Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
File: gRAUn9EhMLPNzzWGKw3NuYqUcck.mft (raw, json)
Hash identifier: 9hqs91a+TnDkCE82bzV/W4/3ku3tNWulR6RqV5iCyPk=
Subject key identifier: CD:B8:63:83:9D:AC:0D:27:F9:A3:0E:91:A0:8B:9F:7F:6C:A3:96:FC
Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
Certificate issuer: /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Certificate serial: 019D32D0F9554F26664E0DFDE2CF0B7B3D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
Manifest number: 12CB
Signing time: Sat 28 Mar 2026 05:00:49 +0000
Manifest this update: Sat 28 Mar 2026 05:00:49 +0000
Manifest next update: Sun 29 Mar 2026 05:00:49 +0000
Files and hashes: 1: 8SQmgdkK0KsfXA0AaqFVFyW45As.roa (hash: fxN83lzpsUSm7eGjIimHE3kwgJziubYYBHi6/BB/u4I=)
2: A6iNMP0GraSgW6_j4orJfWQjE0o.roa (hash: lSRG12LN2giLsE/xo290FIB2nk9ZuI4BSXvCilXtaZM=)
3: Pq02UuVgPsEQJnxfmqHmAw9ZrRY.roa (hash: Z4q0gZP6TZCVbicLemekk+usml+xCUXFfIPrfXm7A+k=)
4: gRAUn9EhMLPNzzWGKw3NuYqUcck.crl (hash: 2nBx7mVT1CsE93iUA2iaSxpvzHevF2ZIKDf6sllvOeo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:d0:f9:55:4f:26:66:4e:0d:fd:e2:cf:0b:7b:3d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Validity
Not Before: Mar 28 05:00:49 2026 GMT
Not After : Mar 29 05:00:49 2026 GMT
Subject: CN=cdb863839dac0d27f9a30e91a08b9f7f6ca396fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d3:52:a6:2d:3d:a1:d1:5e:2c:ac:77:7f:a6:
01:66:3f:4f:00:7a:41:40:dd:58:93:ff:e1:2b:9e:
00:3a:66:1e:b5:c4:b5:85:21:20:41:e5:a3:a1:2b:
21:73:34:99:6c:67:32:08:c5:13:2f:8f:2a:f4:e6:
d2:b7:b4:e9:5e:9d:27:49:61:09:d9:c8:f0:b4:5d:
d3:84:86:2b:9c:8b:d2:7a:81:14:c7:2e:be:37:49:
0b:d4:ff:2f:c8:a9:c4:df:6e:3e:7e:41:93:bc:b2:
f1:f5:de:e3:67:e5:5f:c1:66:82:d4:ec:1d:2e:65:
57:4a:93:aa:2d:17:1e:a3:a5:30:4e:5c:11:fb:06:
f1:13:69:2c:e8:c6:af:8a:2e:84:e8:42:33:96:4d:
c2:a0:4d:ca:83:a8:3e:45:7b:fb:89:28:be:44:60:
66:ea:c5:7b:81:b1:fc:71:81:37:f5:fc:49:48:5c:
66:4b:56:18:fc:b1:5a:cb:b8:39:8d:14:61:9b:62:
bb:79:f5:d2:56:2c:fb:a7:91:bd:2f:a4:35:60:2b:
95:e7:84:26:30:44:10:76:f1:45:41:4d:ff:c3:12:
a7:38:96:25:8a:6d:40:6f:65:a9:c0:e9:31:d7:90:
11:0a:b3:95:5b:c5:e8:f6:12:05:3c:f7:55:a5:1c:
fa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B8:63:83:9D:AC:0D:27:F9:A3:0E:91:A0:8B:9F:7F:6C:A3:96:FC
X509v3 Authority Key Identifier:
keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:d8:33:83:df:d3:8b:ce:ab:25:05:4b:3c:02:4e:94:8c:7d:
b5:f9:04:85:eb:74:4a:46:9d:73:20:53:7e:dd:d8:81:88:28:
38:ea:15:80:16:26:fc:15:48:d3:59:09:ff:9b:7c:2a:2a:43:
a2:b6:c2:75:f9:75:ed:72:25:28:14:9e:75:41:92:b8:7b:aa:
a7:24:4c:e8:cb:80:90:bd:cc:e0:50:b4:60:de:ed:6d:10:e0:
7b:7d:9c:aa:ac:38:3d:2d:08:12:1f:d1:61:45:31:91:94:63:
cb:b6:63:63:0b:49:87:41:9e:b8:ba:e1:f9:ca:e6:4b:3b:e4:
e9:c1:75:67:ac:3a:9a:79:e8:a6:96:ca:17:c0:4b:68:f2:85:
df:21:74:b0:a2:37:6f:02:76:6c:b7:b3:30:ad:6f:ca:34:20:
36:28:1d:80:5c:5e:49:3c:a8:03:41:33:27:17:5a:85:3b:8a:
a6:6c:a0:be:c9:f7:77:e7:71:15:92:8a:3d:fd:8d:9b:06:4f:
f3:8f:99:c1:43:ff:2b:32:40:7e:e1:31:6f:eb:0f:1d:10:52:
ea:8c:83:eb:8a:c0:0d:89:fe:86:35:4f:01:94:88:bb:88:99:
2e:54:90:b5:79:dd:5d:71:27:6d:3e:27:3c:01:37:63:3c:e4:
fd:bf:4b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:27 2026 by rpki-client