Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: 2mdJfbVt6AAzF6mabMzXFfgCV14T16hNR2E9pcOut68=
Subject key identifier: A1:1E:5D:D4:28:6F:64:AF:43:95:3D:2E:AD:46:5A:95:84:32:58:BA
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 019F93923B0DF144EA9A0FFC3BC7ED70EFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 16F7
Signing time: Fri 24 Jul 2026 10:01:01 +0000
Manifest this update: Fri 24 Jul 2026 10:01:01 +0000
Manifest next update: Sat 25 Jul 2026 10:01:01 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: J4XnFZteZRdr2WdRo8JhaitmCdy/EUrNPoY4Q8xmPZc=)
2: HdVf15BxvaUoRmDkU2WAnUzqeEI.roa (hash: E8gc8EoEirC9y0HgRWdI29lZIe/DH5y9+MNG4gOoc34=)
3: UoTm2cjOxeWwzsTm_tIMM9wPv40.roa (hash: adnzRNtY+kmU7Hbc2Pe9kRN3c/i17qsS4UkPfFW6Zac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:3b:0d:f1:44:ea:9a:0f:fc:3b:c7:ed:70:ef:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Jul 24 10:01:01 2026 GMT
Not After : Jul 25 10:01:01 2026 GMT
Subject: CN=a11e5dd4286f64af43953d2ead465a95843258ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1d:da:d7:7d:45:aa:7d:47:ca:0e:26:a8:c7:
e1:68:9b:38:a6:b8:41:81:ec:71:ab:6b:e5:71:60:
fe:89:ee:0f:b3:66:29:ee:1e:51:7e:29:9e:c3:a5:
67:70:be:0a:bf:8a:c0:cd:a6:bc:09:22:dc:85:ca:
ce:ef:1c:09:18:1e:69:c7:78:84:94:ea:79:90:f2:
82:41:6a:97:83:2f:87:50:8d:70:68:aa:df:8b:5f:
7e:af:f7:25:51:14:9a:00:14:a0:7b:ea:42:ff:b0:
77:18:00:f1:e9:81:af:5a:1d:20:1f:aa:18:78:9b:
76:a3:d3:3a:df:47:93:38:37:15:3e:7a:97:14:24:
81:45:1d:d1:67:c9:bb:86:8b:ff:7d:da:f5:1d:e9:
e4:ae:65:fa:11:46:6f:a7:26:86:98:12:b4:9b:d7:
c5:ea:0b:57:5f:98:25:40:2b:b8:82:08:2a:b0:08:
1c:8d:f8:c8:ca:df:f3:58:ab:40:73:83:b7:53:32:
33:cc:58:a1:ea:39:85:d4:39:e2:03:be:5f:55:42:
eb:c1:1c:8c:26:95:4f:25:c4:53:c8:e4:fe:e0:06:
11:dc:fb:18:13:45:7d:e4:a4:f4:36:59:36:69:47:
84:01:bf:b9:38:b1:ca:90:18:42:d7:e0:05:89:5a:
7a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1E:5D:D4:28:6F:64:AF:43:95:3D:2E:AD:46:5A:95:84:32:58:BA
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:17:73:1a:78:69:6c:3f:c1:fa:11:1b:b3:85:ae:7b:64:ab:
7e:77:a6:e0:2a:97:ce:89:48:97:a1:6c:35:f0:82:99:06:8c:
6b:0f:18:24:f5:70:57:07:81:f3:5b:01:c0:67:05:9e:52:65:
d7:19:dd:79:a6:c0:e1:47:cf:70:56:58:d3:35:f0:b3:d8:da:
84:0a:a2:56:a6:1e:ef:3b:38:c7:68:fd:5f:dd:4b:79:8f:6b:
be:9e:8e:5d:b6:f4:23:a7:eb:b5:29:d3:bd:83:40:13:f6:ad:
94:74:ad:3c:44:ab:2e:41:0b:f8:49:e5:b1:bf:fe:11:6e:67:
c9:b3:d6:8c:25:0c:1b:e6:20:cb:97:7f:4f:b0:74:29:d6:8f:
c8:26:f1:21:bf:d1:74:28:aa:0c:68:a2:de:74:88:03:3c:08:
e3:89:8f:5e:3d:69:64:a8:c0:3f:a7:29:5b:16:00:ce:03:58:
a8:c8:21:82:a8:1a:96:a4:43:3c:fe:a5:85:db:ed:be:19:3f:
3f:2d:98:19:9a:28:05:2f:54:2a:67:9c:fa:6c:8c:2e:c9:ba:
ba:eb:bb:dc:53:ea:82:e6:be:b0:52:58:a7:98:cd:23:13:4b:
da:d2:92:51:39:c1:66:ba:04:5b:8d:0e:2d:a9:5e:94:2c:ac:
8d:a3:75:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:19:51 2026 by rpki-client