Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: CNRfY3VZ9kufa2bRfeK4a/00en57/pppx6t4a7EujtU=
Subject key identifier: 43:02:C3:C3:BD:9D:8C:A6:71:BF:DC:0C:17:70:E8:16:32:A7:85:18
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 019D34F68913446EBE90F98C6973E545B7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 17FD
Signing time: Sat 28 Mar 2026 15:01:05 +0000
Manifest this update: Sat 28 Mar 2026 15:01:05 +0000
Manifest next update: Sun 29 Mar 2026 15:01:05 +0000
Files and hashes: 1: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: 8/XJk7B5jeJjo1StzGDPm9vqjnU8Wd6cHfGb6Kg2TbA=)
2: ti3ObmEy21V2j-0W73NVwUe3ck8.roa (hash: schWmTw6g7AB2bDtVv9F+0FZ5DtNcX/Fqd7C3rT46tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:34:f6:89:13:44:6e:be:90:f9:8c:69:73:e5:45:b7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Mar 28 15:01:05 2026 GMT
Not After : Mar 29 15:01:05 2026 GMT
Subject: CN=4302c3c3bd9d8ca671bfdc0c1770e81632a78518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:da:89:18:55:c1:19:a8:74:c6:6e:7a:80:
c6:76:e5:0b:a3:91:ed:1f:98:83:4c:8a:84:b9:15:
01:ed:52:ae:97:8c:3b:b4:07:61:3d:17:4f:98:62:
e9:21:ee:c6:3a:7b:8b:7c:87:7b:ff:77:c0:19:f5:
7b:0a:ee:4d:43:f7:fc:d1:82:ee:d1:8f:57:33:10:
ab:9c:6c:42:29:37:5c:63:73:b2:cb:7d:96:1b:c3:
69:af:7e:6a:03:c9:13:ce:32:54:10:60:8c:af:bc:
0c:71:15:e1:d5:8a:46:8f:b1:15:f5:8c:a0:ba:a8:
cf:53:f8:fa:aa:69:4f:c5:d6:02:30:ef:9f:8a:af:
de:a0:f9:f0:e4:d1:98:36:d2:24:19:bf:a4:b3:61:
73:f5:2c:2d:68:88:59:df:cb:33:87:63:58:5e:2f:
79:e6:f9:55:ca:8e:e2:cb:29:3c:10:23:40:c2:39:
55:24:84:a7:ec:89:d6:ce:02:e5:57:70:e9:fb:2e:
15:71:f3:f7:39:6b:b9:f0:a9:54:ec:9b:1d:21:c6:
cb:ad:03:ff:d5:42:75:ab:1f:38:8b:60:bd:41:e6:
0f:1c:33:8d:3f:f5:a1:fe:38:20:83:05:1f:7b:1f:
3e:04:1d:6a:31:0e:0c:34:8c:e1:e1:6e:34:9b:f4:
64:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:02:C3:C3:BD:9D:8C:A6:71:BF:DC:0C:17:70:E8:16:32:A7:85:18
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9f:a1:60:14:01:04:99:a6:eb:bb:3c:5c:c9:0f:0f:0b:b3:
f8:1f:41:36:ef:a4:db:30:5c:b9:97:16:98:7c:4d:ea:0e:31:
49:33:56:8f:0e:11:66:17:eb:e3:e7:1f:81:51:79:d2:f3:81:
e6:da:e0:83:d6:5c:08:52:96:9e:51:5d:e7:c2:72:43:f2:3b:
92:1f:e8:ac:5c:a6:47:cd:bb:7a:fc:00:13:9e:ff:d9:b1:73:
fa:7a:8e:1d:ee:e6:b6:8c:ce:94:c1:cc:b6:b7:da:cb:8b:34:
a9:59:1b:9e:0a:85:ec:f7:43:c0:61:67:9a:a2:f1:44:98:1f:
74:20:73:af:7b:6a:a9:02:82:0f:84:de:5c:f3:04:6b:9e:29:
8f:fd:89:6d:a7:a7:d4:2c:09:3e:5d:f1:1a:a3:af:21:6b:32:
04:40:b7:de:d8:98:c9:86:bb:ff:87:c7:c4:4e:f3:fb:a4:eb:
82:da:34:ca:8e:53:6a:4b:a4:2b:f8:c2:8f:e4:e6:94:0b:1d:
5c:91:73:37:d0:55:7a:b5:33:82:a1:1c:2f:4b:98:73:c5:1a:
ec:86:1e:af:65:d8:86:95:53:ff:64:f9:4d:b1:76:57:5a:84:
ce:1f:7b:27:8a:26:8f:f6:7a:fb:90:e3:59:d8:a1:d0:99:35:
ab:02:a7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 19:49:13 2026 by rpki-client