Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
File: GRsamTWNqljnJiXEzp2CnpGO_IY.mft (raw, json)
Hash identifier: vcdTBhfhJVlCWwto7Pont//SHPDxJKRBp6gvk+/qADo=
Subject key identifier: BA:A7:69:BF:A3:01:DD:2A:7C:D8:03:73:22:50:3B:B4:0A:E4:62:D2
Authority key identifier: 19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86
Certificate issuer: /CN=191b1a99358daa58e72625c4ce9d829e918efc86
Certificate serial: 019D2929A332DB71955AE996CBC0228FAEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
Manifest number: 017A
Signing time: Thu 26 Mar 2026 08:01:27 +0000
Manifest this update: Thu 26 Mar 2026 08:01:27 +0000
Manifest next update: Fri 27 Mar 2026 08:01:27 +0000
Files and hashes: 1: AlIwiuWjQieywSsyw5heSRNGmSw.roa (hash: h4MIxkZlOYU3Vy7sGgEQPdGyZXemU35nFw7qReQJEwg=)
2: GRsamTWNqljnJiXEzp2CnpGO_IY.crl (hash: 4v6ypbHVY+OrQ7Rylw0mokJxbI2c3xuWIhxwsXYQk6g=)
3: GxrUhHUvxgB0GiAZ0wFN3Q-w6EU.roa (hash: DAgo4WMqo3pLDUsoNChESltTlxv9QRhL0wN0wC0e+gs=)
4: IxXflTOYaqu2atUQyoZopJz_6zE.roa (hash: b2hBbiqm9aa0JPxjxue6zQnoyQqQ8vw/9BwAsbxquNU=)
5: mzLCvR2XwN9trvePy6DYDH4SGj8.roa (hash: 2otDoB3rukTHefo5z2hH2i54uian2qbUKeVhc+WhRLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:a3:32:db:71:95:5a:e9:96:cb:c0:22:8f:ae:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191b1a99358daa58e72625c4ce9d829e918efc86
Validity
Not Before: Mar 26 08:01:27 2026 GMT
Not After : Mar 27 08:01:27 2026 GMT
Subject: CN=baa769bfa301dd2a7cd8037322503bb40ae462d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:a9:42:cc:cd:3a:d9:7e:20:85:5a:fb:25:44:
5a:70:59:2f:a2:06:de:e4:d4:1a:bf:0e:d7:2d:0f:
83:24:57:bc:3a:c9:90:c4:60:3c:bd:95:bc:67:68:
83:e4:08:94:e7:97:7d:ff:eb:bd:10:82:e0:c5:3b:
54:35:6f:ab:73:0e:38:23:cd:a5:b7:12:a2:89:f5:
7c:78:2d:bb:0a:c5:db:fc:b1:85:d5:05:a4:f8:30:
ec:78:b7:f0:18:ed:5a:67:63:df:a2:f4:51:9d:7a:
29:c9:80:af:4d:e9:ad:e1:24:10:96:86:3b:82:50:
ff:49:70:36:42:cf:ea:fb:4d:13:f4:9b:fe:0e:ed:
f5:1e:7b:28:13:4f:64:0c:5e:dd:8e:9f:bc:b6:f5:
a2:11:53:dc:b5:e6:b9:98:3e:80:d4:6a:5f:40:5e:
91:4e:92:8f:43:5a:f0:bb:31:16:ae:7e:2b:d2:ba:
a7:1f:a2:ef:aa:47:f6:80:c0:1d:84:f3:de:58:87:
06:aa:95:53:e7:3b:f3:6b:b7:49:04:46:5c:7a:f3:
9f:bd:22:97:36:56:59:2a:df:4b:cb:d8:97:a2:4c:
f9:df:d2:bf:d2:1c:60:f1:0f:5a:89:b3:07:04:b9:
03:23:64:bd:26:a5:b0:60:b2:22:19:b7:eb:e6:c2:
6c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:A7:69:BF:A3:01:DD:2A:7C:D8:03:73:22:50:3B:B4:0A:E4:62:D2
X509v3 Authority Key Identifier:
keyid:19:1B:1A:99:35:8D:AA:58:E7:26:25:C4:CE:9D:82:9E:91:8E:FC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRsamTWNqljnJiXEzp2CnpGO_IY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6197c1-72f4-4e4f-a4b8-9e4d0cf95544/1/GRsamTWNqljnJiXEzp2CnpGO_IY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b1:45:4c:53:e6:c7:05:f1:d4:f2:e5:64:ca:b5:65:c3:12:
98:70:1f:f4:7a:84:43:d2:c5:80:50:c6:87:af:ae:02:3a:c2:
2a:20:1a:8f:ea:fd:09:05:70:26:d0:1f:02:71:95:fc:06:d4:
60:6f:c5:51:de:5f:5d:71:89:ae:62:73:5e:02:93:0f:50:b0:
50:b0:ba:e5:41:9f:b9:51:f2:c4:42:4e:3a:3d:22:51:fb:3a:
6e:a6:32:7b:1c:45:70:7e:a9:10:3c:54:37:25:f0:f4:58:72:
3d:06:ee:94:7f:37:83:fa:e8:b1:3a:e2:d6:3d:e2:b0:da:59:
6d:25:e6:1c:6f:8e:66:18:db:5d:d1:60:6e:5b:2a:4a:d7:0f:
79:6e:ea:6c:f1:6b:a6:45:8d:43:2a:d2:f7:c8:96:ac:90:69:
45:c9:eb:b5:17:02:9a:84:22:56:7e:64:ed:88:1d:f0:fc:e6:
49:18:61:68:16:41:d5:c9:0a:51:96:bb:ee:cd:6a:20:64:98:
5d:41:2c:18:20:a4:f5:74:b4:df:40:e0:b2:7d:3a:c0:b2:84:
65:1d:c4:c0:c0:aa:aa:eb:78:bd:81:ea:cd:ea:f6:4a:f6:b4:
49:44:8e:89:7a:f0:60:41:ca:3c:a7:de:8e:32:ce:13:5e:b1:
45:60:b9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:40 2026 by rpki-client