Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
File: grLg0A3Xcank1gu_S-UhFOp32wM.mft (raw, json)
Hash identifier: CI4gvH0waQlhxvBblrzEJ3P73AroNzFkYUeWfc/F4qI=
Subject key identifier: 64:8B:90:1B:81:C7:63:74:5E:E8:7F:7A:FE:A9:86:94:AA:BA:23:68
Authority key identifier: 82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
Certificate issuer: /CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Certificate serial: 019D265EDE5D9E11C6D8847A858219B8FABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
Manifest number: 0E02
Signing time: Wed 25 Mar 2026 19:00:44 +0000
Manifest this update: Wed 25 Mar 2026 19:00:44 +0000
Manifest next update: Thu 26 Mar 2026 19:00:44 +0000
Files and hashes: 1: grLg0A3Xcank1gu_S-UhFOp32wM.crl (hash: 5Am+yetMFbD14LjXAiQwJ9mC0+oRCnTmoxybnGm0zQE=)
2: sdh8pmOJsGStF0am0yT5pkIHwtc.roa (hash: xa/Kb953bRWnupDskAs22J1Rh+G0Xh3NKxVztnMScFI=)
3: yzKXO4jXIcQhvYNB-AXjR_e7tXo.roa (hash: HbKWlAXeMlwQXI/oWRqyG/+YEkJ30n/PudG/ZFxPjv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:de:5d:9e:11:c6:d8:84:7a:85:82:19:b8:fa:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Validity
Not Before: Mar 25 19:00:44 2026 GMT
Not After : Mar 26 19:00:44 2026 GMT
Subject: CN=648b901b81c763745ee87f7afea98694aaba2368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:83:35:18:c4:0a:b1:66:c8:31:44:35:85:d3:
fb:48:46:36:53:18:8a:c7:db:f9:2e:f3:93:d3:32:
71:cd:39:21:44:c7:86:21:06:09:4a:66:cf:16:2b:
9f:aa:07:98:69:01:4d:dd:17:82:17:01:0c:5a:74:
2f:b1:43:98:ca:52:8a:25:fb:4d:8f:bd:03:ea:b0:
f7:eb:78:77:3a:96:d8:c4:29:c1:90:3a:62:4c:24:
2f:36:7e:a0:09:7f:a6:04:dc:1f:9c:08:d5:1f:94:
88:e7:ac:28:d5:56:13:a2:3d:fc:07:18:eb:38:85:
df:69:de:3b:9e:32:fe:99:00:8d:a8:83:80:00:14:
d1:de:81:da:a8:b4:d1:00:bd:ef:7f:76:1b:4e:94:
48:b6:f9:5d:9d:50:97:f9:6a:92:b9:c6:a4:06:00:
41:ed:4f:8d:de:eb:03:0a:83:0e:21:dc:17:fb:bc:
62:80:5c:40:fb:16:14:62:00:a7:bc:dc:54:b3:5f:
af:cf:1d:3a:06:07:1d:57:26:bc:44:bd:23:f1:28:
1e:95:96:9f:5a:0c:f9:7c:66:84:00:95:05:e6:db:
4c:a3:02:3d:be:6b:80:db:84:79:8f:d5:9b:e6:d0:
33:a3:34:72:f0:fc:49:7e:15:b6:38:4d:d7:5d:21:
ce:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8B:90:1B:81:C7:63:74:5E:E8:7F:7A:FE:A9:86:94:AA:BA:23:68
X509v3 Authority Key Identifier:
keyid:82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:41:a7:3d:0f:1a:df:de:98:f4:00:f5:a2:dc:9b:35:21:1b:
69:fe:59:a7:06:f6:70:1d:2a:ec:6e:a2:9f:d6:42:c3:d1:8c:
ab:be:2c:38:ed:2e:3a:1a:2a:cb:e9:7f:1a:51:02:c4:95:9e:
46:37:22:66:4f:e3:0e:c7:02:8f:5a:aa:52:04:69:3a:a4:f8:
86:32:33:72:7d:9a:6f:c0:39:9e:e1:1d:2a:c4:a3:f0:4d:26:
a6:21:87:49:0b:17:f2:67:32:d9:89:53:78:bd:d4:39:74:de:
c4:cb:65:d6:c7:56:57:d6:fb:3c:68:fe:a8:32:af:d0:77:75:
ff:56:3c:0a:18:5f:90:ba:d7:b1:e0:ff:9a:cd:02:57:54:55:
ec:4c:92:3a:0c:e4:f4:97:2d:72:d4:13:de:4c:ae:40:e4:61:
c9:ab:a2:bd:81:a8:1f:26:5b:43:86:ff:20:bd:e7:b0:b3:e3:
1f:4c:31:aa:43:28:24:10:24:c5:fb:d9:dc:95:7b:e7:89:35:
59:d0:2a:95:b2:8b:96:1e:e6:76:72:0d:5a:a1:68:3c:d5:5b:
08:86:ca:ff:e7:83:dd:63:94:03:79:26:96:be:0f:8f:88:6e:
7b:b2:dc:97:e5:a2:43:7d:15:d9:aa:15:53:e7:71:51:16:35:
82:46:c0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:00:11 2026 by rpki-client