Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: QYWFGPPbfzcu9V/s5611atf3IZKKWySazmhu6X/hAp0=
Subject key identifier: 6B:92:F4:76:15:68:F7:42:13:63:25:D4:11:45:DC:9C:78:D2:7D:AC
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 019D389BE0EDFF1D4D1D2C190695F308C7B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 1436
Signing time: Sun 29 Mar 2026 08:00:32 +0000
Manifest this update: Sun 29 Mar 2026 08:00:32 +0000
Manifest next update: Mon 30 Mar 2026 08:00:32 +0000
Files and hashes: 1: RpMIwwKNDJ2StC4zRLgKJPlvR8w.roa (hash: cXPNnS64bUQTjJNvAeCad/jzk4TlUd0umXx2TLacFB0=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: vn/fd1C9DF8JZ6fJv/JGWLYXhvNL6RGurjRhQIXP/xg=)
3: kp-VMkih7qc6B23hHp-3gThKHNw.roa (hash: bxojK3FurSVV0NeQ9kkDlIbku+sPTPShkBdp5lGAEYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:e0:ed:ff:1d:4d:1d:2c:19:06:95:f3:08:c7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Mar 29 08:00:32 2026 GMT
Not After : Mar 30 08:00:32 2026 GMT
Subject: CN=6b92f4761568f742136325d41145dc9c78d27dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:00:b3:b3:43:0d:f9:8b:b8:46:50:84:0a:c9:
31:19:1e:e0:02:0d:81:6d:8d:05:d2:db:15:98:5f:
65:ab:47:44:0b:7b:c0:03:cd:a1:18:79:9a:11:30:
cd:2d:3a:c6:50:2d:d8:1c:df:a3:8e:82:5f:77:8c:
b4:25:e9:1d:58:be:aa:08:f0:ef:2f:55:ec:47:a2:
96:54:4e:6a:16:fe:50:83:88:a0:dc:92:67:e4:0f:
2c:86:4a:9f:63:5d:c0:9a:15:e1:91:dc:5d:2f:dc:
56:a1:7f:d4:fd:71:57:bd:fc:c1:29:6f:a8:e2:56:
e6:4a:c9:bc:42:be:d9:79:d5:58:2c:d2:d2:0d:8e:
91:39:7e:ea:f8:f7:b6:c7:3d:59:58:9f:d7:2b:b7:
af:4b:2a:72:8e:a2:73:cc:9a:16:b4:1c:52:81:9a:
dc:4b:ba:c0:97:b7:98:0e:cd:ee:3f:1c:66:e3:29:
f7:d2:d8:ef:23:18:71:30:99:ff:72:b1:26:93:f9:
98:86:5e:21:f9:51:81:2e:66:ae:ba:fa:f2:79:fc:
67:c8:28:0d:3a:a6:ff:ab:30:b5:a8:9a:59:c0:c0:
55:1b:a8:75:46:db:f7:96:31:6b:05:83:e7:2a:41:
ac:55:71:b2:3d:19:5c:7d:5d:6d:09:32:c9:ef:3d:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:92:F4:76:15:68:F7:42:13:63:25:D4:11:45:DC:9C:78:D2:7D:AC
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:76:04:df:96:69:81:8c:30:b2:10:ac:1e:56:d0:0d:3d:ce:
ae:02:cf:12:5d:ae:81:b8:ae:97:18:07:ff:64:2f:04:b1:53:
e8:28:12:77:27:e5:7f:19:2d:34:0a:30:b1:61:46:24:08:1a:
d0:03:4b:92:12:69:d4:f6:f8:37:05:5e:15:b4:32:55:d1:4d:
f1:cc:02:63:74:1e:cc:e7:25:54:bb:2b:80:4a:69:90:3c:56:
2d:6c:8a:4f:f4:ce:6d:7d:1b:9f:21:6c:f9:24:f4:59:55:0f:
23:3f:6f:20:b7:ae:4d:0e:a2:1a:9a:5f:79:e5:b8:53:8d:f1:
95:70:5f:b1:c5:bd:ca:40:dc:b9:ba:2c:5b:ea:07:ea:5e:10:
d4:0e:b4:02:52:75:43:0f:8a:eb:bc:1e:72:16:3a:11:99:5f:
c2:6d:c3:50:9d:e3:23:fc:e4:49:67:4d:e1:b9:28:cb:5d:e1:
f2:58:5c:ad:bf:31:7b:10:36:3d:ff:0a:78:48:a8:a2:27:e5:
60:47:94:43:e9:c9:94:39:77:e6:de:ab:61:8e:05:a9:3c:30:
3a:98:75:d9:b7:23:22:5b:96:8f:55:bd:55:35:ba:8b:78:3c:
8d:30:08:73:f3:7e:a6:13:f6:7a:37:72:e4:6a:92:b8:d8:e5:
c5:d7:62:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:19 2026 by rpki-client