Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
File: GR7jr4IFY0lGR1UaUgbvDEXPlck.mft (raw, json)
Hash identifier: GlToYQ8bFX26k8FPpu4ep3SmHLvX23xZBuknkqUGrc4=
Subject key identifier: FB:40:9B:B5:1D:1D:DD:3D:01:6D:AA:5B:33:3B:BE:B5:2F:FD:D7:9F
Authority key identifier: 19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
Certificate issuer: /CN=191ee3af820563494647551a5206ef0c45cf95c9
Certificate serial: 01A113AA15EE7C0BD40643F25364A6B2DDAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
Manifest number: 1A8F
Signing time: Wed 07 Oct 2026 00:01:15 +0000
Manifest this update: Wed 07 Oct 2026 00:01:15 +0000
Manifest next update: Thu 08 Oct 2026 00:01:15 +0000
Files and hashes: 1: GR7jr4IFY0lGR1UaUgbvDEXPlck.crl (hash: Shs4FSOpL3qJcym+iUtU9ZwQGc1uXzqxFCKRsMpLzjg=)
2: ToG3fqXyy5d5Ca1p5NmDib0lvZI.roa (hash: oyYGCSqaAaDI1i5xJfDf0vsTp+UTW82dEmnGT90lSos=)
3: aLohr_CjNJaf_OCGCYUirDRs1Mc.roa (hash: BdAfbqtdeH1oK0lMhwivyNJCFGk02pluiC+NvbWmuzc=)
4: eye1En_Mp6FRxtfoP5Oj5VBibbo.roa (hash: asGncJIHjRIOGa0QDEKb+Wt6+ba0g195yHdWF434LME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 00:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:15:ee:7c:0b:d4:06:43:f2:53:64:a6:b2:dd:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191ee3af820563494647551a5206ef0c45cf95c9
Validity
Not Before: Oct 7 00:01:15 2026 GMT
Not After : Oct 8 00:01:15 2026 GMT
Subject: CN=fb409bb51d1ddd3d016daa5b333bbeb52ffdd79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:0a:20:a3:ec:b5:f7:82:bd:49:01:68:ff:
0e:58:86:02:4e:b1:f0:d5:58:5b:7f:f5:1d:7d:2e:
06:5f:3f:af:5c:f6:6f:b4:d5:71:93:70:50:63:08:
1e:3f:af:86:5c:7c:37:81:eb:c6:f0:02:32:82:24:
33:33:44:ab:42:41:ac:b0:89:71:a4:66:41:de:f6:
8b:58:41:58:b1:00:81:8e:6f:04:83:69:b5:77:95:
06:ea:a9:de:fb:1e:ee:48:6c:4c:2d:9d:ce:c5:15:
e1:7d:35:c9:98:15:5a:21:4b:34:49:d9:3d:d5:87:
ac:0a:3c:08:d3:d8:5c:33:a3:e9:87:8c:aa:fc:ac:
d3:72:6e:76:c5:ec:69:aa:ea:3d:46:49:0c:93:15:
90:67:06:fb:30:e2:e1:eb:1c:05:77:52:83:f2:50:
25:c2:96:cb:73:22:01:56:ce:aa:12:4c:79:2a:11:
6e:2d:de:86:d8:ee:83:04:f1:48:32:53:34:36:8b:
3d:ab:30:fd:36:cc:da:2c:f3:1d:c8:e0:25:6a:b6:
27:f1:c9:f8:28:1c:f2:06:97:73:6f:ee:e0:fd:25:
05:2a:b0:c8:19:40:78:49:11:28:cf:a6:51:09:c0:
77:dd:c9:c4:cc:be:b2:eb:57:c0:7c:82:7d:c3:3a:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:40:9B:B5:1D:1D:DD:3D:01:6D:AA:5B:33:3B:BE:B5:2F:FD:D7:9F
X509v3 Authority Key Identifier:
keyid:19:1E:E3:AF:82:05:63:49:46:47:55:1A:52:06:EF:0C:45:CF:95:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR7jr4IFY0lGR1UaUgbvDEXPlck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a3df81-2096-493d-b106-46d6cea20342/1/GR7jr4IFY0lGR1UaUgbvDEXPlck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:8d:b5:de:20:28:b9:13:2b:85:91:73:ad:97:a5:f4:79:36:
fb:13:10:07:f1:ed:64:79:c8:ee:b2:5e:7f:83:14:50:53:c0:
b8:12:3d:f5:69:11:ca:81:80:ff:54:b2:d9:8a:f1:27:4e:11:
3d:09:e0:a6:a0:07:66:d9:b8:89:f6:7e:6c:fc:09:4d:c9:ca:
a3:61:11:88:75:c4:f0:8b:9c:48:19:63:3d:1a:4b:0e:86:64:
3a:9a:d4:8d:ab:b7:b5:b6:e4:ca:56:10:d3:f2:b6:81:fe:18:
dc:0b:2f:64:06:90:08:b7:c7:f8:ec:9f:78:ed:70:8e:68:72:
d0:09:82:d5:d5:15:22:d6:6a:e6:16:2e:b7:81:71:9c:f0:c4:
ea:bb:cf:22:e2:50:50:59:5c:ca:2a:d2:ca:3e:32:71:72:7f:
29:d7:f4:6a:0e:38:ff:24:64:12:1a:56:49:b0:ef:78:1c:3c:
71:6f:74:29:e6:5b:44:e0:65:31:a8:b7:2a:62:2e:6d:2f:18:
e9:b5:a1:00:8f:9c:da:04:41:2e:7c:cb:0d:6f:c5:a0:d1:a0:
50:dd:1b:c7:65:16:2f:04:14:59:66:24:82:92:98:e6:5d:7f:
f9:17:b8:69:6b:79:2e:91:01:48:61:48:b5:4b:55:38:e9:31:
31:2a:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 10:25:45 2026 by rpki-client