Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: 3ktWVjA7jatprWpXKfP9265jn6qfKPt7fI04jeS3cgE=
Subject key identifier: D5:6C:FE:6E:F7:B2:51:5C:85:FA:70:4A:3E:70:1B:1E:4B:93:58:6F
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 01A0DB72286A2E39628AA607C168FB948241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 1618
Signing time: Sat 26 Sep 2026 02:01:26 +0000
Manifest this update: Sat 26 Sep 2026 02:01:26 +0000
Manifest next update: Sun 27 Sep 2026 02:01:26 +0000
Files and hashes: 1: RpMIwwKNDJ2StC4zRLgKJPlvR8w.roa (hash: cXPNnS64bUQTjJNvAeCad/jzk4TlUd0umXx2TLacFB0=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: t1I+P+MTy8vThm8yxNfCtm97ecKktAECHu4c05BYcQk=)
3: kp-VMkih7qc6B23hHp-3gThKHNw.roa (hash: bxojK3FurSVV0NeQ9kkDlIbku+sPTPShkBdp5lGAEYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:28:6a:2e:39:62:8a:a6:07:c1:68:fb:94:82:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Sep 26 02:01:26 2026 GMT
Not After : Sep 27 02:01:26 2026 GMT
Subject: CN=d56cfe6ef7b2515c85fa704a3e701b1e4b93586f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:fc:3a:03:73:ad:23:56:35:e6:2f:69:75:
bf:52:82:e0:ec:d0:78:79:aa:5b:7f:bd:a8:c5:a7:
27:74:de:7f:d0:df:23:ee:97:f5:d8:8e:be:1e:44:
c7:80:5d:a1:41:b1:ba:eb:f2:75:05:9a:a9:ae:5f:
51:59:fa:30:2f:cd:b0:22:89:0d:ae:d4:9d:1c:4d:
57:d6:98:d1:aa:3c:9e:32:ac:7b:70:37:e5:e4:48:
42:64:a2:20:08:7b:db:da:10:fd:a8:53:83:11:23:
f0:24:1e:38:d5:50:8b:14:32:9e:f8:6a:a1:e1:16:
eb:e6:8d:54:3c:da:7f:fc:11:e7:7f:a1:44:24:34:
4b:7d:c3:86:75:2c:28:8e:cf:02:2f:c6:2e:5a:8c:
01:cb:72:3b:4c:2b:62:ca:39:ff:e1:36:ab:18:7c:
da:9a:20:b4:00:87:05:99:63:f5:7a:f5:77:8a:68:
fc:03:b1:fc:b8:3b:66:6c:da:4c:a9:42:5c:4f:d4:
98:28:54:27:03:70:54:7c:b9:2e:49:56:8e:27:14:
59:b1:a4:f3:3a:b4:dc:83:14:ba:0b:1c:bc:12:df:
a9:59:70:a5:41:cd:fc:eb:bc:53:d0:ca:1a:09:6e:
09:ce:2f:43:b8:ca:26:bd:6f:b1:a9:9a:f8:ab:1b:
86:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6C:FE:6E:F7:B2:51:5C:85:FA:70:4A:3E:70:1B:1E:4B:93:58:6F
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:af:99:a2:3e:e8:34:39:0e:d4:b2:7b:20:0b:e3:ef:3e:4f:
a5:ce:3c:f7:b2:5e:f2:69:f2:7c:97:68:3d:4f:f3:00:e5:1b:
8b:1e:ca:42:34:26:23:83:7c:e9:c5:e4:24:17:6b:c9:30:7f:
a3:9b:29:50:00:a4:23:a5:33:ac:52:dd:3f:9b:7d:71:7e:58:
ee:1b:c8:2e:ce:e1:df:45:f5:b9:55:9f:55:e1:ae:b8:08:c1:
28:5d:b6:dc:83:e4:d2:73:c3:c3:00:1d:91:03:fc:dc:c8:db:
a2:35:6d:23:bc:35:55:60:5e:eb:37:48:e1:d0:a5:0b:30:6e:
f3:3f:f7:e3:f6:6c:a5:6c:93:18:42:24:3f:68:69:fb:3f:92:
6d:17:98:04:e3:8c:13:ec:05:ac:9e:31:26:b8:79:41:40:df:
7e:b0:55:d0:28:ca:11:1a:ab:00:d3:ed:07:61:c9:a9:c9:9d:
ff:af:94:00:c1:42:ff:47:72:54:14:f3:fe:5f:e5:bc:e2:8d:
90:fa:6d:c3:dd:8e:a8:a6:a9:6a:63:48:6f:c5:14:e7:f3:07:
37:f3:2e:e9:f3:9c:1a:87:42:ae:f3:36:5d:d2:2c:ba:ee:c7:
41:2f:cc:aa:8b:a4:23:76:cf:61:e6:43:67:2d:cb:3d:fd:88:
af:af:16:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:53:04 2026 by rpki-client