Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier: TLIpHQ2kiz3jj1IjAycmOgGqJeXg0d23Dga4QtBgDGE=
Subject key identifier: 52:C3:49:16:B9:F8:8D:32:31:2E:C0:42:54:D8:81:3E:29:BC:5E:B8
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 019D38D3C64CA3A1BCD387D0EE24DD8FDBBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number: 1897
Signing time: Sun 29 Mar 2026 09:01:36 +0000
Manifest this update: Sun 29 Mar 2026 09:01:36 +0000
Manifest next update: Mon 30 Mar 2026 09:01:36 +0000
Files and hashes: 1: FjlUOZvW96ADTmmnM6L72d8iARo.roa (hash: kIe35Th4NAZk6eCGw7Pep7yHHgIezVmLRC6I4uCSvTI=)
2: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: YNCe5DJOvh3C1KueT3ZHHa4/6JQnPJM2u1aRu5mIZiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c6:4c:a3:a1:bc:d3:87:d0:ee:24:dd:8f:db:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Mar 29 09:01:36 2026 GMT
Not After : Mar 30 09:01:36 2026 GMT
Subject: CN=52c34916b9f88d32312ec04254d8813e29bc5eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:76:fc:5b:01:f6:3a:51:d9:6b:de:e0:3d:10:
b8:80:93:9a:14:71:99:87:84:1c:9c:e0:f8:12:53:
94:31:03:a6:ee:f5:db:01:11:8b:89:6b:6c:4d:4c:
38:b1:db:5e:63:86:07:4b:03:ae:11:62:79:3f:26:
44:45:72:1b:e3:21:d2:3e:66:bd:ed:97:60:ed:4b:
22:f5:ac:18:52:d9:f8:86:52:44:e9:43:60:92:62:
18:a2:fb:8f:5a:b6:36:71:04:7c:90:f7:b2:ad:77:
3d:79:0f:ce:82:0f:26:e0:27:e8:d9:9f:ca:1b:7d:
6b:59:8b:d1:24:a0:0f:db:2b:bd:3f:e8:ea:de:d2:
43:91:3c:a8:f7:d5:df:6d:16:49:46:c3:03:50:49:
67:c3:56:36:1d:ad:be:0b:c1:13:55:32:65:f9:f4:
28:3e:a3:b8:00:b4:36:49:10:7f:1f:38:c3:bd:d4:
b2:a1:e3:8a:80:8b:cd:73:a5:7b:a3:5a:2f:04:72:
6d:85:70:d9:00:aa:f5:6c:b0:24:af:73:38:b7:ba:
32:14:a9:42:c3:13:fe:cf:2c:ec:f8:d4:1f:4e:26:
95:8f:c0:49:81:6c:e5:15:5c:54:0e:ec:ca:85:11:
e1:d7:79:fd:0e:2a:2b:90:44:ed:0d:fc:d7:17:1c:
c3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C3:49:16:B9:F8:8D:32:31:2E:C0:42:54:D8:81:3E:29:BC:5E:B8
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e2:e4:25:d6:6b:21:5a:41:ad:53:97:c6:fb:8f:38:74:5c:
6c:e9:0b:2c:ea:78:62:06:82:93:04:c6:b5:9a:9c:d0:21:5d:
03:71:70:68:1b:da:e1:01:b9:1e:84:aa:16:79:97:d5:0d:87:
0f:44:d6:07:e2:2c:08:02:4b:d7:3e:bd:7a:b5:76:94:40:2c:
f8:2e:fe:4a:36:93:8a:f6:9b:6e:ed:11:7e:3f:d5:b8:9f:92:
40:df:24:79:71:0e:bb:73:c5:38:e9:b6:58:e7:60:b7:4b:2d:
56:ed:19:80:dc:05:e4:f1:4d:41:32:40:1a:56:d3:00:74:8b:
fc:9f:b6:00:28:eb:f2:65:df:43:25:f1:ae:8a:11:23:56:d5:
ff:b9:8a:c5:f4:52:f9:c8:5d:d6:28:f4:ed:ae:bb:f9:09:da:
9d:bb:c1:3c:db:d8:51:d7:d0:87:40:57:3d:5b:be:3e:29:24:
1d:f0:31:ce:36:ad:f0:b5:57:6d:84:f7:06:8a:7a:a9:fa:de:
78:ec:f6:40:fe:b0:6f:9e:0a:41:7c:2c:08:9f:c3:89:09:08:
b7:db:e4:92:36:58:71:bd:b2:a5:d2:2a:cb:26:50:55:56:e0:
ce:73:70:2b:a2:97:bf:6a:e0:69:86:69:ca:6e:e3:cb:44:06:
d3:be:69:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:35 2026 by rpki-client