Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: IcTm3CHlWsonrRo/jaMKjt1cL4/r3jkWLoeac0puvvM=
Subject key identifier: 2D:BF:37:F4:39:99:A4:E0:60:78:95:90:06:90:37:A6:2D:34:79:1E
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 019E1FB5B117D1F34F7E515D095E749C2F09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 05:01:01 +0000
Manifest this update: Wed 13 May 2026 05:01:01 +0000
Manifest next update: Thu 14 May 2026 05:01:01 +0000
Files and hashes: 1: EK-BO9njT8D0PUd03822T1Wcn_Y.roa (hash: IVt2nvgD6bQiKsQebz3stonbNyplhQ3WbabmnplyKUM=)
2: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: UxS/YurL97TpASZOkLLAu4GJBGwC4j1y6ThBKv7TR8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:b1:17:d1:f3:4f:7e:51:5d:09:5e:74:9c:2f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: May 13 05:01:01 2026 GMT
Not After : May 14 05:01:01 2026 GMT
Subject: CN=2dbf37f43999a4e060789590069037a62d34791e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0a:c6:5c:42:58:1e:ef:0d:f2:54:81:96:eb:
3e:44:c8:42:8b:2d:d5:87:d9:07:80:b3:51:77:b2:
48:d8:ba:0e:60:e4:8a:eb:58:50:19:9b:51:60:86:
9c:c6:9b:bb:3c:4a:e5:9d:eb:2d:70:a3:40:c9:22:
40:8e:11:b7:78:73:fd:98:5a:2d:2d:b1:a1:81:9b:
94:1d:e3:4e:68:ea:57:31:08:91:48:c5:dd:ec:3b:
bf:67:53:c7:e2:8f:d1:8f:96:e6:4b:94:23:9b:c2:
e0:02:f9:f6:21:08:55:a9:f5:08:63:b6:6c:43:75:
fe:a1:95:98:d0:aa:dc:cf:db:a4:cd:b0:ca:93:66:
18:80:3f:38:00:74:fe:0d:f6:a8:72:df:35:45:36:
27:8f:1a:71:1f:3e:ba:fd:3f:22:1c:af:bb:f3:17:
bb:b1:dd:9e:52:4c:d7:a1:d9:f4:12:df:18:af:30:
50:74:8e:4c:21:b6:6b:c9:bf:93:ed:7c:b6:16:f7:
9c:f8:56:8a:ae:66:0c:30:0f:4d:f6:50:34:c8:2e:
10:21:f3:d6:99:8a:6d:67:1c:c7:1e:a7:e6:88:40:
d6:fc:f4:42:de:51:e6:b1:4e:60:e5:d2:56:78:36:
44:d0:ec:c9:2d:59:b7:90:f8:d7:6a:d2:02:0a:5f:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BF:37:F4:39:99:A4:E0:60:78:95:90:06:90:37:A6:2D:34:79:1E
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:d0:12:63:c5:7c:f2:20:78:09:24:a9:f3:db:7c:96:81:47:
2c:c8:63:09:ab:8c:cf:b0:8f:72:b8:fe:3a:eb:02:3f:10:81:
6a:bd:a6:a4:f8:07:96:0c:e9:7b:52:0f:f5:e6:49:27:23:26:
b3:18:cf:ee:0b:75:a4:28:be:68:da:f7:bb:fc:2b:28:b0:61:
85:19:62:57:95:4d:e5:74:1f:50:92:5f:54:a4:d7:d7:b4:31:
4c:c3:28:b4:94:1a:bc:e8:05:4d:f7:71:82:d7:1c:e5:cb:93:
18:bd:10:ac:6d:ac:3d:20:b1:0a:05:9d:8a:06:fa:b0:94:21:
e1:ab:cc:fb:42:0e:d6:60:aa:80:6e:6c:f3:7e:60:b2:99:f7:
1c:8f:c0:b4:00:fe:f0:fc:91:5e:53:40:32:61:70:63:23:e3:
18:be:9e:6e:81:43:7c:19:9a:f4:52:1d:80:e2:37:61:a3:2d:
12:85:e1:81:81:6a:ac:c0:43:4b:f1:08:ff:fb:12:76:0b:a8:
cd:7a:a0:62:17:3b:74:d9:5c:eb:48:95:1d:96:d9:4e:42:cf:
87:34:49:f0:4b:d1:25:07:06:24:eb:d1:c1:f3:0a:00:f8:29:
a1:eb:b5:0f:43:20:fc:22:4c:e5:ad:1f:07:31:fc:6a:0b:e1:
64:57:6b:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftbEX0fNPflFdCV50nC8JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjcwZTM0ODhkYzgzMWQ0NWE3NTc0NGUyZjhiYmEyNjdm
ZDMxZDYwHhcNMjYwNTEzMDUwMTAxWhcNMjYwNTE0MDUwMTAxWjAzMTEwLwYDVQQD
EygyZGJmMzdmNDM5OTlhNGUwNjA3ODk1OTAwNjkwMzdhNjJkMzQ3OTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QrGXEJYHu8N8lSBlus+RMhCiy3V
h9kHgLNRd7JI2LoOYOSK61hQGZtRYIacxpu7PErlnestcKNAySJAjhG3eHP9mFot
LbGhgZuUHeNOaOpXMQiRSMXd7Du/Z1PH4o/Rj5bmS5Qjm8LgAvn2IQhVqfUIY7Zs
Q3X+oZWY0Krcz9ukzbDKk2YYgD84AHT+Dfaoct81RTYnjxpxHz66/T8iHK+78xe7
sd2eUkzXodn0Et8YrzBQdI5MIbZryb+T7Xy2Fvec+FaKrmYMMA9N9lA0yC4QIfPW
mYptZxzHHqfmiEDW/PRC3lHmsU5g5dJWeDZE0OzJLVm3kPjXatICCl+6HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC2/N/Q5maTgYHiVkAaQN6YtNHkeMB8GA1UdIwQY
MBaAFBq3DjSI3IMdRadXROL4u6Jn/THWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMt
MDk3MzNjYjAyNjllLzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMtMDk3MzNjYjAyNjll
LzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9ASY8V8
8iB4CSSp89t8loFHLMhjCauMz7CPcrj+OusCPxCBar2mpPgHlgzpe1IP9eZJJyMm
sxjP7gt1pCi+aNr3u/wrKLBhhRliV5VN5XQfUJJfVKTX17QxTMMotJQavOgFTfdx
gtcc5cuTGL0QrG2sPSCxCgWdigb6sJQh4avM+0IO1mCqgG5s835gspn3HI/AtAD+
8PyRXlNAMmFwYyPjGL6eboFDfBma9FIdgOI3YaMtEoXhgYFqrMBDS/EI//sSdguo
zXqgYhc7dNlc60iVHZbZTkLPhzRJ8EvRJQcGJOvRwfMKAPgpoeu1D0Mg/CJM5a0f
BzH8agvhZFdrsg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:11:35 2026 by rpki-client