Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
File: Grj4--pJuvWfzsIuSKn-IVfYZIM.mft (raw, json)
Hash identifier: QyxknUl2o9quCWWry+6APd8Hb7YESRLNBH5MokjdgVY=
Subject key identifier: 65:D0:EE:07:25:D2:34:45:6D:E1:3A:44:70:81:FD:3E:8F:EA:C5:F7
Authority key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
Certificate issuer: /CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Certificate serial: 01A0DFBC9B84B5CC8F74A183D0A4E84DA711
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
Manifest number: 0A2A
Signing time: Sat 26 Sep 2026 22:01:14 +0000
Manifest this update: Sat 26 Sep 2026 22:01:14 +0000
Manifest next update: Sun 27 Sep 2026 22:01:14 +0000
Files and hashes: 1: 0fJ-yxybAv-QFlNN6p0SVmcLCCw.roa (hash: XxEl++z5OIGhbPXD3dDGiudXN2Aw4yLGeSfQzFdx6XE=)
2: Grj4--pJuvWfzsIuSKn-IVfYZIM.crl (hash: 5g0hRl2KZwYhOA40BnvaHCZ3T7gIZPhYiF+4weM/wPE=)
3: mNrbGyIIfa4fLmutHXkEY0XNdeA.roa (hash: XyZ31cfTK799tFnPajLPxNb05Usvc+Q+zvjntqi0x6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:9b:84:b5:cc:8f:74:a1:83:d0:a4:e8:4d:a7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Validity
Not Before: Sep 26 22:01:14 2026 GMT
Not After : Sep 27 22:01:14 2026 GMT
Subject: CN=65d0ee0725d234456de13a447081fd3e8feac5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:de:14:09:3e:66:84:13:22:55:be:44:33:
a8:f3:2e:6c:b4:da:e3:e3:01:67:e5:67:20:3e:80:
3f:a1:03:d4:94:42:01:85:45:ad:48:77:03:b2:e8:
38:08:6c:d8:99:33:ea:b3:21:23:f6:30:d1:2e:15:
f2:54:eb:5d:2c:29:df:8f:b7:0d:07:43:a3:c1:7c:
90:44:6c:f0:d2:8b:6c:7a:19:9a:83:75:e8:f7:bd:
e2:0e:cd:bb:02:bd:0f:e6:ae:92:68:ac:fd:7e:85:
ef:45:3f:e1:95:9b:a3:55:10:bb:1c:1c:47:8c:63:
1b:f3:be:06:3c:16:71:75:e5:8d:a0:05:49:5d:27:
cc:4a:2a:b9:da:83:b3:fc:53:c7:7c:8f:88:54:38:
d7:5b:b3:29:be:0d:02:36:f1:1c:07:d7:cd:01:c2:
7a:93:bf:48:fd:83:1f:80:f8:56:7c:35:1b:c4:4b:
b4:1d:ea:5f:2e:e1:e2:7f:de:69:94:77:25:ef:06:
f4:07:91:2a:7b:aa:69:6e:25:82:f5:15:bb:42:db:
29:45:20:e2:9e:6a:b6:4b:1e:1e:61:2e:49:ae:29:
c9:14:51:76:b1:dd:ee:14:fd:33:95:50:b9:27:ef:
7c:7c:d2:ec:e5:2b:90:ab:95:99:19:f5:61:70:9a:
df:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D0:EE:07:25:D2:34:45:6D:E1:3A:44:70:81:FD:3E:8F:EA:C5:F7
X509v3 Authority Key Identifier:
keyid:1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:2c:f0:40:64:85:a2:c0:a5:9e:a8:a3:c2:6b:e4:6e:ab:81:
fc:95:f6:5e:17:0d:f1:d1:15:8f:33:fe:2e:51:44:3e:2a:a1:
e0:2b:4f:16:34:ff:45:e1:53:9f:91:4d:76:a6:81:22:37:8a:
dd:0e:1a:f6:7d:34:f8:fb:a2:83:0f:7b:f9:56:26:78:c7:4d:
8c:d5:b0:f1:34:74:dc:61:1d:51:e1:64:b9:00:28:d1:84:1f:
aa:33:a6:d7:f0:bf:86:9a:97:e1:64:f6:2c:ce:9d:3e:c4:2e:
d4:ef:2f:22:72:c4:5a:0b:1f:02:84:8b:52:f7:b5:2a:ca:c4:
f8:1b:67:d5:5b:2f:0f:a9:09:19:18:e5:23:0f:40:6d:21:c3:
ae:af:97:67:26:e4:68:93:07:cc:64:d9:57:0c:23:d6:6d:75:
87:6e:99:0f:50:8b:86:60:ed:41:a6:61:c3:1d:64:29:40:7e:
2e:78:9f:09:25:30:eb:ad:1f:27:64:05:82:aa:50:66:7d:db:
94:46:2a:05:f7:b5:10:b4:b6:cd:70:f1:94:c2:75:f8:cb:3d:
6d:0e:fc:1a:26:b5:8d:8a:a7:7c:69:14:64:1b:c1:63:4e:06:
f2:a0:5a:55:9f:2f:4d:86:fc:2c:e0:95:81:f1:69:bc:bd:90:
8c:c2:7b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:41:21 2026 by rpki-client