
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
File: GRGmWD3HmkFVGxeutDFNspMRy-s.mft (raw, json)
Hash identifier: QKxm33GUpDCJoNwfU62mXBokf8GxP5Yuy9FQ+awe+xc=
Subject key identifier: 03:06:D1:61:06:67:7D:58:A7:BE:DE:9D:D4:23:FC:55:E0:AA:9D:18
Authority key identifier: 19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
Certificate issuer: /CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Certificate serial: 019D382E6798E976BAFD4C2FD9BF0AC169BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
Manifest number: 17A5
Signing time: Sun 29 Mar 2026 06:00:58 +0000
Manifest this update: Sun 29 Mar 2026 06:00:58 +0000
Manifest next update: Mon 30 Mar 2026 06:00:58 +0000
Files and hashes: 1: GRGmWD3HmkFVGxeutDFNspMRy-s.crl (hash: VObPuI8dFkjpjbrxB++KeN+92Fty+FxeaZLZIu/aEiE=)
2: mjoxYNEhG3VYLKtRDyxP0w8yVhc.roa (hash: H4OpUXUAmBNRCiaGjnMjhLUg7opBHRPBi0K/iMdDRh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:67:98:e9:76:ba:fd:4c:2f:d9:bf:0a:c1:69:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1911a6583dc79a41551b17aeb4314db29311cbeb
Validity
Not Before: Mar 29 06:00:58 2026 GMT
Not After : Mar 30 06:00:58 2026 GMT
Subject: CN=0306d16106677d58a7bede9dd423fc55e0aa9d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:78:f3:6b:20:92:2b:89:2d:70:11:75:2d:
5f:08:0a:3e:e5:57:be:90:50:13:ec:69:31:df:c6:
56:86:be:e7:ac:e0:41:89:e9:a4:31:3c:3a:24:39:
a5:bf:82:cd:9b:fd:fb:2c:13:44:21:bd:5f:4a:7d:
9d:bc:f5:52:9e:10:4b:ce:ea:89:ae:43:44:25:1b:
5a:f0:5d:6a:35:31:89:48:c7:9b:9e:77:a8:6c:74:
3b:f2:6e:2c:3d:3e:59:5e:a1:4f:b2:7e:57:3f:f8:
49:b3:60:b9:40:5c:2f:2f:9d:e1:49:3f:69:fb:e6:
ec:e5:4a:89:cd:61:db:b2:4e:8f:ee:c4:3c:b0:ec:
db:5a:16:78:4d:ca:68:2e:3e:57:1a:95:ba:da:a4:
49:af:5b:45:2d:e5:c2:17:db:9b:d0:0b:e7:d1:ad:
91:fa:0b:00:5f:1a:84:bf:32:08:8a:f4:c0:a8:59:
96:03:99:ba:08:2e:ac:aa:8f:d1:01:67:83:6d:a8:
6b:bd:6c:94:98:14:16:3d:e9:a1:65:7e:cc:13:c5:
a0:26:da:ee:5f:c9:f9:b9:58:2c:ed:1c:63:ff:a1:
0a:8e:90:84:db:c2:7a:a5:7f:1f:77:cf:5f:85:94:
25:be:a5:d0:24:b7:75:c1:ee:d9:fb:7c:70:50:ad:
dc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:06:D1:61:06:67:7D:58:A7:BE:DE:9D:D4:23:FC:55:E0:AA:9D:18
X509v3 Authority Key Identifier:
keyid:19:11:A6:58:3D:C7:9A:41:55:1B:17:AE:B4:31:4D:B2:93:11:CB:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRGmWD3HmkFVGxeutDFNspMRy-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/eb16eb-77f5-4003-b903-1c34afd9d50d/1/GRGmWD3HmkFVGxeutDFNspMRy-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:39:67:41:d6:bd:79:d1:b4:70:0e:51:46:0a:d6:7f:4b:6d:
e2:c8:59:49:a7:de:37:21:a2:73:7f:c6:47:39:ff:b9:43:0e:
20:2b:9b:67:8e:ed:66:ab:b1:14:4a:96:1f:ae:00:e9:dc:2a:
55:19:cc:be:a4:b9:b0:44:c3:d0:f5:10:d7:5e:5b:fd:6e:bd:
d1:8a:84:e5:e4:98:c8:50:17:fa:9c:cc:26:43:01:38:b6:fa:
b2:d8:e2:d0:96:cc:a3:8a:e6:d7:0d:cf:ac:47:4a:64:5b:a4:
99:b5:5e:ba:e9:e3:00:66:c4:6d:bd:70:24:b8:7c:9e:dd:a6:
e8:be:ae:3b:90:35:93:e8:7b:d3:55:e2:ca:c5:59:d8:81:c6:
cc:31:26:f4:91:92:19:e9:1b:07:e4:29:75:77:64:f3:f2:73:
d4:99:10:a8:a2:a3:fb:e5:80:4d:32:e0:ea:8b:06:01:27:dd:
a7:26:75:c2:2b:a3:ce:ca:8a:9c:f7:57:63:4f:48:a9:f7:51:
82:a0:e2:d4:bf:87:fa:c3:5a:68:b4:da:64:ef:4a:bf:14:e0:
23:e7:33:48:34:eb:2f:a3:23:9e:5d:44:32:35:bd:a7:7b:5d:
57:df:a0:b5:9a:e4:f3:51:f5:15:38:56:d8:31:64:2c:3d:e4:
40:d9:69:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:32 2026 by rpki-client