Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
File: grEuz7IvKdYKPjG3nzYt1gwtTBA.mft (raw, json)
Hash identifier: qo6JT68O6q5Q+wbFRO+kobVAgG4qNn/otdxu3xnPDIA=
Subject key identifier: 3A:B4:FE:E9:24:38:5F:33:5A:CB:BF:0A:96:22:99:01:83:1A:A4:B5
Authority key identifier: 82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
Certificate issuer: /CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Certificate serial: 019D322C24FC9B66F62D3BBD1C6D33BB4922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
Manifest number: 1025
Signing time: Sat 28 Mar 2026 02:00:46 +0000
Manifest this update: Sat 28 Mar 2026 02:00:46 +0000
Manifest next update: Sun 29 Mar 2026 02:00:46 +0000
Files and hashes: 1: AGH32cynD1g31TMTO74Iax9Ggd4.roa (hash: leiJEevLJyZZ4+GHUepvyrmeuEBnTdpZnBVIgUP01Mw=)
2: grEuz7IvKdYKPjG3nzYt1gwtTBA.crl (hash: 1v9YlafWwFsOWHtFtg+BBljnqXRl2NrDsRDWQTZkhys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2c:24:fc:9b:66:f6:2d:3b:bd:1c:6d:33:bb:49:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b12ecfb22f29d60a3e31b79f362dd60c2d4c10
Validity
Not Before: Mar 28 02:00:46 2026 GMT
Not After : Mar 29 02:00:46 2026 GMT
Subject: CN=3ab4fee924385f335acbbf0a96229901831aa4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:16:72:53:d8:5c:0b:8c:a9:97:2b:85:a6:
b7:ff:f0:5c:6a:a5:77:f4:70:6a:06:72:24:05:32:
f6:8d:f2:b1:c0:55:dc:e0:e8:aa:27:2b:b9:df:75:
41:b2:d1:08:45:16:f7:f4:ce:f5:02:65:5b:4d:7b:
89:ee:5a:fc:2f:0d:16:63:36:a2:48:ce:ce:4a:4c:
1c:c9:a5:28:cd:ea:e3:95:6a:b8:59:e6:74:bc:db:
cb:e9:1c:72:58:9d:05:6d:dc:68:1b:35:5d:f5:86:
8b:a1:33:b1:ef:03:54:e0:a8:81:3c:df:89:29:1b:
17:06:f8:82:4a:d4:2c:49:d8:ea:cf:79:5a:6c:ae:
d2:84:e3:54:93:3c:ff:b4:2b:61:8a:aa:5b:62:82:
a8:f2:98:ac:24:a3:68:e9:b9:cd:b1:d5:d4:79:80:
23:9d:cf:21:9d:f8:48:ec:2d:8a:e1:6f:fc:f4:88:
ee:95:49:32:e5:9e:13:b0:13:0a:1c:4d:1a:6b:55:
91:a5:03:83:d9:67:d6:31:02:87:bd:ac:22:65:b4:
4f:ca:15:bb:cf:e0:65:07:c5:23:7b:ea:93:d0:ed:
ad:5e:8a:81:e8:45:fc:ae:eb:67:a7:d7:5b:53:0f:
74:ed:98:c6:3b:a6:5c:fe:3e:6a:94:5e:0b:45:6e:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B4:FE:E9:24:38:5F:33:5A:CB:BF:0A:96:22:99:01:83:1A:A4:B5
X509v3 Authority Key Identifier:
keyid:82:B1:2E:CF:B2:2F:29:D6:0A:3E:31:B7:9F:36:2D:D6:0C:2D:4C:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grEuz7IvKdYKPjG3nzYt1gwtTBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/a5c738-3df5-4e02-af31-2b0eab3d3d37/1/grEuz7IvKdYKPjG3nzYt1gwtTBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:20:0a:e3:29:83:8f:b5:73:97:4c:ed:f0:55:7e:ad:db:d1:
00:a7:c7:25:b7:f2:60:d2:15:2e:45:15:be:09:75:08:4b:b2:
57:ec:f4:15:dc:69:cf:fb:a0:b4:0c:8d:be:cb:d3:70:e7:2a:
95:8e:dd:9f:2e:f1:8f:a1:92:cf:ac:04:38:3d:7d:d1:51:20:
8e:3e:bb:ee:6f:71:05:c8:f8:77:b8:6e:92:d3:71:13:b6:a0:
4a:79:13:57:63:e5:83:45:b0:e5:c6:5d:dd:62:83:10:83:04:
1c:92:f5:d8:74:71:7f:bf:1c:a6:3d:95:13:cb:76:df:b1:fd:
09:74:de:30:94:f6:61:9b:52:e4:d8:62:ec:01:13:cf:4e:35:
97:b5:86:e0:c7:b2:11:5b:9d:fb:e7:78:41:16:56:c2:89:f9:
f4:91:c6:e4:4b:18:f3:1b:e6:2d:3c:c5:73:62:f8:05:57:ec:
76:cb:60:8b:a0:54:ae:90:44:d3:60:5f:15:fd:06:aa:e4:0e:
fd:14:c1:1a:5b:0c:5b:91:cb:3a:1e:12:b5:76:a8:9a:d4:8d:
4c:6a:8d:83:f7:00:b0:15:6b:d5:7c:a2:62:13:26:36:cf:b6:
cc:cd:22:f8:24:f9:20:06:e0:9d:4a:cd:af:a9:f9:25:9e:8f:
47:3c:0c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:38:42 2026 by rpki-client