Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
File: GRqWooxl1YTI3SNNPbREz0sze6I.mft (raw, json)
Hash identifier: 7O4IuV7+0e7NpJtYh3mAKPbqqJpIkEI8Es6HpLsrexY=
Subject key identifier: 81:DC:1A:53:C8:4D:FD:2B:F7:6D:22:D8:14:A8:8F:B5:8B:96:D1:5E
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 019FDCF4E986950BD35FCC60FB2760DA3606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
Manifest number: 171D
Signing time: Fri 07 Aug 2026 16:01:05 +0000
Manifest this update: Fri 07 Aug 2026 16:01:05 +0000
Manifest next update: Sat 08 Aug 2026 16:01:05 +0000
Files and hashes: 1: GRqWooxl1YTI3SNNPbREz0sze6I.crl (hash: DVesX+ts02UBvGZvC5R2OUwgq8rJEe79WkmhAOD6hqw=)
2: HdVf15BxvaUoRmDkU2WAnUzqeEI.roa (hash: E8gc8EoEirC9y0HgRWdI29lZIe/DH5y9+MNG4gOoc34=)
3: UoTm2cjOxeWwzsTm_tIMM9wPv40.roa (hash: adnzRNtY+kmU7Hbc2Pe9kRN3c/i17qsS4UkPfFW6Zac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:f4:e9:86:95:0b:d3:5f:cc:60:fb:27:60:da:36:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Aug 7 16:01:05 2026 GMT
Not After : Aug 8 16:01:05 2026 GMT
Subject: CN=81dc1a53c84dfd2bf76d22d814a88fb58b96d15e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4f:14:ec:e4:34:41:91:3f:2f:b3:af:dd:bc:
11:cd:49:e5:dc:81:2e:dd:04:3c:4a:c8:62:a3:98:
37:c1:b2:21:f4:81:1d:d6:3a:9f:24:cb:b5:0f:24:
f1:6a:0b:9a:f9:3f:09:16:db:bf:fc:b8:dc:d7:7e:
b5:9e:61:3e:fc:58:b3:0a:f9:d8:ea:1c:71:ab:1b:
f1:29:6c:17:57:2f:b0:29:fd:17:7b:2d:bb:4c:80:
5a:fe:92:34:77:37:d0:6c:ff:8a:d9:22:91:58:d5:
82:b0:2e:fe:13:a1:6a:3c:ed:8a:ef:d3:13:f1:f5:
1a:75:43:e2:9d:0d:73:9b:df:e6:77:eb:61:f2:40:
8d:a5:b8:f2:42:f6:8d:b0:06:ef:4b:10:34:f4:44:
61:48:49:d3:88:8e:a0:7e:2d:f2:e4:c2:bf:6d:0d:
e0:b4:da:a0:64:09:01:4e:f7:4c:00:b5:80:af:f5:
96:ce:80:87:75:12:b5:d7:b4:7b:c3:fc:6c:e7:67:
bc:98:84:9d:c4:f2:eb:d4:33:f4:60:0d:85:66:7b:
a6:ce:0f:0a:fb:46:96:af:30:b5:5e:c3:42:6e:9f:
e3:cb:7f:99:25:af:d5:3a:d7:58:15:e6:18:e4:d4:
81:51:65:7e:a1:e5:90:00:8a:cb:64:63:17:0e:55:
62:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DC:1A:53:C8:4D:FD:2B:F7:6D:22:D8:14:A8:8F:B5:8B:96:D1:5E
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:38:10:48:ef:08:ec:49:e7:b0:28:c8:7a:cc:c1:4d:e8:28:
cf:54:c2:b2:38:02:88:55:72:b4:3b:9e:62:c5:63:b1:3e:79:
f9:c6:aa:2f:66:d6:e8:25:66:37:03:7f:3c:31:84:c4:16:7c:
10:69:50:75:12:04:33:75:87:a8:b1:d9:ff:9a:ac:2b:d9:45:
50:a5:11:9d:3c:07:41:92:a5:fc:9c:ba:23:be:98:ad:72:e7:
23:18:6d:7c:80:9b:eb:8d:bd:41:cc:a5:70:5e:ad:b2:fa:8d:
09:b2:da:c0:85:51:07:39:6f:58:ef:49:7d:11:45:98:4e:64:
bf:68:65:d0:82:88:c2:9a:af:bf:c5:c7:f0:31:64:05:46:a7:
eb:09:29:86:ee:94:cd:09:c0:51:dd:1f:b2:ae:5b:19:76:d3:
b2:a8:2c:b4:05:4c:9d:70:1b:79:5c:43:fe:81:fc:95:3d:07:
9b:97:cb:92:5f:06:c9:60:8a:60:c5:02:32:de:a9:68:96:6e:
f8:94:e2:b0:69:77:8c:c7:f2:6f:35:35:f7:0a:ae:4b:92:be:
ec:5b:4f:14:8f:e7:6a:1d:c5:f1:96:b4:86:95:b4:49:af:5d:
be:04:d1:8e:d0:d6:a4:d0:20:9c:fc:51:91:67:59:be:10:7a:
31:fe:d9:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/c9OmGlQvTX8xg+ydg2jYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MWE5NmEyOGM2NWQ1ODRjOGRkMjM0ZDNkYjQ0NGNmNGIz
MzdiYTIwHhcNMjYwODA3MTYwMTA1WhcNMjYwODA4MTYwMTA1WjAzMTEwLwYDVQQD
Eyg4MWRjMWE1M2M4NGRmZDJiZjc2ZDIyZDgxNGE4OGZiNThiOTZkMTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0U8U7OQ0QZE/L7Ov3bwRzUnl3IEu
3QQ8Sshio5g3wbIh9IEd1jqfJMu1DyTxagua+T8JFtu//Ljc1361nmE+/FizCvnY
6hxxqxvxKWwXVy+wKf0Xey27TIBa/pI0dzfQbP+K2SKRWNWCsC7+E6FqPO2K79MT
8fUadUPinQ1zm9/md+th8kCNpbjyQvaNsAbvSxA09ERhSEnTiI6gfi3y5MK/bQ3g
tNqgZAkBTvdMALWAr/WWzoCHdRK117R7w/xs52e8mISdxPLr1DP0YA2FZnumzg8K
+0aWrzC1XsNCbp/jy3+ZJa/VOtdYFeYY5NSBUWV+oeWQAIrLZGMXDlViYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHcGlPITf0r920i2BSoj7WLltFeMB8GA1UdIwQY
MBaAFBkalqKMZdWEyN0jTT20RM9LM3uiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYt
OTE4NTE5OWExOGMwLzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81ZTAyOTgtMGQ2Yi00MWI0LTg4ZjYtOTE4NTE5OWExOGMw
LzEvR1JxV29veGwxWVRJM1NOTlBiUkV6MHN6ZTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIjgQSO8I
7EnnsCjIeszBTegoz1TCsjgCiFVytDueYsVjsT55+caqL2bW6CVmNwN/PDGExBZ8
EGlQdRIEM3WHqLHZ/5qsK9lFUKURnTwHQZKl/Jy6I76YrXLnIxhtfICb6429Qcyl
cF6tsvqNCbLawIVRBzlvWO9JfRFFmE5kv2hl0IKIwpqvv8XH8DFkBUan6wkphu6U
zQnAUd0fsq5bGXbTsqgstAVMnXAbeVxD/oH8lT0Hm5fLkl8GyWCKYMUCMt6paJZu
+JTisGl3jMfybzU19wquS5K+7FtPFI/nah3F8Za0hpW0Sa9dvgTRjtDWpNAgnPxR
kWdZvhB6Mf7ZkA==
-----END CERTIFICATE-----
Generated at Fri Aug 7 22:09:00 2026 by rpki-client