Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.mft
File: grQaKruE3kSzFPizq8zqGKSIFyc.mft (raw, json)
Hash identifier: d26mMYhYVAB7KFGvz5xTUuZGNdLgXpAsj+p7t3XUXug=
Subject key identifier: B9:19:47:CD:47:40:B1:00:56:D1:3F:87:0E:12:33:AF:CE:8B:62:7F
Authority key identifier: 82:B4:1A:2A:BB:84:DE:44:B3:14:F8:B3:AB:CC:EA:18:A4:88:17:27
Certificate issuer: /CN=82b41a2abb84de44b314f8b3abccea18a4881727
Certificate serial: 019D26CD2227AB3B853A8D2D0B45E7EED8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grQaKruE3kSzFPizq8zqGKSIFyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.mft
Manifest number: 021C
Signing time: Wed 25 Mar 2026 21:01:10 +0000
Manifest this update: Wed 25 Mar 2026 21:01:10 +0000
Manifest next update: Thu 26 Mar 2026 21:01:10 +0000
Files and hashes: 1: grQaKruE3kSzFPizq8zqGKSIFyc.crl (hash: cr1QXfTMSvYyDma0RfxbGZTT8Q6t8Yn7R5hHzIxGm4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/grQaKruE3kSzFPizq8zqGKSIFyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:22:27:ab:3b:85:3a:8d:2d:0b:45:e7:ee:d8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b41a2abb84de44b314f8b3abccea18a4881727
Validity
Not Before: Mar 25 21:01:10 2026 GMT
Not After : Mar 26 21:01:10 2026 GMT
Subject: CN=b91947cd4740b10056d13f870e1233afce8b627f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:f4:db:35:ab:b9:13:f9:e4:d6:2c:b2:2a:
eb:68:8a:1f:68:eb:3b:8b:1e:e5:5c:fe:f7:fc:e3:
9c:98:e8:d0:38:9b:04:da:51:1f:c2:0e:1b:db:cb:
b4:6d:42:61:a9:db:72:92:00:d3:3b:6f:10:28:38:
d7:38:3a:9c:9c:60:2f:bf:2f:97:4f:d3:d9:f6:06:
26:3f:de:66:3e:cb:35:45:0d:80:93:79:cb:e0:ae:
5e:f9:6e:5a:1b:0a:4e:2e:10:c3:83:e7:13:a0:ad:
1b:0a:e5:f5:a9:d1:c1:6b:84:34:2a:fb:a6:c6:ca:
3c:a9:dd:f5:aa:a3:98:3c:80:e0:97:f6:e0:f8:98:
b9:50:9b:40:94:b4:51:7e:c9:40:70:5b:ab:29:26:
18:33:9c:4e:ae:68:8c:f7:a1:9f:23:9b:1f:73:76:
94:90:db:58:36:4c:6a:fb:fe:c9:38:18:e3:87:19:
13:bf:57:93:54:40:3f:02:0c:5b:e0:3a:ff:1d:04:
13:62:00:32:bd:33:20:73:1c:93:f3:69:03:39:45:
f3:65:64:5c:35:b7:ee:56:12:b1:91:85:92:f2:23:
c4:47:6d:24:57:49:34:96:c9:8b:e4:b7:f1:ed:9b:
c2:be:b9:82:d0:21:ef:cf:8f:2d:e6:35:c0:1c:c5:
66:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:19:47:CD:47:40:B1:00:56:D1:3F:87:0E:12:33:AF:CE:8B:62:7F
X509v3 Authority Key Identifier:
keyid:82:B4:1A:2A:BB:84:DE:44:B3:14:F8:B3:AB:CC:EA:18:A4:88:17:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grQaKruE3kSzFPizq8zqGKSIFyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/690f87-28c9-4482-85f2-989671001e91/1/grQaKruE3kSzFPizq8zqGKSIFyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:c3:7c:3e:e4:ba:45:4c:16:dd:02:90:cc:48:4d:42:84:5d:
9c:9f:73:df:a2:27:aa:fd:0c:7a:7b:2a:20:03:4d:d7:ee:16:
8b:50:75:96:63:10:8a:26:c8:8e:93:ed:1b:bb:08:30:d3:eb:
b9:05:2b:39:f4:01:a5:37:07:4c:72:df:92:59:ee:20:31:72:
8c:77:69:1a:98:4b:03:5e:f6:60:79:29:08:84:6e:b8:fb:e4:
5b:47:b8:36:8d:92:0a:64:e7:2a:eb:59:1d:e2:7e:2f:de:de:
5f:d1:1c:6b:94:5f:16:eb:b8:d4:3b:90:01:24:05:28:f1:0b:
c5:35:9a:d2:86:c7:a8:e9:a1:d7:d0:d5:39:3d:a7:ec:0a:3d:
e3:38:e2:07:99:a4:65:14:39:bb:b1:2e:70:d5:e5:df:24:34:
98:18:91:b8:58:4c:83:b3:b1:f6:de:10:61:70:2c:53:82:9f:
98:f0:9c:24:75:6d:77:2b:60:9b:50:bb:75:e5:5f:62:bf:b5:
f6:0a:8d:6e:60:ab:74:e9:6d:56:28:67:a6:ba:4a:cf:b0:37:
e4:7f:34:94:50:6f:b5:95:86:17:37:e6:6a:2d:0a:c5:5e:3f:
d8:67:1c:88:32:4f:a4:d1:60:de:73:c7:65:2c:01:3d:ce:35:
51:66:11:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mzSInqzuFOo0tC0Xn7tjzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYjQxYTJhYmI4NGRlNDRiMzE0ZjhiM2FiY2NlYTE4YTQ4
ODE3MjcwHhcNMjYwMzI1MjEwMTEwWhcNMjYwMzI2MjEwMTEwWjAzMTEwLwYDVQQD
EyhiOTE5NDdjZDQ3NDBiMTAwNTZkMTNmODcwZTEyMzNhZmNlOGI2MjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J302zWruRP55NYssirraIofaOs7
ix7lXP73/OOcmOjQOJsE2lEfwg4b28u0bUJhqdtykgDTO28QKDjXODqcnGAvvy+X
T9PZ9gYmP95mPss1RQ2Ak3nL4K5e+W5aGwpOLhDDg+cToK0bCuX1qdHBa4Q0Kvum
xso8qd31qqOYPIDgl/bg+Ji5UJtAlLRRfslAcFurKSYYM5xOrmiM96GfI5sfc3aU
kNtYNkxq+/7JOBjjhxkTv1eTVEA/Agxb4Dr/HQQTYgAyvTMgcxyT82kDOUXzZWRc
NbfuVhKxkYWS8iPER20kV0k0lsmL5Lfx7ZvCvrmC0CHvz48t5jXAHMVmcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkZR81HQLEAVtE/hw4SM6/Oi2J/MB8GA1UdIwQY
MBaAFIK0Giq7hN5EsxT4s6vM6hikiBcnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3JRYUtydUUza1N6RlBpenE4enFHS1NJRnljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82OTBmODctMjhjOS00NDgyLTg1ZjIt
OTg5NjcxMDAxZTkxLzEvZ3JRYUtydUUza1N6RlBpenE4enFHS1NJRnljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC82OTBmODctMjhjOS00NDgyLTg1ZjItOTg5NjcxMDAxZTkx
LzEvZ3JRYUtydUUza1N6RlBpenE4enFHS1NJRnljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4MN8PuS6
RUwW3QKQzEhNQoRdnJ9z36Inqv0MensqIANN1+4Wi1B1lmMQiibIjpPtG7sIMNPr
uQUrOfQBpTcHTHLfklnuIDFyjHdpGphLA172YHkpCIRuuPvkW0e4No2SCmTnKutZ
HeJ+L97eX9Eca5RfFuu41DuQASQFKPELxTWa0obHqOmh19DVOT2n7Ao94zjiB5mk
ZRQ5u7EucNXl3yQ0mBiRuFhMg7Ox9t4QYXAsU4KfmPCcJHVtdytgm1C7deVfYr+1
9gqNbmCrdOltVihnprpKz7A35H80lFBvtZWGFzfmai0KxV4/2GcciDJPpNFg3nPH
ZSwBPc41UWYRAw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:19 2026 by rpki-client