Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
File: GROVdcQBKD__U2E3sOg-VBX-GNA.mft (raw, json)
Hash identifier: rM4hnMjotCaV29DqWnh2SeqXpIQc19JFNP9VoOcJ4ik=
Subject key identifier: CC:5B:FD:41:64:4D:51:32:D6:FE:AD:D1:AF:4E:D3:1A:B1:D0:73:D1
Authority key identifier: 19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
Certificate issuer: /CN=19139575c401283fff536137b0e83e5415fe18d0
Certificate serial: 01A12D32A374D071170E41EE91EB5C742D43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
Manifest number: 0F14
Signing time: Sun 11 Oct 2026 23:00:55 +0000
Manifest this update: Sun 11 Oct 2026 23:00:55 +0000
Manifest next update: Mon 12 Oct 2026 23:00:55 +0000
Files and hashes: 1: GROVdcQBKD__U2E3sOg-VBX-GNA.crl (hash: m+buEcGm3VdekozH4d1m/WHR515ch3QKs0rkMIcD6os=)
2: ZZeABTpJzzngeuL-OTKi1sObkvk.roa (hash: LZJnobolr7nVT9FIHfxLJ++YArusGtx4j3xW25plKP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 22:49:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:32:a3:74:d0:71:17:0e:41:ee:91:eb:5c:74:2d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19139575c401283fff536137b0e83e5415fe18d0
Validity
Not Before: Oct 11 23:00:55 2026 GMT
Not After : Oct 12 23:00:55 2026 GMT
Subject: CN=cc5bfd41644d5132d6feadd1af4ed31ab1d073d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a8:9e:df:d4:55:b1:77:50:de:6d:b3:08:9d:
42:b5:46:ca:e6:5c:e9:76:8a:e8:92:04:92:c8:a1:
dd:4a:cd:bb:c4:72:0e:07:04:04:6c:50:61:19:01:
a3:12:f9:f4:67:ee:56:0b:0e:89:34:d5:06:bc:0e:
df:bd:e9:f7:fb:68:82:b3:4d:2b:2c:a5:f8:89:00:
7a:cd:83:97:c1:98:37:f6:7a:e2:31:84:3f:ee:1b:
d8:71:d2:25:8d:08:be:40:c9:2c:ca:75:56:9a:e9:
89:36:07:1f:e6:fd:4d:d7:9a:77:54:90:21:2e:b6:
b0:57:00:a0:a0:50:07:01:52:4f:a4:94:cd:35:21:
a2:96:d1:b1:f6:a6:af:e4:94:28:38:63:d4:b7:7f:
9e:74:50:bb:de:fe:f9:7e:4b:4d:99:9e:64:e7:f5:
80:69:75:29:ca:e8:bd:a0:3a:2b:54:77:b6:9a:7f:
b4:4d:ca:c9:b3:d2:2f:1d:15:68:05:c5:a5:53:bc:
db:d0:d4:cf:08:33:1e:93:55:39:a3:3a:b2:c5:86:
59:a8:87:e5:1f:0e:e0:eb:3a:ac:40:19:41:63:5b:
57:18:d0:88:7c:0b:e9:9a:39:d0:89:16:b8:2f:3f:
c1:e9:82:4b:77:fb:6b:5d:b1:35:db:ae:e6:81:c7:
45:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5B:FD:41:64:4D:51:32:D6:FE:AD:D1:AF:4E:D3:1A:B1:D0:73:D1
X509v3 Authority Key Identifier:
keyid:19:13:95:75:C4:01:28:3F:FF:53:61:37:B0:E8:3E:54:15:FE:18:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GROVdcQBKD__U2E3sOg-VBX-GNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3a094c-ff8e-4b44-81f0-94c7601aefda/1/GROVdcQBKD__U2E3sOg-VBX-GNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0c:69:21:fa:a1:0a:ac:83:75:af:54:df:7e:81:48:6f:77:
0c:bd:f6:e3:04:5b:e6:46:21:c2:56:1d:54:b4:82:63:e1:9f:
97:63:a8:b8:02:75:a6:ca:45:17:3d:64:b2:46:6a:50:b7:ce:
03:db:ed:7d:f3:97:b4:ef:11:05:6e:e7:32:ef:bc:6a:38:1f:
fc:25:30:c4:14:91:0e:f2:89:35:81:af:cc:90:6e:7b:07:7e:
bb:f0:b3:a0:94:26:da:b3:e9:4b:d5:9a:b8:8c:ca:e6:2d:8d:
19:46:40:5f:46:21:65:fb:65:4c:bb:5b:c2:ac:d7:7a:58:f0:
86:ef:5d:b4:ca:0b:fa:92:40:0d:22:07:de:67:34:2f:a4:1f:
0b:0f:cf:3d:45:97:29:dc:c1:04:6d:d5:c4:25:1e:f9:27:f3:
67:18:88:ef:bb:f7:e3:32:2d:ce:a8:35:49:09:7f:bf:4f:f1:
16:f3:07:bf:97:27:91:18:ae:82:7b:48:0e:0e:82:3e:23:e3:
9d:89:88:79:09:0b:56:77:de:71:d7:25:80:4e:35:3f:23:6c:
cf:bb:8b:42:c0:93:ec:fa:71:ee:ab:a8:53:30:2b:52:cd:82:
4f:af:06:93:96:21:24:8a:99:79:65:78:65:1c:5c:b3:17:da:
69:7a:70:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEtMqN00HEXDkHuketcdC1DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MTM5NTc1YzQwMTI4M2ZmZjUzNjEzN2IwZTgzZTU0MTVm
ZTE4ZDAwHhcNMjYxMDExMjMwMDU1WhcNMjYxMDEyMjMwMDU1WjAzMTEwLwYDVQQD
EyhjYzViZmQ0MTY0NGQ1MTMyZDZmZWFkZDFhZjRlZDMxYWIxZDA3M2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26ie39RVsXdQ3m2zCJ1CtUbK5lzp
dorokgSSyKHdSs27xHIOBwQEbFBhGQGjEvn0Z+5WCw6JNNUGvA7fven3+2iCs00r
LKX4iQB6zYOXwZg39nriMYQ/7hvYcdIljQi+QMksynVWmumJNgcf5v1N15p3VJAh
LrawVwCgoFAHAVJPpJTNNSGiltGx9qav5JQoOGPUt3+edFC73v75fktNmZ5k5/WA
aXUpyui9oDorVHe2mn+0TcrJs9IvHRVoBcWlU7zb0NTPCDMek1U5ozqyxYZZqIfl
Hw7g6zqsQBlBY1tXGNCIfAvpmjnQiRa4Lz/B6YJLd/trXbE1267mgcdF/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxb/UFkTVEy1v6t0a9O0xqx0HPRMB8GA1UdIwQY
MBaAFBkTlXXEASg//1NhN7DoPlQV/hjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JPVmRjUUJLRF9fVTJFM3NPZy1WQlgtR05BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zYTA5NGMtZmY4ZS00YjQ0LTgxZjAt
OTRjNzYwMWFlZmRhLzEvR1JPVmRjUUJLRF9fVTJFM3NPZy1WQlgtR05BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zYTA5NGMtZmY4ZS00YjQ0LTgxZjAtOTRjNzYwMWFlZmRh
LzEvR1JPVmRjUUJLRF9fVTJFM3NPZy1WQlgtR05BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQxpIfqh
CqyDda9U336BSG93DL324wRb5kYhwlYdVLSCY+Gfl2OouAJ1pspFFz1kskZqULfO
A9vtffOXtO8RBW7nMu+8ajgf/CUwxBSRDvKJNYGvzJBuewd+u/CzoJQm2rPpS9Wa
uIzK5i2NGUZAX0YhZftlTLtbwqzXeljwhu9dtMoL+pJADSIH3mc0L6QfCw/PPUWX
KdzBBG3VxCUe+SfzZxiI77v34zItzqg1SQl/v0/xFvMHv5cnkRiugntIDg6CPiPj
nYmIeQkLVnfecdclgE41PyNsz7uLQsCT7Ppx7quoUzArUs2CT68Gk5YhJIqZeWV4
ZRxcsxfaaXpwGA==
-----END CERTIFICATE-----
Generated at Mon Oct 12 05:52:53 2026 by rpki-client