Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
File: Grj4--pJuvWfzsIuSKn-IVfYZIM.mft (raw, json)
Hash identifier: HnM3ohnzkKBhoYS8CyLxsotylKxrycGjCgDAqhF9Ibk=
Subject key identifier: 8E:6A:48:38:10:2E:F2:AE:16:A3:22:18:9B:F4:43:72:AD:11:92:0F
Authority key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
Certificate issuer: /CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Certificate serial: 01A04160A91362039114D206EE9444942EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
Manifest number: 09D8
Signing time: Thu 27 Aug 2026 04:00:48 +0000
Manifest this update: Thu 27 Aug 2026 04:00:48 +0000
Manifest next update: Fri 28 Aug 2026 04:00:48 +0000
Files and hashes: 1: 0fJ-yxybAv-QFlNN6p0SVmcLCCw.roa (hash: XxEl++z5OIGhbPXD3dDGiudXN2Aw4yLGeSfQzFdx6XE=)
2: Grj4--pJuvWfzsIuSKn-IVfYZIM.crl (hash: BNcMfkFJA7YQzlaA62hVzOo4+sqO8/r2wNC9O2Xu0hM=)
3: mNrbGyIIfa4fLmutHXkEY0XNdeA.roa (hash: XyZ31cfTK799tFnPajLPxNb05Usvc+Q+zvjntqi0x6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:60:a9:13:62:03:91:14:d2:06:ee:94:44:94:2e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Validity
Not Before: Aug 27 04:00:48 2026 GMT
Not After : Aug 28 04:00:48 2026 GMT
Subject: CN=8e6a4838102ef2ae16a322189bf44372ad11920f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:51:f1:ad:5c:37:89:44:65:63:13:00:cb:92:
b9:d7:4d:b4:5f:7e:93:01:db:c2:8e:22:6a:39:ef:
65:7f:a5:ce:fe:a0:1b:f2:ed:f9:4a:f5:6f:22:69:
7d:4d:4f:f4:b4:66:1c:c5:73:6c:6f:87:1f:8e:e7:
4d:b4:94:26:fb:39:3b:53:bf:a4:5d:c9:e1:82:4a:
2f:8e:9c:b7:6a:24:40:5b:fd:c1:f8:d0:f8:98:00:
25:5d:5d:00:ff:f0:b6:90:dc:da:50:71:70:ee:fa:
d9:81:a0:87:10:8a:17:cb:80:2f:48:a8:1c:bd:1b:
49:66:8c:d3:03:0f:05:c7:d3:e6:b3:90:ae:9e:2f:
3e:37:ac:9b:b1:5e:d2:4a:f6:e7:04:cb:5a:93:d3:
95:28:07:c9:50:22:9c:9b:fe:12:93:d3:5b:1f:c9:
fc:42:c5:fd:75:14:00:78:d5:b7:99:38:9e:8c:3d:
8d:35:87:96:33:24:6e:ad:9b:20:b7:bd:4a:b8:71:
dc:3e:d6:31:cc:30:3a:5a:3e:52:62:6b:89:93:32:
90:b0:69:09:d6:40:22:a5:0a:94:ed:0b:a7:3c:d8:
b8:42:4a:51:6b:e8:11:88:85:64:5b:3a:a5:c8:f4:
ae:20:c5:a6:ba:01:15:a5:b4:f2:11:9a:de:d1:66:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6A:48:38:10:2E:F2:AE:16:A3:22:18:9B:F4:43:72:AD:11:92:0F
X509v3 Authority Key Identifier:
keyid:1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:f3:d1:47:71:16:83:12:f5:a6:59:9c:1a:da:a0:62:06:e5:
72:0a:1b:54:d4:9f:8f:32:a4:10:81:5e:92:81:33:2b:9d:f7:
56:40:2c:66:b0:54:06:4a:9b:fe:41:63:c0:51:2d:18:de:f5:
24:91:3a:8f:44:6a:7d:cb:73:d6:b2:d6:a1:c4:0f:0f:ff:6a:
ce:02:c6:f4:c4:d4:f8:04:4f:e9:a7:f2:92:11:50:4d:12:b0:
ce:5f:c2:08:4b:f1:8b:08:8a:1f:01:d8:3b:52:2b:b0:2e:b3:
60:3c:43:22:2b:0c:af:29:29:01:3a:02:b7:4b:9c:4f:61:f6:
f8:00:f5:58:ca:c7:89:b5:26:d6:b8:83:58:c9:35:48:d6:20:
42:8f:90:75:5b:08:33:c1:75:f2:3c:23:c9:87:e5:1a:a9:78:
9f:27:9d:b4:6c:57:a9:c1:ad:d3:33:f3:b5:9b:9c:55:47:c7:
b4:96:ad:f8:7d:25:9b:9a:46:de:13:a9:5c:3e:2c:ff:72:2d:
0c:f7:a5:2a:ab:01:f3:28:1c:a7:27:0a:59:3a:3c:8e:c8:ed:
a9:ed:55:a4:1b:11:a8:73:58:3b:41:57:34:de:74:92:55:7e:
6c:b7:ca:dd:f0:4d:ef:82:af:cc:cb:05:81:24:0e:31:dd:55:
5b:9d:5e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 13:17:49 2026 by rpki-client