Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
File: T01-Grss2D6aLemgazkbOlJERBs.mft (raw, json)
Hash identifier: COyFeuOu6pDyG0WRPAN3BstWhfC9W8y+DKoj/4Du8f8=
Subject key identifier: B0:8A:0E:87:6D:95:02:7A:9B:F7:AF:4B:15:3D:32:87:67:E5:C0:79
Authority key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
Certificate issuer: /CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Certificate serial: 019D2703CAEC1B70394922C5CD0B689AA88F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
Manifest number: 1517
Signing time: Wed 25 Mar 2026 22:00:52 +0000
Manifest this update: Wed 25 Mar 2026 22:00:52 +0000
Manifest next update: Thu 26 Mar 2026 22:00:52 +0000
Files and hashes: 1: T01-Grss2D6aLemgazkbOlJERBs.crl (hash: MmGlpTyW7UJM5CSRacONM9J9LK3aibd4B9Z6RHOwwnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:ca:ec:1b:70:39:49:22:c5:cd:0b:68:9a:a8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Validity
Not Before: Mar 25 22:00:52 2026 GMT
Not After : Mar 26 22:00:52 2026 GMT
Subject: CN=b08a0e876d95027a9bf7af4b153d328767e5c079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:0c:8a:ab:e9:6b:f6:d2:78:8a:6e:dd:13:
ba:a4:64:68:28:9f:33:1d:28:5a:b1:eb:0b:03:5c:
43:ba:54:e5:56:76:c3:6c:19:30:d2:fd:b5:e2:f3:
b6:27:27:45:1e:f1:de:e3:6c:6e:08:5a:06:67:55:
5f:6e:3d:99:a1:7e:8d:27:57:1f:94:28:39:3c:01:
86:c4:cf:66:80:0b:c3:84:6d:4d:7f:71:ed:7e:60:
79:48:b0:dd:08:a5:e1:11:d1:64:78:68:2a:aa:90:
5b:b6:5e:d2:23:95:1b:54:f7:49:6d:78:19:d6:ec:
d9:98:32:bb:27:a0:1d:75:41:a1:56:60:18:ce:2f:
12:95:4e:bf:04:dd:25:13:26:12:60:55:9c:92:a4:
15:f7:5c:0c:87:54:9a:99:5f:25:aa:1e:9f:37:50:
56:3e:28:dc:6c:25:bb:3f:56:5f:a7:d5:88:22:ff:
60:0d:fe:21:68:12:e4:1a:a9:f1:f1:64:88:c0:75:
73:9b:de:37:10:11:09:0a:18:9a:86:b7:81:b9:b0:
22:f5:42:7f:43:70:45:e4:4d:c9:10:55:d7:21:ae:
75:59:f4:a5:ec:a9:92:db:09:e0:52:5d:fe:71:89:
ea:ff:a5:1a:a9:22:5f:37:6a:13:c7:7c:bf:fd:32:
60:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8A:0E:87:6D:95:02:7A:9B:F7:AF:4B:15:3D:32:87:67:E5:C0:79
X509v3 Authority Key Identifier:
keyid:4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:54:bb:36:4f:03:bf:e4:11:9a:be:cd:e5:7c:f6:d3:30:e8:
02:c6:14:06:ee:a8:3b:75:c8:d9:f7:3c:cb:cc:6a:5e:93:22:
f8:d8:ca:4c:20:9d:bc:7a:52:53:89:b2:d8:59:84:1b:0e:ec:
41:3f:7f:5d:05:fc:98:e8:f4:18:7d:0d:1d:bc:23:95:b4:22:
e4:65:f4:c2:e7:f7:9c:d4:91:38:d1:4b:c6:4f:cf:69:bc:93:
e1:05:b9:27:a4:9d:0e:6f:54:a4:57:0b:0b:33:73:dd:80:cf:
f3:e9:0e:01:18:1f:5b:89:0a:e0:4b:51:0e:5e:97:7a:3f:01:
04:21:61:48:3d:98:57:76:ca:84:fa:bc:d1:95:1e:e6:d5:ed:
28:73:ca:a5:f8:8f:50:72:1f:5f:75:b1:53:7a:8a:01:8b:9e:
32:c9:b7:88:3a:79:c7:6b:44:37:11:be:5f:44:ea:a3:51:b4:
39:b0:06:53:76:fb:a7:13:c9:d3:ca:22:4b:c5:f4:5b:d1:14:
ab:b5:f3:04:42:49:53:55:36:5c:ea:11:10:ae:af:d5:09:b9:
c7:e6:d4:81:37:db:b6:ab:24:5e:76:92:db:dd:69:16:24:6d:
67:26:31:7f:37:f6:96:c8:cc:89:d8:c5:4a:75:8f:83:66:e7:
f5:15:1a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:10:40 2026 by rpki-client