Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: 8ykZzbPJttAEvbPtbDYu+PGNtW/re8hyXOdCkUaVKmg=
Subject key identifier: 17:2D:87:3F:6C:47:37:A9:C6:1B:6B:3B:A4:EA:84:BE:80:C3:1F:89
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 01A182626DA07E446AFD5482B3A92E44B4BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 1A3C
Signing time: Wed 28 Oct 2026 12:00:51 +0000
Manifest this update: Wed 28 Oct 2026 12:00:51 +0000
Manifest next update: Thu 29 Oct 2026 12:00:51 +0000
Files and hashes: 1: VHNvk1pFhm2Mv_jid3eMW8ccVIQ.roa (hash: 3Q72fFJWqHecJIDYOJyGhpclhNZ8eqSuAMkTIjrp1cA=)
2: eCnE-AztecUH0Ii4xKzJKUvwNPI.roa (hash: kbLe39umBoFt3OqV1v6hrqR6Zd5EvOXtfjO+6C3/NUQ=)
3: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: wWgl2HDMrtrUaVB1rRox9zOX3elVzLVvbVAvFAhzuOI=)
4: uox9Nc0O9CJq0e64gzsPQekDCMg.roa (hash: ERSV0kbvjLPbsPDrGybsMiHpmNJWDqc9dKdBHSCap64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:62:6d:a0:7e:44:6a:fd:54:82:b3:a9:2e:44:b4:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Oct 28 12:00:51 2026 GMT
Not After : Oct 29 12:00:51 2026 GMT
Subject: CN=172d873f6c4737a9c61b6b3ba4ea84be80c31f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:a5:bf:8b:fd:29:50:07:aa:e5:5b:82:b9:
48:e7:72:65:94:2f:5c:44:a7:19:65:9b:15:f6:5b:
fd:b7:05:2f:1a:38:69:5c:cd:40:21:b7:7b:07:f1:
cb:b5:d4:13:13:b2:71:35:ea:72:3a:35:04:a8:5d:
91:13:84:fd:bd:3a:22:6f:df:a8:2c:12:d2:97:f7:
ca:37:2d:5e:ee:d0:48:d4:01:b1:74:ad:11:3b:57:
c0:da:23:03:87:3b:fb:65:a5:0e:5c:bc:53:ed:51:
0c:f0:13:64:0c:6e:ae:08:cf:94:da:06:6a:dd:a0:
5a:0f:8d:a3:60:7a:24:ef:67:15:5e:35:7f:16:c7:
e8:59:46:cb:31:e2:e7:33:d5:7e:db:9b:8c:7b:bd:
49:eb:23:f1:71:15:72:ec:2c:83:ac:68:91:55:67:
49:89:71:8f:5e:76:3b:99:80:cb:24:2f:20:3d:1e:
de:41:67:a3:eb:9d:7f:ac:f9:af:1b:04:1c:0f:fc:
da:1e:74:92:06:ce:62:89:81:71:fd:f3:3e:1c:34:
80:7a:62:37:11:41:18:21:b1:1b:67:fa:b9:fe:b1:
de:d1:84:46:90:78:fa:22:c9:7b:72:70:be:77:0b:
e1:ab:e8:bf:ce:8f:07:c7:37:1d:ac:a6:61:eb:83:
14:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:87:3F:6C:47:37:A9:C6:1B:6B:3B:A4:EA:84:BE:80:C3:1F:89
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:59:6b:47:1f:3e:10:f0:a8:b8:ef:40:d7:a9:56:29:33:85:
34:38:6b:c9:a0:7c:cb:3b:98:c1:4d:4b:09:57:d7:21:59:1c:
a9:65:ea:73:5c:9f:b1:79:73:e2:b8:a8:a2:74:87:e5:02:51:
df:df:a3:90:87:28:36:41:74:65:61:6e:c8:ef:85:3d:aa:a3:
0c:34:17:87:2e:fb:d4:c1:f8:25:cb:03:31:ab:22:9b:3d:af:
98:db:59:ac:a7:ad:ed:7e:b7:44:16:0e:45:25:6b:fb:30:42:
d9:2c:5d:f2:f1:20:43:bb:e5:dd:ed:a8:bd:a6:0c:13:d2:fe:
92:5c:1e:d1:64:78:18:89:f1:35:87:9e:d1:d0:d6:8c:0f:ab:
7e:25:dd:27:7e:a9:3f:4b:81:09:11:0f:98:f7:a1:e4:3e:a7:
dd:91:b3:76:ee:ee:a2:6b:e1:39:75:cc:0c:b9:69:7c:70:83:
aa:c3:bc:9e:ed:9e:d6:c3:d6:d2:13:00:ff:39:aa:c8:15:0a:
2f:6a:52:31:18:1c:e8:dd:bd:73:29:f1:e5:8b:39:ac:0c:cd:
a1:69:67:b7:00:68:f1:57:c3:8c:e5:00:8c:80:b2:01:2e:cb:
98:51:cb:f2:90:6d:e0:c2:4f:d2:cf:d1:0d:d8:09:23:0d:47:
21:0b:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:29:37 2026 by rpki-client