:eb:4e:47:80:e0:c7:f4:02:ab:d3:ec:d5:70:43:16:b2:f7:
0e:e3:3c:04:ef:b8:30:9c:4b:24:06:9f:eb:f6:88:d7:3f:6a:
3d:0e:e7:83:4f:7d:65:27:c5:7f:82:f9:a3:79:6d:0b:11:78:
9a:ed:27:2b:e3:66:db:bf:2a:68:3c:07:b0:da:21:07:e8:fe:
00:b6:e2:90:7f:e8:a1:87:a5:c4:81:79:e4:8a:8f:af:5b:d1:
f7:ce:71:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:54 2026 by rpki-client