Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: qhzSdy9IztLRCxTRaLzveXeRDZ4oiHTIb8Jq2qWIAec=
Subject key identifier: 24:4B:66:71:C0:94:4A:02:5E:DF:E7:2D:BC:8D:46:AC:17:B0:B3:BA
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 019E31BC3BF22536B26856AD4C98C8FA283E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 14B7
Signing time: Sat 16 May 2026 17:01:20 +0000
Manifest this update: Sat 16 May 2026 17:01:20 +0000
Manifest next update: Sun 17 May 2026 17:01:20 +0000
Files and hashes: 1: RpMIwwKNDJ2StC4zRLgKJPlvR8w.roa (hash: cXPNnS64bUQTjJNvAeCad/jzk4TlUd0umXx2TLacFB0=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: E1ldmjgPzDfO4u/z/Lxk4DidDmVK3+SyEOjRlBO9iWk=)
3: kp-VMkih7qc6B23hHp-3gThKHNw.roa (hash: bxojK3FurSVV0NeQ9kkDlIbku+sPTPShkBdp5lGAEYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:bc:3b:f2:25:36:b2:68:56:ad:4c:98:c8:fa:28:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: May 16 17:01:20 2026 GMT
Not After : May 17 17:01:20 2026 GMT
Subject: CN=244b6671c0944a025edfe72dbc8d46ac17b0b3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9c:95:1c:50:69:ed:a2:0f:3d:87:7c:61:2b:
b1:01:94:80:f3:f9:a4:f0:0b:b3:2d:6d:ea:87:7d:
cd:31:4d:ad:3f:7f:26:c2:ac:70:aa:09:b1:94:ac:
5d:2a:04:6c:6f:59:bb:73:a8:65:78:03:cc:4f:3f:
07:64:f6:a6:12:e5:82:b8:cf:e8:f6:9d:c2:e7:1a:
8c:5e:65:ff:93:88:df:cf:b9:83:fd:2f:2f:61:59:
b1:2e:a6:45:56:86:bc:a9:5a:89:b1:84:36:e0:78:
3b:34:e9:01:ce:c8:5c:ec:43:e6:c8:6c:c1:26:3d:
3e:b1:4c:26:3c:77:d5:e0:af:ea:64:d8:73:eb:ce:
d8:6b:b1:66:2c:fe:41:7b:0a:32:3a:b9:4c:c9:40:
da:7d:34:6f:ff:e6:7e:e3:53:53:87:7c:c1:81:10:
30:86:e0:2b:06:12:ad:a2:05:60:03:82:21:4c:03:
39:e3:36:3e:7a:c6:58:03:d9:2e:43:65:3c:38:28:
19:44:cc:08:ba:d4:10:8f:43:05:1a:11:1e:0c:bb:
e2:43:d6:64:cd:ba:8c:e9:d5:ad:89:cd:1d:1a:86:
50:26:c1:5c:db:25:17:9c:62:b2:5f:e6:84:ff:5a:
61:68:13:fc:63:a2:58:65:e6:d2:6d:f8:8d:4a:8b:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4B:66:71:C0:94:4A:02:5E:DF:E7:2D:BC:8D:46:AC:17:B0:B3:BA
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ac:d8:ec:87:1e:bb:4e:96:df:e1:3c:70:23:41:aa:c7:d1:
3f:da:2f:97:5a:01:04:cd:1c:af:9d:e5:d9:15:9f:56:f0:7f:
88:1a:b0:47:f9:66:bb:ee:34:30:ba:7e:10:f2:b3:d5:73:7e:
ea:4e:43:d4:f7:f6:6e:10:cd:3d:5a:ac:5d:51:63:ed:19:33:
a9:b0:2c:2a:09:17:2a:f9:eb:18:ab:b5:0c:b0:96:4f:a8:4e:
45:72:dd:2a:3e:0a:0a:d2:12:27:02:eb:8c:47:91:75:92:10:
e8:53:90:03:e8:e3:7a:de:ea:e5:2b:63:f4:3f:cb:61:45:03:
eb:57:3d:76:4d:d0:c2:e3:df:79:c5:c7:31:2b:d9:4a:05:fb:
7a:7b:83:ac:6d:46:b5:01:5b:d6:f4:aa:e2:c6:78:ac:db:81:
a5:ac:4b:d1:5c:75:66:6d:1b:b1:ca:15:ae:68:97:11:17:d7:
87:96:8b:83:88:d2:8a:ac:39:55:f0:c7:0e:ea:fc:5e:53:9e:
59:15:09:7f:b8:79:cc:c3:05:06:31:44:5c:ef:cd:92:76:7b:
b7:e8:87:d8:25:1c:1e:96:9e:b7:8d:be:ea:47:2c:f2:7a:74:
1a:3e:7c:1a:97:b4:0e:6a:e4:b0:eb:56:1f:ab:55:d7:e0:df:
dc:0a:92:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:29:49 2026 by rpki-client