Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
File: GROVdcQBKD__U2E3sOg-VBX-GNA.mft (raw, json)
Hash identifier: nVbBbwU2uJE7XTlC1QyM1ZclZf1OE34dI6FsAiUbBh0=
Subject key identifier: C5:18:1A:8A:E5:7B:C8:CA:D4:45:9A:85:88:ED:D8:96:EF:E3:52:5C
Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
Certificate issuer: /CN=19139575c401283fff536137b0e83e5415fe18d0
Certificate serial: 019D27E037D9712458D51FA63C667E2BCD8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
Manifest number: 0CFF
Signing time: Thu 26 Mar 2026 02:01:38 +0000
Manifest this update: Thu 26 Mar 2026 02:01:38 +0000
Manifest next update: Fri 27 Mar 2026 02:01:38 +0000
Files and hashes: 1: GROVdcQBKD__U2E3sOg-VBX-GNA.crl (hash: 1MV3iQ2prXqN2OyPzl5OO+Hn/MmAZVXU9EfsycmnbC8=)
2: ZZeABTpJzzngeuL-OTKi1sObkvk.roa (hash: LZJnobolr7nVT9FIHfxLJ++YArusGtx4j3xW25plKP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:37:d9:71:24:58:d5:1f:a6:3c:66:7e:2b:cd:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0
Validity
Not Before: Mar 26 02:01:38 2026 GMT
Not After : Mar 27 02:01:38 2026 GMT
Subject: CN=c5181a8ae57bc8cad4459a8588edd896efe3525c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:84:7c:ef:3d:87:cd:63:c6:10:2e:c6:1d:f0:
75:f5:01:2f:78:f8:34:6a:b0:05:33:54:93:2a:2c:
f8:bc:a7:b4:15:fc:53:dc:0a:1f:0d:49:51:c8:cc:
fc:dc:68:1d:c7:68:43:bd:32:68:fe:6f:b3:1a:cd:
64:5f:87:2e:ca:0c:bc:71:6d:8b:2e:b8:a4:fb:30:
f2:f5:ff:f9:21:53:05:b4:41:86:b4:ab:76:35:74:
08:4d:96:a3:c1:1f:9b:69:86:7f:48:f3:ff:fa:48:
ff:3c:68:e1:96:a3:d9:e7:e2:de:20:b1:29:86:fb:
30:a6:04:cb:0f:2d:1e:43:4f:8a:f7:2e:fe:b8:97:
b4:66:c9:c7:ef:1d:f0:8d:4a:09:af:01:89:49:04:
67:f9:c9:69:c4:19:7a:6a:1d:0c:4c:53:0d:f6:cf:
b3:2f:27:cc:87:82:98:f1:b3:47:dc:cb:af:87:df:
0c:3e:6f:8d:c8:d4:db:02:94:4f:50:a3:86:75:5c:
93:7e:f6:a1:78:62:6e:a1:f5:8e:b3:46:1b:97:59:
62:c8:d5:00:fc:4b:bd:9a:f3:22:c3:01:0c:16:6b:
43:b1:a8:3e:26:dc:8b:6d:f1:8e:4e:c2:b3:56:4d:
88:43:ad:e0:d6:3b:6c:9f:a7:ea:d8:4e:d9:09:f9:
41:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:18:1A:8A:E5:7B:C8:CA:D4:45:9A:85:88:ED:D8:96:EF:E3:52:5C
X509v3 Authority Key Identifier:
keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3e:06:a2:2c:32:65:62:13:01:ae:72:a0:c2:fe:28:6e:9e:
dd:36:b1:ac:d2:6e:a6:35:bf:2d:af:32:5a:51:7a:6a:a6:83:
8d:17:b1:c8:87:0e:34:ed:77:39:c3:25:15:c2:57:e8:3e:a6:
83:eb:dd:ee:4d:f7:1d:f3:3a:03:d3:84:72:ec:b8:4d:04:c4:
52:14:f8:e7:69:73:7f:f8:77:7a:5f:b3:9b:01:24:9a:66:3a:
e0:92:51:a7:60:ed:f3:ab:6c:74:f9:23:a3:4c:0a:7f:f0:49:
9b:f8:02:83:4e:34:68:62:15:ca:22:61:d5:3c:62:fb:07:de:
aa:e9:2a:e6:bd:93:58:91:eb:04:83:e6:fe:4b:96:12:e2:8e:
cf:bc:8a:92:86:f8:ec:31:ec:a6:a2:9b:18:4f:49:40:7c:20:
ed:bd:21:d2:79:58:f7:05:dd:aa:53:ae:3b:7d:76:f3:61:78:
89:28:04:b4:ca:2b:91:a6:d9:ec:df:b9:93:33:50:de:18:84:
d0:75:c9:e6:18:e7:fa:3e:40:19:b9:ec:3e:56:22:5a:77:af:
ff:8a:a9:cd:ce:a0:5a:73:1e:5f:f0:5b:0d:c9:5c:b7:d1:41:
d8:f8:0b:de:cb:d7:95:b3:95:a9:ff:29:06:03:c9:de:36:f8:
5a:8c:56:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:29:20 2026 by rpki-client