Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: eFRzd7/9epHa+Wsz2bvTPSuOG2IaWEA8g+3AkXR6p3Q=
Subject key identifier: 68:0A:27:45:F0:34:A0:18:46:78:B6:D6:88:27:2A:9C:E1:7B:1C:4E
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 01A14D62A02C35306A202274E61B1B6A8300
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 1653
Signing time: Sun 18 Oct 2026 05:01:11 +0000
Manifest this update: Sun 18 Oct 2026 05:01:11 +0000
Manifest next update: Mon 19 Oct 2026 05:01:11 +0000
Files and hashes: 1: RpMIwwKNDJ2StC4zRLgKJPlvR8w.roa (hash: cXPNnS64bUQTjJNvAeCad/jzk4TlUd0umXx2TLacFB0=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: aNAmrbyN/HwnVlEDyrx+T2MiVKOS+j4yXh5L1JT5Mos=)
3: kp-VMkih7qc6B23hHp-3gThKHNw.roa (hash: bxojK3FurSVV0NeQ9kkDlIbku+sPTPShkBdp5lGAEYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:62:a0:2c:35:30:6a:20:22:74:e6:1b:1b:6a:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Oct 18 05:01:11 2026 GMT
Not After : Oct 19 05:01:11 2026 GMT
Subject: CN=680a2745f034a0184678b6d688272a9ce17b1c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fc:f5:86:77:26:7e:4e:b3:ae:c8:b8:97:6e:
87:f3:f8:79:45:7f:af:5c:94:56:d5:fc:57:8a:24:
6b:5f:30:30:0d:18:ad:3b:9b:c6:96:f8:c0:40:99:
a7:fe:41:ca:0b:8d:b2:4a:00:2c:62:1b:7a:ff:be:
dc:dc:30:0f:94:88:91:89:d6:3c:3f:af:c4:e3:c5:
33:d7:97:4a:9b:e1:e6:0d:5f:9a:26:ea:40:63:25:
fa:72:32:0e:bb:3e:80:b7:c1:28:07:9f:c1:e2:80:
e8:f1:b6:d7:2d:fd:ce:5a:95:02:1b:a5:f2:bb:d2:
46:c2:94:1c:3f:eb:13:19:0f:3b:b2:da:e2:2b:a7:
8d:0e:ec:ef:fe:9e:e5:f3:2e:75:6e:2e:13:e6:d5:
7e:15:cb:29:ac:be:34:18:7c:c1:fc:4a:60:1c:46:
aa:f0:05:ab:95:b1:9a:2c:1c:01:dc:0e:67:1f:bd:
fc:66:e3:3b:03:b4:3e:a3:1a:93:40:26:1b:5d:4b:
5f:9e:70:2d:fe:22:ea:95:5b:cc:d5:fd:ee:25:cc:
55:81:06:b4:49:d8:c1:3e:da:14:70:69:d7:20:94:
79:a6:3b:aa:c6:15:b4:52:81:9d:3a:46:0d:bc:f8:
e0:15:70:cf:cc:5d:3c:69:3d:3a:4e:7b:bc:87:5c:
1c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0A:27:45:F0:34:A0:18:46:78:B6:D6:88:27:2A:9C:E1:7B:1C:4E
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:12:3d:30:fc:d1:69:18:35:d8:ff:61:a7:eb:3a:c1:49:9b:
63:18:bf:a0:2a:34:3d:4b:d1:8e:2d:9a:24:f0:2d:fc:00:f6:
90:56:49:c9:03:d5:2e:73:c2:e7:22:38:1e:2f:18:02:8b:c6:
d0:d3:56:1a:cc:28:39:7c:4e:fb:12:24:f5:30:40:63:3d:3a:
5f:a7:07:4e:d6:56:9e:c5:3c:ee:e7:b7:1e:d7:99:0c:e2:2b:
55:2c:a2:1f:f0:77:a1:65:ad:72:d0:14:3c:3f:f5:71:e8:d3:
89:48:6e:8b:a4:83:7f:67:39:43:72:a9:81:af:ff:00:73:b1:
65:6a:80:07:1d:82:e2:36:f5:bb:62:f6:41:39:96:9c:9e:e7:
fb:4a:a6:30:09:8e:7d:de:5a:10:bb:3a:29:5c:08:3a:ac:94:
57:d1:f3:57:75:ab:34:75:fa:c6:95:ff:1a:24:34:e6:24:1b:
95:df:b8:85:2e:72:68:d1:c7:ab:ce:10:64:53:7f:fb:29:e1:
45:bf:40:94:d9:db:ea:41:f5:b4:ef:37:8d:99:c1:d2:a4:26:
c9:6e:6f:5e:36:46:5d:23:66:72:77:08:7c:12:55:92:2c:58:
99:25:98:78:86:05:b3:93:67:80:5d:9d:96:1a:62:26:b5:ef:
b8:80:90:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:11:19 2026 by rpki-client