Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
File: T01-Grss2D6aLemgazkbOlJERBs.mft (raw, json)
Hash identifier: ENmJLVwk8zhaRDUmXOceWprrTxXdOPOIrECChfyW3cg=
Subject key identifier: 80:21:0A:46:C3:02:D0:AB:B8:F1:4B:9A:32:62:11:41:27:58:DF:47
Authority key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
Certificate issuer: /CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Certificate serial: 019D3866807924471B913BD05A2D7E7FAB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
Manifest number: 1520
Signing time: Sun 29 Mar 2026 07:02:14 +0000
Manifest this update: Sun 29 Mar 2026 07:02:14 +0000
Manifest next update: Mon 30 Mar 2026 07:02:14 +0000
Files and hashes: 1: T01-Grss2D6aLemgazkbOlJERBs.crl (hash: U1BawRMXvW7mH//+xV6s/unx/jdEZtViByk/LemZwYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:80:79:24:47:1b:91:3b:d0:5a:2d:7e:7f:ab:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Validity
Not Before: Mar 29 07:02:14 2026 GMT
Not After : Mar 30 07:02:14 2026 GMT
Subject: CN=80210a46c302d0abb8f14b9a326211412758df47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:11:19:6c:af:f2:c9:92:ea:b7:33:d6:43:
40:f1:a6:b2:49:09:8f:8f:71:f6:20:43:3f:b2:da:
f0:c4:9e:13:5f:80:25:64:18:c0:4a:fc:a5:2f:0c:
5c:96:51:51:5d:13:cb:ab:df:53:b2:a6:8c:df:7d:
fe:f9:db:8f:92:ec:c3:a8:0f:56:a4:5f:81:16:af:
73:5d:8d:61:10:bc:ce:30:25:c5:1c:25:c2:05:4e:
d2:6a:24:a9:41:67:12:af:63:34:c3:bb:de:ae:2a:
d0:01:3a:e3:a6:b8:a9:1c:05:c5:fa:82:98:44:ea:
ac:9b:a5:91:19:83:62:b3:80:22:78:20:fa:4f:b2:
03:b0:1f:e6:1a:4d:8b:71:2d:82:a3:c2:1b:13:8d:
1c:de:6f:15:48:14:7f:50:f6:d7:d4:77:e8:33:e4:
dd:b5:96:09:e9:91:31:74:0a:70:e5:51:12:9f:37:
8b:ac:3b:11:bf:ad:c3:ca:af:1c:fd:ed:b7:41:f1:
ad:9d:2b:03:40:72:be:b9:70:6a:3b:0c:6a:b3:ea:
c3:4e:47:56:f2:d0:83:66:91:33:57:e3:36:94:df:
2e:1a:9b:bb:8f:77:6c:d7:df:a2:ce:9a:87:34:55:
d2:32:b1:6a:c3:c9:ab:91:87:88:27:80:d0:80:11:
57:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:21:0A:46:C3:02:D0:AB:B8:F1:4B:9A:32:62:11:41:27:58:DF:47
X509v3 Authority Key Identifier:
keyid:4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:f1:b1:45:6c:f2:fa:13:4a:bc:1a:69:f9:4a:2b:f4:84:a3:
50:77:3e:1b:8b:28:a0:c5:4f:08:1a:cb:77:6f:20:59:cc:9c:
a1:f1:6d:12:ee:36:2a:59:6a:fc:48:c7:bd:cf:7a:ae:b8:3f:
ea:d7:6d:a4:90:58:79:ea:71:04:f9:10:d7:fb:25:4c:5d:ab:
9a:f5:d5:71:17:cd:58:45:e4:3c:93:2f:ca:5a:2b:86:aa:32:
48:10:0f:a2:69:b8:27:e3:69:87:03:45:8d:d1:87:e2:9c:b0:
65:cc:6c:f0:ae:14:14:60:fa:4d:fa:a6:fc:cb:87:54:86:47:
75:0f:e6:42:bb:00:06:66:62:46:9b:5a:04:bb:0f:2d:77:f3:
f2:3f:60:cb:35:e9:5e:37:26:45:5b:e0:93:eb:54:2c:88:b5:
04:b2:6a:bd:84:49:bb:6f:0a:07:e0:b4:13:a9:e4:c6:f7:a7:
1b:4a:23:69:3e:ff:e3:8c:0a:1d:b4:ec:b8:cd:ed:9f:6f:03:
6b:19:6b:90:e9:90:78:42:ec:d5:8f:18:f0:85:d5:73:38:7c:
c9:1c:66:5f:04:5e:23:39:37:19:99:3c:59:10:09:34:ab:da:
99:c0:ae:33:24:7a:87:09:60:d1:06:6f:e8:75:7a:5e:ce:a0:
cb:d4:c8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:02 2026 by rpki-client