Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: QmtgCIWyPGTIjABUbQgT2hpsG41vsylCoRMn+mNBI6Q=
Subject key identifier: CE:69:57:05:26:F1:68:A5:BD:7F:C4:32:46:9B:12:DD:EC:60:6B:CF
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 019CE410E227043D6AF511C4E951106B1A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 1593
Signing time: Thu 12 Mar 2026 22:00:37 +0000
Manifest this update: Thu 12 Mar 2026 22:00:37 +0000
Manifest next update: Fri 13 Mar 2026 22:00:37 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: a3NGHm09/eyI/HPsOqhCCfeZwU1BWmayZl4AYeamGP8=)
2: HdVf15BxvaUoRmDkU2WAnUzqeEI.roa (hash: E8gc8EoEirC9y0HgRWdI29lZIe/DH5y9+MNG4gOoc34=)
3: UoTm2cjOxeWwzsTm_tIMM9wPv40.roa (hash: adnzRNtY+kmU7Hbc2Pe9kRN3c/i17qsS4UkPfFW6Zac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:10:e2:27:04:3d:6a:f5:11:c4:e9:51:10:6b:1a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Mar 12 22:00:37 2026 GMT
Not After : Mar 13 22:00:37 2026 GMT
Subject: CN=ce69570526f168a5bd7fc432469b12ddec606bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:18:0d:3c:16:dd:8c:61:a8:7c:fb:36:ac:
eb:44:fb:e6:b2:15:3a:97:d1:8b:a3:b4:17:c2:30:
1e:42:ba:fe:eb:d7:83:32:4c:1e:e9:cd:99:1f:9c:
ba:2c:4d:17:e1:0e:77:aa:db:8f:e0:2f:a2:e2:c2:
fe:f1:4d:39:0a:e8:07:00:fa:1d:e0:31:28:7e:9d:
dd:78:f8:de:dc:3a:52:5f:e9:16:4d:73:e6:00:57:
52:6c:d2:be:c3:17:f4:0b:b4:a3:87:f4:74:0d:7b:
45:2e:ca:3e:d7:ad:39:d6:5e:5e:12:aa:44:af:55:
3e:82:08:aa:67:4d:ef:bb:9b:16:04:3f:af:41:67:
5f:99:3b:ca:ef:ee:bf:7b:e9:c3:36:b9:50:fa:40:
6e:4d:0d:4e:23:58:69:81:eb:a6:8d:7a:c0:a6:a4:
85:ba:0e:8b:54:3f:a3:09:a2:d6:7b:c5:48:09:18:
ef:3c:94:06:43:17:7d:b8:71:b8:4b:3f:fb:4f:b3:
52:6a:e6:79:97:4f:9e:a5:0f:70:ee:ec:39:9a:a4:
85:ba:74:13:15:28:66:86:fd:59:b8:da:97:aa:f3:
c3:b8:31:ec:d1:5a:63:ac:ad:ac:85:2c:7d:69:64:
0a:60:3e:40:0b:fa:ae:2e:4b:e4:a6:0c:09:af:ad:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:69:57:05:26:F1:68:A5:BD:7F:C4:32:46:9B:12:DD:EC:60:6B:CF
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9b:45:75:27:30:43:29:a7:ea:f8:9b:9b:f8:c0:b3:ad:71:
46:86:ea:d5:87:5c:62:8d:7c:ca:36:71:51:1c:de:7b:41:a4:
ce:5b:56:b0:39:54:61:d7:11:73:d0:60:28:93:97:f2:45:a7:
1d:7b:05:01:48:ac:23:6f:2a:4e:32:c5:63:3e:b0:6a:dc:24:
ee:71:81:f2:b6:1f:a1:68:cd:04:52:98:18:a1:2d:17:62:20:
1e:17:41:04:ec:dc:b1:7e:db:56:ba:66:4c:f0:a9:76:49:03:
bc:2d:c5:bb:33:7c:a2:1c:02:81:a9:85:4d:fb:94:c8:04:3e:
6b:a3:d5:c6:a7:9e:a4:8e:63:e9:ac:da:ef:9a:31:be:7e:20:
ad:7d:43:d0:36:8a:40:41:07:89:ee:5f:08:ba:f2:37:07:cb:
75:4b:a9:03:20:93:00:d9:c3:cf:13:f0:87:f0:a1:71:8d:c6:
97:34:57:f2:28:84:73:55:ec:13:a2:d5:63:9d:23:0f:82:d9:
c5:e7:11:92:8b:26:98:53:c1:c5:bc:b0:a7:1d:0c:05:78:47:
bb:9e:b1:53:13:8f:ea:e7:76:c9:1b:61:4b:b4:64:f3:ec:cf:
71:80:53:6d:09:f7:8c:70:d7:b1:b1:ea:e7:09:1e:1c:60:51:
78:05:ae:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:19:03 2026 by rpki-client