Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: 6p+hWtCEwG10eVYkc3pATzeUEzpv7xk9iD90a62pzOI=
Subject key identifier: A3:CA:06:BB:1C:E0:8B:19:1C:76:DE:02:57:E7:E2:84:60:A2:12:87
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 019D2960BC7EA78379C105C9664B6AD21198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 17F7
Signing time: Thu 26 Mar 2026 09:01:38 +0000
Manifest this update: Thu 26 Mar 2026 09:01:38 +0000
Manifest next update: Fri 27 Mar 2026 09:01:38 +0000
Files and hashes: 1: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: +SoC22gl4Px2cLOqepo6WX1hTc+dKpJwJC5ZtlptXK4=)
2: ti3ObmEy21V2j-0W73NVwUe3ck8.roa (hash: schWmTw6g7AB2bDtVv9F+0FZ5DtNcX/Fqd7C3rT46tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:bc:7e:a7:83:79:c1:05:c9:66:4b:6a:d2:11:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Mar 26 09:01:38 2026 GMT
Not After : Mar 27 09:01:38 2026 GMT
Subject: CN=a3ca06bb1ce08b191c76de0257e7e28460a21287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:9f:a4:bf:52:e6:c9:38:66:b2:eb:6b:e9:
46:ef:05:26:89:73:a8:08:a6:5b:bc:4a:6c:0e:b8:
6b:f8:31:15:32:fe:78:d7:d7:76:00:d4:5f:e9:60:
00:e0:05:13:75:cf:c9:e2:ae:52:c0:9b:ac:57:67:
9d:44:90:1b:6d:df:68:1d:84:af:b0:f7:31:47:16:
9d:51:82:b9:c4:aa:24:55:d1:be:b4:9e:1c:d0:18:
70:59:cd:ba:fe:6c:dd:bd:ae:fb:0f:9b:32:77:b9:
2f:47:4e:10:c2:dc:ee:18:7e:bf:9d:ac:f5:f0:6f:
82:5a:04:07:1b:03:c3:96:d8:76:e7:7c:fd:ec:8b:
77:6d:f4:fd:4f:2d:2c:3f:d4:94:13:ae:4a:d5:5b:
e3:89:5f:76:83:17:1b:38:5f:45:96:8e:1f:e1:94:
bc:94:75:50:90:34:45:d5:20:64:c1:30:20:89:41:
55:c5:94:f4:05:04:ef:6a:17:e4:06:d6:ed:86:fc:
b7:5d:54:2c:e1:c7:30:ec:10:7b:28:86:36:b4:ee:
f0:e5:c6:fb:74:f1:c4:ac:aa:41:47:21:47:d3:4a:
e8:c9:0f:0e:c7:81:69:f8:53:eb:de:9f:59:04:dc:
8c:3e:45:4a:a9:54:5a:42:9b:4b:d1:fe:c4:4c:2b:
b9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CA:06:BB:1C:E0:8B:19:1C:76:DE:02:57:E7:E2:84:60:A2:12:87
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:19:8d:9f:cb:c2:7d:c9:5d:67:21:ce:fd:c7:15:a3:99:10:
ce:7d:94:ef:88:85:f9:3b:e1:fb:25:b1:4c:f9:29:13:8a:70:
45:c0:70:cc:51:04:93:72:ed:28:b9:18:c3:3a:58:08:19:a1:
24:cd:d4:97:05:ee:21:a7:bd:37:9d:e8:27:56:c4:b1:c2:2a:
07:3a:a1:27:f1:50:6d:21:8c:97:34:ba:d0:88:36:2e:8c:cd:
e2:43:73:84:4d:b2:9a:e4:42:bf:5c:43:6e:92:da:a0:31:86:
a9:fb:e5:45:b7:1d:52:7d:35:78:48:74:f2:ec:08:7c:d1:31:
97:81:88:c0:12:9c:6a:cd:0b:46:de:f7:3f:fd:c2:64:89:00:
e9:1e:83:90:8d:30:49:21:a6:ab:e6:7d:70:f4:79:df:67:10:
bf:09:84:a9:d3:af:33:9c:57:32:27:ab:b4:5f:d6:eb:93:32:
6e:7a:c4:0f:a1:06:8a:20:e9:f8:b0:cd:51:0f:be:f4:24:53:
36:a6:2d:c0:c0:e6:44:5c:0c:2f:4a:12:19:41:b4:55:12:41:
45:ee:43:1a:e0:9e:0a:e7:93:87:c8:a4:a4:87:47:f2:bc:28:
66:01:2b:90:12:7a:de:e4:9b:dc:3b:27:4d:a7:1f:fe:b6:17:
2b:88:79:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:54:14 2026 by rpki-client