Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
File: griIeR5H8Xu-ofUbnJdpd2JPBBw.mft (raw, json)
Hash identifier: vq4VMnd9uoywGUYd9VCHO9E3tyYYn4nT9Ee47k7JR9A=
Subject key identifier: 8E:02:CF:BF:64:BE:00:D7:64:9D:30:9A:9D:26:F8:6F:96:6B:1A:DE
Authority key identifier: 82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
Certificate issuer: /CN=82b888791e47f17bbea1f51b9c976977624f041c
Certificate serial: 019D38D2C1BF58A3367C620C13BE107AB13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
Manifest number: 080C
Signing time: Sun 29 Mar 2026 09:00:29 +0000
Manifest this update: Sun 29 Mar 2026 09:00:29 +0000
Manifest next update: Mon 30 Mar 2026 09:00:29 +0000
Files and hashes: 1: griIeR5H8Xu-ofUbnJdpd2JPBBw.crl (hash: U+3UXfOam/1pIR4B8JdLWELKG0STJujhI7YZePk15lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:c1:bf:58:a3:36:7c:62:0c:13:be:10:7a:b1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b888791e47f17bbea1f51b9c976977624f041c
Validity
Not Before: Mar 29 09:00:29 2026 GMT
Not After : Mar 30 09:00:29 2026 GMT
Subject: CN=8e02cfbf64be00d7649d309a9d26f86f966b1ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b8:6e:ce:66:64:26:7c:20:03:cc:b9:04:08:
06:36:ea:75:dc:2a:77:02:c0:6c:e9:37:70:c0:1a:
da:67:28:c7:0f:05:66:bc:9d:90:4a:b2:28:9b:5b:
db:20:7d:2c:5f:2f:f0:20:c6:ec:4d:a9:e0:06:7f:
bf:9d:16:32:9f:24:a5:6f:87:07:2d:de:f3:44:e0:
7e:78:41:d0:75:95:6d:b2:81:c0:92:e7:5e:99:2e:
dd:68:3b:ba:22:d2:16:0a:38:f1:93:40:81:83:63:
3f:37:06:c0:ef:c2:9c:f9:28:bc:74:b4:bb:c0:30:
15:ad:7c:ef:ea:6a:cc:10:d9:d9:70:fa:c5:50:3f:
45:aa:99:3f:d9:a8:f2:36:68:7a:cf:ea:7c:25:f2:
8a:2a:22:2e:d9:90:a4:dd:94:5d:74:75:8a:ad:59:
ec:33:0e:b5:67:eb:c5:0a:52:39:65:f1:16:a3:ad:
8f:c8:55:80:45:cf:aa:23:47:f6:6d:ac:17:00:bb:
bb:f7:3c:28:0c:3d:f7:4e:f3:44:f2:4f:74:d9:ba:
d3:b2:a8:4c:bb:1b:23:9b:06:00:49:4d:dc:cd:62:
e1:9a:ce:60:b2:ba:e8:a1:36:3a:2b:3f:37:9d:e6:
a0:7d:b2:f0:67:a2:b6:77:bc:b3:d2:89:7e:84:8d:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:02:CF:BF:64:BE:00:D7:64:9D:30:9A:9D:26:F8:6F:96:6B:1A:DE
X509v3 Authority Key Identifier:
keyid:82:B8:88:79:1E:47:F1:7B:BE:A1:F5:1B:9C:97:69:77:62:4F:04:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/griIeR5H8Xu-ofUbnJdpd2JPBBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/e4ec14-d0e8-4348-ae07-4e91d7a7d9ce/1/griIeR5H8Xu-ofUbnJdpd2JPBBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:1f:70:2f:48:ce:85:94:77:aa:e6:79:dc:f3:cf:d3:1c:03:
3f:52:de:ba:80:4b:a9:82:1c:95:16:74:53:1c:fe:33:da:03:
e3:d9:3d:2b:2a:50:31:5b:3c:e0:d1:cd:ab:35:23:b0:7b:d4:
f1:f4:f3:6b:36:68:db:75:10:50:37:79:01:80:4e:69:87:8b:
ce:cc:43:d3:70:93:f3:2f:82:60:80:e8:f7:a0:80:0d:b1:6d:
77:bd:b4:92:f8:4a:c7:05:cd:e9:dd:76:2a:97:48:3a:a7:99:
a6:98:4e:11:45:e4:43:21:41:20:c0:77:57:d9:7b:18:3c:f9:
17:d4:7f:5e:20:fe:6c:5f:37:6d:79:cf:99:19:84:be:54:35:
bf:40:1d:e0:5a:59:39:c3:c8:0b:21:df:c2:3f:f5:12:3b:cb:
40:8c:ef:d8:f2:87:92:69:05:f2:3e:c7:53:d0:07:1d:bc:b0:
60:8c:28:bc:96:ce:c9:de:28:34:2a:2c:01:f3:50:e0:07:0c:
65:f8:4e:7e:57:ba:06:c0:bf:08:8d:f2:63:ec:cd:76:b0:6f:
77:5f:e2:bf:f5:0d:e6:7b:cf:4b:c3:c7:f5:9e:56:57:3f:9d:
67:2d:11:2d:88:17:55:83:a2:de:1d:33:21:de:16:6a:1e:7f:
59:73:c7:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040sG/WKM2fGIME74QerE/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyYjg4ODc5MWU0N2YxN2JiZWExZjUxYjljOTc2OTc3NjI0
ZjA0MWMwHhcNMjYwMzI5MDkwMDI5WhcNMjYwMzMwMDkwMDI5WjAzMTEwLwYDVQQD
Eyg4ZTAyY2ZiZjY0YmUwMGQ3NjQ5ZDMwOWE5ZDI2Zjg2Zjk2NmIxYWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybhuzmZkJnwgA8y5BAgGNup13Cp3
AsBs6TdwwBraZyjHDwVmvJ2QSrIom1vbIH0sXy/wIMbsTangBn+/nRYynySlb4cH
Ld7zROB+eEHQdZVtsoHAkudemS7daDu6ItIWCjjxk0CBg2M/NwbA78Kc+Si8dLS7
wDAVrXzv6mrMENnZcPrFUD9Fqpk/2ajyNmh6z+p8JfKKKiIu2ZCk3ZRddHWKrVns
Mw61Z+vFClI5ZfEWo62PyFWARc+qI0f2bawXALu79zwoDD33TvNE8k902brTsqhM
uxsjmwYASU3czWLhms5gsrrooTY6Kz83neagfbLwZ6K2d7yz0ol+hI2TiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4Cz79kvgDXZJ0wmp0m+G+WaxreMB8GA1UdIwQY
MBaAFIK4iHkeR/F7vqH1G5yXaXdiTwQcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3JpSWVSNUg4WHUtb2ZVYm5KZHBkMkpQQkJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9lNGVjMTQtZDBlOC00MzQ4LWFlMDct
NGU5MWQ3YTdkOWNlLzEvZ3JpSWVSNUg4WHUtb2ZVYm5KZHBkMkpQQkJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9lNGVjMTQtZDBlOC00MzQ4LWFlMDctNGU5MWQ3YTdkOWNl
LzEvZ3JpSWVSNUg4WHUtb2ZVYm5KZHBkMkpQQkJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyB9wL0jO
hZR3quZ53PPP0xwDP1LeuoBLqYIclRZ0Uxz+M9oD49k9KypQMVs84NHNqzUjsHvU
8fTzazZo23UQUDd5AYBOaYeLzsxD03CT8y+CYIDo96CADbFtd720kvhKxwXN6d12
KpdIOqeZpphOEUXkQyFBIMB3V9l7GDz5F9R/XiD+bF83bXnPmRmEvlQ1v0Ad4FpZ
OcPICyHfwj/1EjvLQIzv2PKHkmkF8j7HU9AHHbywYIwovJbOyd4oNCosAfNQ4AcM
ZfhOfle6BsC/CI3yY+zNdrBvd1/iv/UN5nvPS8PH9Z5WVz+dZy0RLYgXVYOi3h0z
Id4Wah5/WXPHWg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:57:49 2026 by rpki-client