Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
File: GryfszEqSr8d3ChRjnYI4Owydd8.mft (raw, json)
Hash identifier: ZF22H0eHrzhNQniqLY46l+XqYptoRPTq/adZOYTir4E=
Subject key identifier: 72:2B:6A:04:67:6B:32:C9:58:9F:AE:BE:D7:81:04:A9:6F:FA:C4:D4
Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Certificate serial: 019D27E0350FB6BF7B8F8C9E1FE8C628AE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
Manifest number: 0138
Signing time: Thu 26 Mar 2026 02:01:38 +0000
Manifest this update: Thu 26 Mar 2026 02:01:38 +0000
Manifest next update: Fri 27 Mar 2026 02:01:38 +0000
Files and hashes: 1: DJdi3T9GBdXyWlmkF-1AfJu00z4.roa (hash: 9uSdWnZMdUgF7nF1Y5Ayng87XmAG51T65tQ1ewgeEQc=)
2: GryfszEqSr8d3ChRjnYI4Owydd8.crl (hash: dwq/CBhty6LfnAw84v7EuQo77y/87xdvs5+HjENthR0=)
3: RA0zayGPGSwaJHtlDtsJ8Xbgj5c.roa (hash: dZRiXeLTPEt1Z5RpO/wZBxbAns2Cy2hBCslnEmu5jIw=)
4: Xvu0C67-BWy0g8WYONkS-2tc_BM.roa (hash: 5IIvu8y7oObXXHmvGLjhkK8E3RwHEJbfJJNw4p6yHig=)
5: schmDmE2CKJCpiAehrjpSNlTDGg.roa (hash: +x21cIiTbRvA+l5+kVYBAJIbR8+s45Qj0TzBMrcAZH4=)
6: ta7hQSc7ARZjjGzwCStEeYhJ0BE.roa (hash: Py8T1t5CIRrQnYUBu52tDBLLob8RSsHoARPvObfZdB0=)
7: vdxk280EZJdsjHh7wsXDY4EoHlo.roa (hash: +1LA/Ivx7z3Vxl1WaI94b4YLVsQkfux8YU6LuCoqZyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:35:0f:b6:bf:7b:8f:8c:9e:1f:e8:c6:28:ae:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Validity
Not Before: Mar 26 02:01:38 2026 GMT
Not After : Mar 27 02:01:38 2026 GMT
Subject: CN=722b6a04676b32c9589faebed78104a96ffac4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a4:26:34:3e:38:8f:f9:a5:76:1e:97:00:fe:
80:69:c2:30:ec:51:85:43:5b:7a:08:a7:38:4c:33:
1a:6e:1f:5a:3c:39:86:61:b6:c0:8b:12:7a:fe:60:
73:81:86:c4:b2:65:f0:d7:68:bc:bc:a1:b4:7d:94:
77:72:96:3f:5d:16:f7:96:05:b5:b3:bf:a7:72:bd:
cd:b0:76:96:d5:0e:2f:b1:c4:67:aa:a9:d1:15:11:
dc:d7:fd:63:d9:23:76:7c:46:7e:ad:39:89:b6:3c:
eb:21:a8:82:d0:ca:ee:a6:81:8c:7f:3d:6c:1d:a8:
a4:33:0a:2e:1e:93:0a:73:5a:3c:ce:02:ac:59:a9:
23:d5:1d:fd:14:5a:32:3a:09:a1:16:15:13:02:c3:
ca:1c:60:71:54:18:80:bf:95:a1:a5:51:92:87:88:
15:8e:6b:ac:17:2c:da:13:87:3f:bb:64:08:bd:61:
ba:c2:54:41:19:ee:89:23:e7:85:43:46:62:20:61:
3d:90:7c:40:37:e3:fa:e4:f3:3f:2b:d3:9a:6e:05:
10:39:d6:e4:d4:49:6e:6b:30:d5:6e:a4:99:ed:e0:
1d:aa:e2:c9:82:b9:77:a1:71:4a:57:5b:06:68:b3:
00:6f:18:72:c3:26:b2:40:cc:fd:35:ea:cb:aa:f7:
85:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2B:6A:04:67:6B:32:C9:58:9F:AE:BE:D7:81:04:A9:6F:FA:C4:D4
X509v3 Authority Key Identifier:
keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:aa:1d:5c:7f:ab:3e:8d:20:4f:7b:41:05:19:cc:43:9e:5a:
5c:e3:aa:46:d6:60:7e:bf:c3:7a:d2:9e:37:72:be:0a:ba:d7:
2c:18:9e:50:b5:e8:d3:4b:59:d4:fc:34:e9:13:51:6d:92:93:
df:78:1b:e4:55:43:02:05:bd:2c:88:f3:d5:7b:01:ed:7d:a2:
f6:66:f2:c5:06:64:c1:fb:ff:5f:c1:c9:38:1a:35:56:64:d6:
5a:dd:50:fe:bf:69:a1:ce:97:9d:36:38:c7:2d:4d:4c:a1:61:
a6:3e:c9:02:e2:55:1a:bc:33:ef:fb:08:51:ed:aa:77:d6:a4:
d2:15:24:0c:07:59:26:0a:fb:3a:3f:00:ca:f3:32:75:89:58:
95:9f:a0:31:99:5e:e2:dc:62:52:3a:58:1a:8f:15:e9:aa:a7:
59:3b:bc:66:d2:ca:3d:7b:f2:15:fe:ee:6b:0f:66:59:0a:c6:
4b:df:ce:14:8a:6d:19:3e:b0:f7:3f:fe:a2:0a:91:ff:02:e9:
12:c4:fa:78:5e:1b:50:0e:df:9b:85:e2:38:81:b6:1e:b8:ef:
87:48:d5:36:29:8f:b2:4c:bd:01:8e:cf:c6:7e:9d:a3:2d:4d:
19:4e:65:a2:39:67:c5:9b:20:5c:b3:c2:ec:55:10:c2:be:3a:
5d:39:6f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:58:06 2026 by rpki-client