Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: DWDXf70BBHWOyx4K+ObD11jqUeUw0Ot2LaFF8UMOyEA=
Subject key identifier: FA:49:8A:0C:61:82:9A:86:23:41:0F:FB:C0:B7:E9:6A:40:22:21:19
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 01A0DBE05D1A3BED6D0940B2FBAC0DD16162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 17A1
Signing time: Sat 26 Sep 2026 04:01:49 +0000
Manifest this update: Sat 26 Sep 2026 04:01:49 +0000
Manifest next update: Sun 27 Sep 2026 04:01:49 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: N5HTOAbNehoofN7QlRlETpS46uu7vSq0hJojh0SiAok=)
2: HdVf15BxvaUoRmDkU2WAnUzqeEI.roa (hash: E8gc8EoEirC9y0HgRWdI29lZIe/DH5y9+MNG4gOoc34=)
3: UoTm2cjOxeWwzsTm_tIMM9wPv40.roa (hash: adnzRNtY+kmU7Hbc2Pe9kRN3c/i17qsS4UkPfFW6Zac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:5d:1a:3b:ed:6d:09:40:b2:fb:ac:0d:d1:61:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Sep 26 04:01:49 2026 GMT
Not After : Sep 27 04:01:49 2026 GMT
Subject: CN=fa498a0c61829a8623410ffbc0b7e96a40222119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f7:3c:47:b9:48:0f:26:bf:79:e4:6a:34:40:
77:57:29:3a:1d:0a:0b:fd:e8:b2:30:8d:ad:7d:40:
22:e1:bd:cc:e0:3e:fb:71:9f:dc:64:b3:6e:25:50:
f1:aa:b2:2e:a1:b6:b5:3a:92:6d:a8:e7:ec:68:4a:
82:dc:80:ab:ec:08:64:b1:af:3f:0a:70:ad:61:d3:
4b:82:e8:bf:8d:66:78:d8:4a:9a:0b:ff:db:4b:21:
f7:e8:53:e0:93:bb:5b:0b:55:e3:fd:57:fa:a3:ff:
ea:da:0c:44:c3:7b:e5:aa:eb:96:de:7c:2d:25:74:
a4:38:4b:93:f3:36:52:3c:dc:77:27:66:3b:22:b9:
43:31:96:c0:a1:1b:8b:be:f0:f5:4a:40:67:65:01:
4d:5c:97:41:3b:95:41:4e:47:d4:ff:a4:cd:d7:40:
e3:4c:6a:a3:e7:6e:a0:8e:91:1b:c9:f8:75:a0:a2:
c5:9b:1b:3a:17:4c:3c:fb:cf:be:e2:c9:70:35:2e:
5f:e9:75:7d:f2:d6:d2:1e:71:2b:a6:2b:b9:79:41:
75:d1:45:d3:a1:fa:3b:c4:8b:6a:b4:4e:07:c7:4b:
69:88:e2:e3:15:40:a7:7a:91:97:31:a5:f8:5e:f1:
dd:f4:97:d7:01:8c:0a:46:13:bf:ed:f5:85:bb:78:
42:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:49:8A:0C:61:82:9A:86:23:41:0F:FB:C0:B7:E9:6A:40:22:21:19
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:1f:22:f9:24:68:e9:89:c0:fc:f2:9a:67:6b:b3:de:d7:af:
48:4d:cc:48:14:61:f0:59:72:01:89:b9:70:4a:9f:14:af:1f:
dc:e7:85:bf:fe:6b:b9:c3:f7:30:4e:d3:b1:20:07:c5:2f:57:
d9:4f:54:a5:81:72:40:d1:fe:f9:81:66:d3:f6:0a:7c:14:53:
6a:2d:7e:1b:63:6d:71:d7:77:fb:5c:d3:eb:ed:83:31:34:31:
db:fd:ca:2b:dd:ee:94:fe:55:23:2a:cc:5a:aa:2f:14:b6:41:
bf:3b:71:2b:a1:5c:4d:c1:46:3e:3d:1c:a5:ec:5d:13:cd:09:
28:84:84:27:2d:e5:4f:9e:72:a3:67:ca:d9:df:cd:fd:2d:cb:
60:59:51:0b:b7:24:c6:eb:c7:b6:23:90:88:68:5c:d4:de:8a:
89:62:7b:06:69:b6:4c:c7:b2:15:5a:05:a6:e1:be:79:4c:9d:
28:2f:f3:8f:de:d4:40:5a:a0:62:f0:11:19:f6:4d:48:b3:8a:
f6:c4:8e:38:13:e4:ba:ec:78:de:68:3c:c2:a5:4f:0a:d9:1a:
d6:32:05:60:69:db:0f:1e:43:35:24:31:60:10:1d:05:92:b8:
36:4c:5e:ab:0e:78:92:c0:69:47:e1:52:b4:6d:54:1c:39:69:
85:1b:53:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:17:07 2026 by rpki-client