Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier: iS7NKzrQ8qi+uQTkr8UwGfuo1XNJ981U3xZhwod1/0w=
Subject key identifier: 33:8A:A7:38:B6:F2:7E:DB:DB:97:84:7D:17:CB:8A:C5:B9:C3:58:F5
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 019D2771CAB1573F5C89DA26630058A0FD5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number: 188E
Signing time: Thu 26 Mar 2026 00:01:01 +0000
Manifest this update: Thu 26 Mar 2026 00:01:01 +0000
Manifest next update: Fri 27 Mar 2026 00:01:01 +0000
Files and hashes: 1: FjlUOZvW96ADTmmnM6L72d8iARo.roa (hash: kIe35Th4NAZk6eCGw7Pep7yHHgIezVmLRC6I4uCSvTI=)
2: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: UeFxHABex01EZ2JMQsfkmgKSxDYMXHyZb9yvepgWjM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:ca:b1:57:3f:5c:89:da:26:63:00:58:a0:fd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Mar 26 00:01:01 2026 GMT
Not After : Mar 27 00:01:01 2026 GMT
Subject: CN=338aa738b6f27edbdb97847d17cb8ac5b9c358f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:45:f2:2e:99:98:e5:54:3b:6b:90:15:f9:ac:
99:fd:6c:18:ba:1c:40:9a:69:0c:cb:f3:f3:ea:8e:
2a:83:10:fd:f7:02:49:8c:43:78:eb:a4:05:83:38:
7a:47:c9:d1:be:82:a5:e3:df:dc:94:38:92:77:9b:
93:b2:0e:24:0c:b8:a3:3e:f3:24:ee:a8:9a:9b:21:
81:9f:7d:5b:e1:ed:e7:a9:89:bf:ad:38:57:78:c4:
a4:a2:96:5f:1b:39:79:06:00:64:22:68:a3:0c:06:
f2:61:67:6d:46:1f:c3:eb:da:b6:a2:9e:c2:a0:c0:
43:d2:04:ff:50:39:00:72:a5:36:f0:df:42:9d:dd:
88:cc:68:9c:40:fa:1e:c2:5e:49:7b:69:61:48:12:
00:67:70:da:4a:25:ee:bf:60:39:22:9b:d6:6e:e0:
fa:4e:31:2d:fc:21:c2:42:b9:90:ae:72:f0:2e:e0:
24:bc:a4:e7:3f:22:b2:62:51:32:27:71:0b:d6:e9:
67:0d:6f:0a:2e:14:3c:23:9b:04:81:24:00:aa:69:
39:cc:01:09:e9:8f:d7:c2:ea:1a:bd:2a:cd:fc:15:
e0:77:78:2b:47:6e:7a:77:da:e1:b0:30:80:e2:0b:
a2:e9:c2:cb:e3:68:f3:6e:e4:52:25:74:9e:1d:4e:
83:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8A:A7:38:B6:F2:7E:DB:DB:97:84:7D:17:CB:8A:C5:B9:C3:58:F5
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:28:22:6e:c5:f5:b9:25:ad:c8:c5:82:d2:79:cf:9e:42:36:
85:43:f6:af:58:33:81:19:47:f9:90:40:4a:ee:3d:e1:44:c9:
16:bc:12:46:2a:d9:ad:64:40:5f:49:55:9d:16:0c:57:72:9b:
63:f6:c7:1b:fb:49:14:cd:cc:fe:4f:4c:95:47:56:77:a6:54:
7f:10:76:fd:89:f2:14:b2:7b:f6:e5:44:67:21:48:c0:23:fc:
05:bc:12:f6:29:4c:3c:9d:e6:b0:a1:a6:eb:c2:20:01:7d:b0:
90:d3:56:93:65:04:bb:17:22:52:0a:52:d9:f5:01:54:33:5b:
50:9e:cc:34:ee:ec:85:33:31:79:06:b5:02:42:3a:fd:95:fa:
9f:8c:2a:3b:05:b7:b3:1a:94:6f:09:3b:fe:59:ac:8a:15:4c:
2f:73:96:04:ff:f3:28:c5:b0:58:c2:c3:57:ca:70:81:27:5b:
a3:73:cc:1f:59:ec:3e:eb:1d:bd:3f:1d:13:39:bb:3e:5b:ea:
9e:17:c9:a3:4c:4d:fc:b0:39:32:e8:c4:a1:20:8d:26:ed:4a:
5c:04:2a:94:93:1a:97:b9:87:ed:5c:2c:a4:49:d6:31:f6:fb:
46:21:bf:36:8f:eb:2f:c7:a0:cf:36:08:57:0c:c6:22:88:3f:
8a:e8:4f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:56 2026 by rpki-client