Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
File: gRVc2PIuywFPiq1xDAcMfofLCi8.mft (raw, json)
Hash identifier: B70x2lZzjfStBwEEdhf8TAjcaqiOMnohRZg5jBFbops=
Subject key identifier: 95:8F:70:8B:20:F0:FE:97:7A:B3:4B:92:1B:82:EE:33:BA:F6:6D:09
Authority key identifier: 81:15:5C:D8:F2:2E:CB:01:4F:8A:AD:71:0C:07:0C:7E:87:CB:0A:2F
Certificate issuer: /CN=81155cd8f22ecb014f8aad710c070c7e87cb0a2f
Certificate serial: 01A15A426FD121AD16A132913869DB29C70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
Manifest number: 0208
Signing time: Tue 20 Oct 2026 17:01:05 +0000
Manifest this update: Tue 20 Oct 2026 17:01:05 +0000
Manifest next update: Wed 21 Oct 2026 17:01:05 +0000
Files and hashes: 1: gRVc2PIuywFPiq1xDAcMfofLCi8.crl (hash: vTVKGD3DtBMP9cjBowdaDo+tZpwemmSQgPRNHN42VlA=)
2: uDc2pV6zqfjwI-4br5JK6tiGG5E.roa (hash: bNNvOAco8leAwP4SgeSGZ8jpQ0jHOezRglGnSiHe4TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:42:6f:d1:21:ad:16:a1:32:91:38:69:db:29:c7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81155cd8f22ecb014f8aad710c070c7e87cb0a2f
Validity
Not Before: Oct 20 17:01:05 2026 GMT
Not After : Oct 21 17:01:05 2026 GMT
Subject: CN=958f708b20f0fe977ab34b921b82ee33baf66d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:0b:c2:a3:8a:da:71:f9:7a:bd:72:96:9a:
57:cc:23:9a:86:8b:e3:ba:4d:d3:da:7a:84:97:b4:
e5:ca:18:26:81:8c:9e:07:a1:30:26:71:f3:38:63:
e7:0b:41:95:5e:8d:d5:1c:d1:84:11:f4:c1:a5:1e:
9a:51:ef:30:b8:62:eb:8a:e5:cc:93:01:ca:b5:17:
ab:06:1f:04:51:e0:ea:f6:4e:90:9b:60:ce:3a:46:
ec:86:03:84:f7:4c:0c:3c:57:1c:b8:51:85:68:cf:
21:21:92:e3:cf:40:ef:ca:38:54:78:c8:1c:22:77:
2e:3f:73:6b:91:da:3e:4d:aa:7d:18:af:27:58:4d:
77:ef:a5:3b:f4:ed:be:e0:49:48:ba:41:82:62:ab:
5e:6f:98:cc:94:ae:54:fc:64:cb:af:9d:21:c7:9d:
84:78:ab:6f:3d:a0:4e:a1:65:cc:f1:37:44:be:45:
e1:ad:e2:69:ea:64:e4:80:c4:e0:99:a0:48:bb:cd:
19:1c:5a:40:95:e6:8c:29:cb:40:09:aa:de:bc:54:
8d:50:55:33:d4:12:7d:e2:51:e2:e2:bc:be:b7:17:
94:6d:fa:ec:5b:f4:0d:71:56:72:1b:80:a3:bf:fc:
e9:35:f3:97:2d:63:09:2c:ac:0a:83:53:ef:50:f0:
5b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8F:70:8B:20:F0:FE:97:7A:B3:4B:92:1B:82:EE:33:BA:F6:6D:09
X509v3 Authority Key Identifier:
keyid:81:15:5C:D8:F2:2E:CB:01:4F:8A:AD:71:0C:07:0C:7E:87:CB:0A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRVc2PIuywFPiq1xDAcMfofLCi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/681f65-22d8-42d7-9b62-c40a0a799469/1/gRVc2PIuywFPiq1xDAcMfofLCi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:08:63:2b:79:00:8c:7b:8d:12:a6:e0:dc:6b:88:a5:f7:64:
10:1f:d2:ce:b5:70:ce:eb:d7:b7:50:6c:48:e5:f6:fb:6c:ac:
50:2a:8f:e7:e3:e9:81:b4:51:72:04:e9:81:4f:c3:bb:4f:70:
9c:bf:6b:3e:12:98:eb:8e:94:c2:fd:07:03:01:01:03:cf:07:
be:75:15:c2:c9:33:4c:07:93:e8:e2:12:ba:a8:85:54:53:ca:
b9:fd:d5:ce:81:21:f3:11:42:c7:73:29:c8:ea:b6:7b:23:c1:
eb:ae:6d:c9:a7:e8:92:57:e4:75:69:8b:b6:19:ea:0e:d7:9a:
19:40:0b:fb:a0:5a:77:43:16:87:95:59:a6:62:34:7b:46:71:
7e:72:7e:9a:d9:1f:53:a7:6c:2e:ae:2d:a3:e2:39:61:20:54:
19:f3:56:cb:24:42:ec:4e:e1:fc:88:a9:f7:fb:56:37:39:5c:
d3:a7:ed:9d:83:a7:ce:d7:cb:75:38:0a:7f:c9:d4:68:7f:d7:
ae:4b:cb:c7:de:73:1c:c8:5d:7e:dc:dd:da:14:dc:82:1c:2d:
aa:c3:2d:88:a1:c3:fa:e0:24:a6:58:22:60:e9:01:97:14:d0:
da:be:1b:4c:12:96:34:10:ac:3a:22:a2:9a:7e:ff:3f:76:2d:
d0:fc:71:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:37:10 2026 by rpki-client