Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
File: grZNfxWekC6mpa3XoQDcBfoUqe0.mft (raw, json)
Hash identifier: 7a8+gU84syVoJfXnr26dhfpIFHr57ee7cCZNqikasX0=
Subject key identifier: C8:E3:A4:AA:6D:76:3B:F4:17:1B:A7:BE:3F:89:C2:FE:23:CF:A9:EE
Authority key identifier: 82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
Certificate issuer: /CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Certificate serial: 019D27DFAEF5725245D651297394A751FBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
Manifest number: 10FA
Signing time: Thu 26 Mar 2026 02:01:03 +0000
Manifest this update: Thu 26 Mar 2026 02:01:03 +0000
Manifest next update: Fri 27 Mar 2026 02:01:03 +0000
Files and hashes: 1: WWHOCdsacMdGnHdJhOLy9pPWRYo.roa (hash: oBwrZQKt+LueihEP9ZDumJepktt4dnTgXqwHx+nSZEE=)
2: grZNfxWekC6mpa3XoQDcBfoUqe0.crl (hash: dSaX7Vw4vXa1Vxo8JXhqpd9eB1jwo/owEl4k0oVqcZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:ae:f5:72:52:45:d6:51:29:73:94:a7:51:fb:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Validity
Not Before: Mar 26 02:01:03 2026 GMT
Not After : Mar 27 02:01:03 2026 GMT
Subject: CN=c8e3a4aa6d763bf4171ba7be3f89c2fe23cfa9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:d5:0f:23:5d:be:5e:83:99:2a:f9:c3:14:
78:77:d6:73:d9:52:3e:03:44:3e:7c:4d:e5:86:b9:
4f:4c:86:8b:2e:72:fa:d3:12:19:16:db:26:94:64:
c1:b8:cc:2d:6f:51:73:32:98:7e:2d:e6:01:c9:92:
74:3b:f2:fb:42:11:26:03:7a:2a:c0:69:1e:18:fc:
e0:da:21:6d:1f:c0:74:12:7c:2d:3f:5f:6a:81:81:
34:6a:af:d6:5d:0c:65:a9:e3:ee:44:80:18:e1:38:
4e:7d:8a:54:ec:8d:fd:0e:c2:5f:80:a4:07:0b:32:
7c:34:b0:d6:97:55:eb:36:de:e3:8f:92:ef:c2:e9:
9b:dd:94:9a:a8:0e:2f:66:62:d2:fe:f4:9e:9f:fb:
45:77:85:4f:f0:3f:50:d7:35:fe:b4:12:46:d8:c0:
48:d5:f0:f3:0a:34:88:8e:c9:7c:e1:24:ea:ba:1c:
e8:d7:9d:34:43:3c:f1:ff:40:b7:c6:f4:d3:9c:5f:
06:79:ad:85:36:bd:e2:22:99:14:e4:2c:05:18:99:
56:be:63:b0:17:f2:0d:62:6e:9f:ce:a9:94:ac:3d:
f3:a3:93:02:84:c9:05:fb:4f:3a:bb:d0:8a:65:31:
58:39:9e:fa:67:ad:d7:6a:ba:a9:24:32:00:bb:a8:
7c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E3:A4:AA:6D:76:3B:F4:17:1B:A7:BE:3F:89:C2:FE:23:CF:A9:EE
X509v3 Authority Key Identifier:
keyid:82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:47:1c:da:50:b5:7e:9c:cb:a9:fa:29:8d:69:6b:c3:38:a6:
c2:e2:b4:be:2d:53:25:f3:0d:2a:d2:5b:88:a9:1a:a5:25:6c:
da:39:04:c8:da:c8:a5:cc:25:83:06:8e:9d:da:fd:9a:6a:22:
48:1f:f8:ab:99:a9:98:2a:e6:d4:d4:88:29:e4:66:6e:d1:df:
b1:d5:f9:db:04:ac:79:6e:7b:ee:c6:01:3d:db:d2:ee:db:21:
50:59:e1:87:47:bd:42:b7:0c:3f:77:71:79:75:31:79:45:19:
fc:d3:9d:54:d2:f5:58:e4:61:2f:39:94:04:53:30:18:d7:c8:
be:84:20:a1:bd:b8:9c:4f:d3:1a:51:3e:9b:51:e8:6f:92:a3:
93:49:ba:10:4f:77:79:68:4a:e4:97:fc:7a:22:68:bf:25:55:
f3:55:f9:06:cc:9d:4d:36:e2:51:29:93:44:53:9a:f2:31:fd:
de:e6:d4:f6:db:a7:fc:ba:83:a3:5d:f8:e7:45:8e:c4:c2:a7:
c1:3e:1b:d3:3e:90:f2:02:0a:5a:8d:0e:6a:d0:0a:5c:5a:a2:
ed:da:e4:d3:ca:02:c6:88:a2:f3:1b:eb:83:0f:22:a4:ca:10:
79:41:ce:7d:36:2f:65:3b:d9:7d:a1:bd:47:38:d6:ec:84:14:
6a:b0:c6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:47:03 2026 by rpki-client