Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
File: GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft (raw, json)
Hash identifier: oHIyv6iAT1q/ZmgyiT106LndaOZGEiB7Y1ZxcgegikQ=
Subject key identifier: F9:64:B8:C5:5C:38:D1:C8:48:10:ED:FF:0F:D0:41:11:C2:93:80:EC
Authority key identifier: 19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C
Certificate issuer: /CN=1913cb4856821d14cd2e0b767c2931a22c154e7c
Certificate serial: 019D28F25630BF8BAF62D5E01A72DAD8120F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
Manifest number: 0D1C
Signing time: Thu 26 Mar 2026 07:01:03 +0000
Manifest this update: Thu 26 Mar 2026 07:01:03 +0000
Manifest next update: Fri 27 Mar 2026 07:01:03 +0000
Files and hashes: 1: GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl (hash: CZYx+M+SkJ8wT7JRAO62mavPmB/TzevcnOGtS+3DkHQ=)
2: bZSxqWwTY1hjgA_FzmYnTmci0lU.roa (hash: TvQAEqhu51tpf23KSUXBl6fgcPXKlJ1HTkRuIyGOMWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:56:30:bf:8b:af:62:d5:e0:1a:72:da:d8:12:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1913cb4856821d14cd2e0b767c2931a22c154e7c
Validity
Not Before: Mar 26 07:01:03 2026 GMT
Not After : Mar 27 07:01:03 2026 GMT
Subject: CN=f964b8c55c38d1c84810edff0fd04111c29380ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6b:26:62:ac:ff:f5:c0:7f:58:1b:20:17:6c:
31:64:1f:d9:42:57:7f:db:45:28:10:30:a1:bd:f2:
76:13:f9:47:ab:8f:b3:bf:38:5e:b5:5a:9c:9d:2b:
18:8c:b0:18:ae:79:15:61:f9:3a:39:f4:ab:4c:c3:
0b:ab:6e:52:c3:09:4a:e2:f6:b3:a9:34:78:d8:ee:
f4:b6:92:95:09:f3:40:d4:1d:55:59:4f:3e:74:17:
08:b0:2a:77:70:c0:08:db:ee:9c:16:57:23:41:be:
68:1f:03:b4:cd:68:d2:c1:eb:06:79:37:4c:59:07:
10:ec:f4:fa:1b:dc:f2:8c:d9:ab:f5:ce:9e:9a:93:
34:45:43:95:3b:b2:83:4e:02:ce:c7:2a:67:67:82:
aa:87:c1:ac:5b:b3:d7:88:1f:4d:d6:b1:5f:61:29:
20:9a:95:61:49:6a:27:70:98:57:08:3c:b5:a7:a9:
39:93:15:f8:9a:a6:9c:50:bb:2f:0d:9a:ce:dd:ba:
97:91:e8:99:36:3a:c4:d8:91:c6:81:4b:45:15:f4:
e4:4c:fe:c9:e2:cc:d9:ea:ec:71:38:bb:34:2a:39:
0f:76:56:3f:37:f4:31:d6:b4:36:26:3f:b0:b9:28:
b1:97:5d:93:8d:b0:2b:b1:fa:d0:4b:a7:08:f0:93:
6b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:64:B8:C5:5C:38:D1:C8:48:10:ED:FF:0F:D0:41:11:C2:93:80:EC
X509v3 Authority Key Identifier:
keyid:19:13:CB:48:56:82:1D:14:CD:2E:0B:76:7C:29:31:A2:2C:15:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRPLSFaCHRTNLgt2fCkxoiwVTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1977de-1df4-404c-9da9-0779df1dd64d/1/GRPLSFaCHRTNLgt2fCkxoiwVTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0a:b2:0f:c8:c6:67:12:b5:88:26:65:e5:34:54:4c:e2:bc:
82:b7:dc:b2:56:87:ab:e3:19:a0:6f:b4:83:d2:48:04:8f:25:
74:4c:e3:d1:3f:19:be:19:ba:77:1c:cb:87:0a:2b:d4:29:36:
bd:38:06:59:2c:7c:88:6e:bc:53:4c:1e:b8:c2:88:bc:72:1e:
da:20:12:1d:41:62:4c:7f:02:0c:a3:d5:0f:4a:07:58:92:09:
10:1c:d6:5f:46:c9:61:2d:36:b4:2b:80:22:f6:db:07:49:13:
ec:18:e9:56:fc:03:22:ed:58:ba:d0:6c:20:48:7c:c8:6d:6e:
a1:83:72:09:9d:8d:cd:61:b2:73:60:ba:a4:09:05:e7:f4:99:
57:21:b6:da:8e:7d:8d:8e:69:71:35:68:6e:b7:d2:c6:aa:2a:
14:b4:9b:96:af:20:b9:e4:70:55:d6:c4:40:7d:36:3a:fd:0a:
80:f7:94:dc:86:2c:37:fd:72:90:92:fc:01:bf:ca:ea:29:4f:
b5:4a:c4:44:dd:f5:85:1d:b5:bc:6a:d6:5a:d8:82:8d:ad:54:
4d:eb:3c:e5:df:46:bf:8e:23:72:7b:01:74:80:87:a0:05:bb:
be:b2:52:96:7e:df:c2:95:5b:2f:ea:5d:99:d5:a3:55:3f:60:
96:5f:c1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:28 2026 by rpki-client