Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: sjAnIQlGk5cAMxP0egUPJ2W1NDEQWQAVIxbxKLLCT8o=
Subject key identifier: 60:69:96:89:43:08:D7:4F:5D:D2:90:18:CE:91:14:A7:24:4B:B9:85
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 01A1570AE184703CBB113CD04E22FEE05603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 1658
Signing time: Tue 20 Oct 2026 02:01:33 +0000
Manifest this update: Tue 20 Oct 2026 02:01:33 +0000
Manifest next update: Wed 21 Oct 2026 02:01:33 +0000
Files and hashes: 1: RpMIwwKNDJ2StC4zRLgKJPlvR8w.roa (hash: cXPNnS64bUQTjJNvAeCad/jzk4TlUd0umXx2TLacFB0=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: Kp2ME97MM4dPx4t53IqLe1ybJUKmOyONBS0/Qz7K1t4=)
3: kp-VMkih7qc6B23hHp-3gThKHNw.roa (hash: bxojK3FurSVV0NeQ9kkDlIbku+sPTPShkBdp5lGAEYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:0a:e1:84:70:3c:bb:11:3c:d0:4e:22:fe:e0:56:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Oct 20 02:01:33 2026 GMT
Not After : Oct 21 02:01:33 2026 GMT
Subject: CN=606996894308d74f5dd29018ce9114a7244bb985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:8c:91:b2:62:78:34:31:29:55:a9:28:47:
ee:88:0c:e6:c9:09:8c:6d:41:a0:cc:9f:14:48:d3:
c6:9a:e6:f2:2a:47:20:23:af:c2:49:74:eb:13:43:
1c:9a:ae:e4:e6:7a:b1:e5:33:a6:21:80:3b:1f:56:
2d:fd:bb:d9:55:62:0f:b9:50:43:eb:19:13:2a:10:
cd:d5:c8:92:c5:04:a1:98:f5:31:29:bb:58:3a:9b:
46:67:c3:43:3b:b2:15:34:c8:9a:4f:b7:9b:22:1e:
af:29:76:b0:3b:43:44:39:1a:6f:25:d3:95:a3:7d:
42:c2:d7:74:55:45:36:06:ee:62:24:07:1b:22:4d:
05:d4:8c:f6:5d:c5:2c:c8:65:51:19:51:b1:a0:0a:
2d:c8:ec:74:4f:9d:84:00:bd:88:c9:25:65:ab:72:
90:d3:37:22:36:b4:ab:45:2e:56:12:99:c9:de:b7:
14:16:16:14:fa:2b:76:98:be:ec:5f:0f:f5:69:a3:
96:82:a5:4f:96:c4:64:d8:17:02:a6:11:96:d2:40:
f8:86:1f:2f:12:a3:55:7a:8e:12:99:16:ce:73:4c:
02:cc:1e:85:d4:bd:88:8f:6d:c3:fd:2a:93:47:a4:
8a:3f:35:c5:2b:2e:bc:e3:e6:0f:86:a9:3f:c6:c6:
64:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:69:96:89:43:08:D7:4F:5D:D2:90:18:CE:91:14:A7:24:4B:B9:85
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:02:5f:0f:6a:83:a3:2f:cd:a8:c8:94:52:ad:d4:46:1c:92:
57:34:aa:f3:75:94:50:9e:8f:33:b2:be:74:86:03:82:df:ff:
14:c3:17:37:a4:61:e2:86:b6:5f:e1:c9:2d:0f:95:70:42:55:
83:b0:e5:9f:19:e7:de:1c:fc:3d:d7:c4:d8:7a:07:d7:56:64:
39:ce:31:3e:a8:f9:31:cb:f6:ae:d5:c9:f0:22:be:b8:fa:87:
6f:ce:5f:3a:95:8c:3d:e7:39:18:84:d3:a1:57:a7:b4:37:4f:
d2:7a:4c:5d:47:28:63:dc:28:e2:4f:1a:00:cf:fc:a3:9a:3b:
d1:9d:64:44:da:68:41:cf:11:c9:f2:58:63:8c:89:48:e1:ab:
b3:7d:3b:72:d8:14:84:e0:49:fe:bc:91:ad:4d:6b:40:e7:ee:
0c:1b:7d:86:48:04:5b:4a:07:6c:48:25:ec:5a:9d:bc:3d:dd:
56:a3:15:b8:6d:b5:39:5f:91:44:86:20:1c:b2:cc:d5:71:49:
eb:5b:e4:c7:f9:2c:e7:38:7b:58:6b:e4:f6:76:5d:61:cb:c4:
b4:d1:61:cf:6f:b4:45:72:82:87:6b:49:c4:24:8a:4d:e1:b4:
b5:fc:f5:c8:9a:77:ab:5a:04:21:af:96:e7:be:1f:68:2c:3e:
14:df:75:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:31:16 2026 by rpki-client