Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: fP9JMyhLuOVHcley8iN/dMWXWwHJkCTn/d5Uv+G9n3s=
Subject key identifier: F9:CC:9E:9F:1F:8F:08:7E:46:FE:34:01:24:7D:EE:65:68:43:94:DC
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 019F927FB1F21DC9DCF686B433ABE0A9FBA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 05:01:09 +0000
Manifest this update: Fri 24 Jul 2026 05:01:09 +0000
Manifest next update: Sat 25 Jul 2026 05:01:09 +0000
Files and hashes: 1: EK-BO9njT8D0PUd03822T1Wcn_Y.roa (hash: IVt2nvgD6bQiKsQebz3stonbNyplhQ3WbabmnplyKUM=)
2: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: Zyr9ciQFyYgjtVssK10nSLhCFn0OCR7xR9YPbujdq8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:b1:f2:1d:c9:dc:f6:86:b4:33:ab:e0:a9:fb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Jul 24 05:01:09 2026 GMT
Not After : Jul 25 05:01:09 2026 GMT
Subject: CN=f9cc9e9f1f8f087e46fe3401247dee65684394dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a9:d4:59:dc:4d:e2:6f:89:c2:e1:1c:f9:a9:
8b:b3:bb:4c:46:1f:08:79:e9:7a:80:ca:ef:f0:89:
7b:a9:b6:66:37:4d:ca:a1:8a:c3:c4:b2:06:65:2d:
fb:b4:e1:43:4b:3b:c2:44:78:db:a3:b3:75:53:e0:
48:eb:b7:7c:58:3b:83:9b:16:a0:e3:5b:ed:cd:df:
51:24:48:20:7f:a0:5a:e6:ac:11:77:2b:9f:03:1e:
b7:34:ab:0c:1a:a7:5b:23:fc:44:5d:31:cc:d2:63:
79:86:e5:b6:b1:0a:8c:61:bd:c2:a5:27:51:62:dd:
d4:72:78:f1:ab:9d:bd:5c:7b:09:5a:6b:fe:b0:dc:
78:7a:b2:9d:71:2c:0f:be:9d:83:15:a3:bf:9a:ec:
3a:21:e9:cf:ed:50:9e:d7:11:17:f1:84:41:6a:62:
cf:d9:0f:22:8f:84:75:fb:fa:b3:d4:cd:43:76:37:
0e:18:7e:44:94:af:cb:d8:0b:9c:5a:5d:bf:74:aa:
93:0b:53:6e:48:bc:12:d1:14:0d:67:af:8d:0c:1c:
3d:57:2e:ac:a9:12:16:38:8c:32:f9:9d:1e:a7:28:
9e:73:ea:a3:14:a3:36:44:8a:9e:ba:14:77:35:79:
42:c9:5a:77:22:24:2a:19:63:2e:d9:d5:1d:e5:b0:
33:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:CC:9E:9F:1F:8F:08:7E:46:FE:34:01:24:7D:EE:65:68:43:94:DC
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ab:62:bf:f5:cf:2f:fe:ab:e4:36:23:cd:4b:f6:5c:77:96:
df:41:84:6f:d1:17:21:ee:8b:cf:c6:10:30:e9:15:94:a4:ca:
23:61:90:68:90:85:93:64:52:e9:ec:5a:63:5e:25:5f:cd:72:
86:aa:8b:3e:70:14:bf:52:09:fa:53:f6:8c:59:e3:26:40:12:
d0:c5:1f:9e:50:c2:8a:26:36:24:80:f5:89:41:51:c0:32:4f:
f9:e7:31:d1:e1:87:83:c7:78:d0:eb:d8:b6:f8:5f:a1:7e:4c:
54:24:40:c2:cd:84:a0:53:cb:8f:23:1b:a3:95:95:37:5c:e1:
a2:84:02:6f:28:12:e5:d1:8f:d7:4a:11:31:13:51:20:b7:91:
4c:83:5e:e0:63:af:b0:dc:4d:51:e0:89:3e:5a:3c:37:12:52:
4f:e4:dd:df:6d:40:35:84:13:f1:bf:2f:3a:b4:4a:a9:97:a7:
55:f5:b7:3d:71:6a:58:24:6e:e2:91:99:c7:99:8d:e0:60:a2:
d2:1d:56:4a:27:ff:29:2e:17:46:53:e0:55:2f:19:6c:72:e4:
d4:3b:9e:1f:4e:78:a9:ec:de:81:ba:be:53:30:37:09:ca:0e:
d2:aa:6e:57:55:08:fb:5b:2a:e3:dd:54:a7:40:bb:03:a6:fa:
e3:d1:ca:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:54:23 2026 by rpki-client