Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
File: grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft (raw, json)
Hash identifier: 8UYcw1b4XqaDTOfD3zz3dXfVvmTN+tGsylGemP073Vs=
Subject key identifier: 52:1D:A6:F5:89:DC:C8:29:3C:03:A7:6F:FA:C9:C4:49:1F:AC:D1:97
Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Certificate serial: 019D3940CDAFAA04674166FD8003C4F3462A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
Manifest number: 08D3
Signing time: Sun 29 Mar 2026 11:00:41 +0000
Manifest this update: Sun 29 Mar 2026 11:00:41 +0000
Manifest next update: Mon 30 Mar 2026 11:00:41 +0000
Files and hashes: 1: RqkjHn1__XEjnWyHvV0T7PxyWK0.roa (hash: Ssqz1V4GBD9MzNBS/3Ky31egjDUQPgdZXUNSxQFlN6Y=)
2: grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl (hash: XTCHr8kyi3wwmA1apyDWoc6wzmxu8o/c/5YPpvPIy0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:cd:af:aa:04:67:41:66:fd:80:03:c4:f3:46:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Validity
Not Before: Mar 29 11:00:41 2026 GMT
Not After : Mar 30 11:00:41 2026 GMT
Subject: CN=521da6f589dcc8293c03a76ffac9c4491facd197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:c4:ff:10:53:82:50:db:21:8a:3f:77:40:
3d:dc:a4:e2:ed:29:d6:a7:67:0a:72:69:9d:31:b2:
7c:dc:e4:58:4b:6c:a8:c1:16:f5:50:0e:8a:5f:3a:
10:9f:62:78:66:8e:ad:04:37:35:5c:db:d3:94:74:
88:12:32:b5:76:54:9b:30:d9:7c:35:11:63:a7:78:
de:8c:37:ce:b8:e1:a3:99:40:3b:73:ef:a3:8d:f0:
c8:c1:3a:d7:fe:55:59:a0:1b:36:e0:3d:09:da:ae:
f3:7b:72:dd:d0:1d:19:6f:72:8d:22:96:ee:fa:67:
85:85:db:09:26:09:4c:c9:aa:0b:d7:05:e8:cf:1f:
68:36:e3:77:1a:ee:29:f1:11:53:98:62:de:0c:a7:
57:8d:06:aa:df:22:c6:63:ff:2a:6f:86:2f:08:7c:
21:14:53:3a:a5:4a:15:e4:86:b3:8a:48:c5:a0:94:
48:97:5d:a9:4b:5b:97:e8:f2:68:42:45:13:2f:3a:
69:c0:54:38:48:06:3b:09:3b:2f:65:6a:38:0e:91:
13:39:17:c2:5a:70:21:f7:e0:d0:e8:86:e6:1c:3d:
f4:d6:cc:7d:b1:b1:1a:84:22:33:8d:e5:f2:e4:65:
44:d2:99:ee:b2:b8:56:b2:09:86:8d:8e:b5:75:16:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:1D:A6:F5:89:DC:C8:29:3C:03:A7:6F:FA:C9:C4:49:1F:AC:D1:97
X509v3 Authority Key Identifier:
keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:26:c7:2f:0b:9e:fe:a1:02:e3:39:cb:9a:54:35:5b:4b:43:
ec:f3:aa:d5:28:4b:b4:03:64:ee:4c:84:f6:df:1c:d8:03:51:
50:af:93:b1:f6:df:cc:d1:91:e1:b0:fd:17:12:48:1c:f6:01:
0a:e3:51:82:50:e6:11:8c:5a:a8:c4:fb:1a:ed:6d:1c:04:68:
83:ab:13:76:f2:6c:8c:58:2b:44:05:1b:73:f7:27:b1:c3:8e:
12:6a:14:fe:11:7e:a2:2e:d1:78:3e:56:7e:9b:d3:a8:73:64:
cd:0e:05:27:75:74:e2:5d:a9:d8:45:7d:b3:22:45:b9:91:f5:
bf:59:ba:b6:04:ce:60:20:e4:ce:44:e1:2c:b3:fb:78:d1:ab:
21:17:4d:e4:29:5a:43:38:3a:df:d4:c9:7e:88:dd:5d:e9:fe:
76:f3:83:be:96:24:bf:84:e1:b3:cd:08:eb:3d:f0:8b:05:56:
6b:9f:2d:c4:b8:39:e0:11:a9:3b:f5:ef:c8:b2:d6:12:89:b9:
86:88:fc:e1:cc:58:4e:59:8e:fa:3d:32:4b:71:cc:9e:e9:6c:
12:ce:a0:9d:38:0a:1d:76:59:be:fd:c7:af:70:2b:9a:00:55:
a6:60:e3:40:dc:31:48:7b:7d:4a:b3:4a:77:6b:56:4d:54:b8:
4e:86:da:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:45:56 2026 by rpki-client