Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: qekP8siFFvPdQEqHmOfQX2Z5CG5Xr9i49qblUg3r7bk=
Subject key identifier: C3:07:E9:11:58:E0:A1:12:26:58:C8:B7:A0:EC:CF:2C:96:0A:24:40
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 019D288488BEF9E7C8E47C529E227D5F4262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 05:01:07 +0000
Manifest this update: Thu 26 Mar 2026 05:01:07 +0000
Manifest next update: Fri 27 Mar 2026 05:01:07 +0000
Files and hashes: 1: EK-BO9njT8D0PUd03822T1Wcn_Y.roa (hash: IVt2nvgD6bQiKsQebz3stonbNyplhQ3WbabmnplyKUM=)
2: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: DIODWIRkmU2cqUc2/0TfByhafYy3+iVtHJszBmbS8+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:88:be:f9:e7:c8:e4:7c:52:9e:22:7d:5f:42:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Mar 26 05:01:07 2026 GMT
Not After : Mar 27 05:01:07 2026 GMT
Subject: CN=c307e91158e0a1122658c8b7a0eccf2c960a2440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ae:b3:09:50:89:fc:f4:0e:2b:0d:3c:d8:c9:
6b:18:f7:b0:53:94:06:f9:68:b1:d5:4a:a9:33:55:
56:fd:63:9c:2f:d4:3c:53:a8:20:9e:05:f1:90:d0:
76:ae:44:5d:b6:a9:59:8b:1a:87:65:92:57:6c:0a:
ff:10:08:cd:c2:09:43:aa:dd:26:72:8e:e9:89:7e:
5b:76:c7:ac:c0:aa:62:6f:26:e3:36:4a:ff:87:6b:
15:a0:0f:2c:68:8c:ce:eb:07:4c:6c:02:a7:92:52:
8a:6d:73:ab:2d:47:0d:e5:4e:a3:cf:4f:d0:91:ca:
45:36:db:23:82:05:72:6b:9b:5d:73:48:43:5b:a2:
e5:8f:4b:41:10:95:9f:b9:64:fa:8d:d1:eb:96:c1:
08:05:6f:9e:8d:f7:81:52:46:e8:5d:f4:35:2e:cd:
6d:29:fd:4d:29:c6:ef:7b:73:db:22:c7:30:fb:40:
d0:d3:ba:36:74:36:0c:fd:d6:6a:32:b7:2c:da:0c:
17:53:e9:9d:1d:e3:78:b4:71:5e:43:2b:c7:d6:e3:
7b:9f:04:d4:a8:44:3f:94:dc:da:6d:d7:e4:b0:1f:
09:36:ba:1f:5b:14:61:03:58:27:38:3a:99:15:71:
e8:1f:a0:8c:04:16:bc:b2:c6:69:8e:0f:06:3b:a6:
7e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:07:E9:11:58:E0:A1:12:26:58:C8:B7:A0:EC:CF:2C:96:0A:24:40
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:4e:d9:c3:e1:52:a6:2a:cb:0c:4e:a2:f2:48:1d:6e:9d:00:
c5:f0:44:5b:c4:bb:5f:23:e2:ef:53:74:9f:1e:b7:9c:a7:fc:
7f:02:f2:61:23:72:24:03:ad:b8:8a:83:42:a6:c7:c8:83:e2:
68:41:0a:bd:b6:92:86:94:77:84:79:f6:23:df:37:1a:bb:33:
95:2a:65:ac:39:8c:76:c1:38:d5:4b:e4:61:53:c1:2a:98:f8:
ba:79:71:0c:1f:20:9a:17:3a:1f:3b:fc:95:10:5c:36:a8:a1:
d0:56:18:a6:e8:08:cb:5b:96:55:24:6b:ea:33:fe:5f:73:fc:
27:50:6a:61:ac:df:93:be:0c:09:b6:09:2e:5e:0c:1a:4d:88:
83:1b:84:32:f6:47:18:b1:07:a8:25:57:70:36:ef:7c:ff:30:
a6:b6:da:2b:80:77:c8:72:68:8f:a8:84:9e:17:28:f9:0e:e2:
80:09:b2:df:cb:f3:bb:c2:a9:a5:4c:a9:b8:4e:86:6b:ed:1e:
0a:69:de:40:63:d6:b1:35:3d:81:c1:e0:7f:d6:e4:63:fa:7b:
6b:cb:14:57:9d:9d:41:d4:8b:d2:c6:da:59:a0:43:9e:9b:b9:
bb:f5:b5:6f:d8:39:c7:22:9c:7c:ea:b8:8d:74:eb:7d:ac:74:
69:33:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:10:52 2026 by rpki-client