Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
File: grZNfxWekC6mpa3XoQDcBfoUqe0.mft (raw, json)
Hash identifier: O9dIgQOtc/WVXvCwlnNRy2VFYgZn3KEdsK/DItilu9g=
Subject key identifier: B1:6B:33:70:C8:4A:33:B1:84:77:45:D0:86:BC:EC:6D:D7:B4:C8:EC
Authority key identifier: 82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
Certificate issuer: /CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Certificate serial: 019D3941324A45FFCC5127E4F46C59C8224D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
Manifest number: 1103
Signing time: Sun 29 Mar 2026 11:01:07 +0000
Manifest this update: Sun 29 Mar 2026 11:01:07 +0000
Manifest next update: Mon 30 Mar 2026 11:01:07 +0000
Files and hashes: 1: WWHOCdsacMdGnHdJhOLy9pPWRYo.roa (hash: oBwrZQKt+LueihEP9ZDumJepktt4dnTgXqwHx+nSZEE=)
2: grZNfxWekC6mpa3XoQDcBfoUqe0.crl (hash: Eg6lojHL9s3hGLoT6PwNHKfmy4xpdI8JCEcFzqaTSkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:32:4a:45:ff:cc:51:27:e4:f4:6c:59:c8:22:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b64d7f159e902ea6a5add7a100dc05fa14a9ed
Validity
Not Before: Mar 29 11:01:07 2026 GMT
Not After : Mar 30 11:01:07 2026 GMT
Subject: CN=b16b3370c84a33b1847745d086bcec6dd7b4c8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d8:db:63:1b:d7:fb:df:a0:d5:2a:50:b2:38:
e2:3d:31:de:90:d7:cd:07:62:e6:6c:e3:c3:7a:ca:
5f:2d:16:e4:a1:94:44:3f:2d:e7:6f:57:d6:11:1f:
2f:b1:4e:bc:8e:11:c9:4c:f9:67:32:63:7d:7d:f1:
7e:f5:b0:51:7c:9d:96:65:30:24:01:d5:f9:45:3d:
43:55:60:97:95:ac:a3:b0:73:6e:a6:bf:64:bd:4b:
17:c8:81:9f:ec:f7:66:4e:12:76:d3:25:2f:e2:68:
da:e9:9e:71:23:03:85:9c:2f:4c:aa:c0:15:a2:9c:
7f:a0:df:bd:71:ad:f1:28:4d:f8:8a:e7:e3:7a:39:
89:e6:41:dd:8f:89:a4:12:d8:59:ed:05:06:ff:6c:
63:a8:5d:cb:1e:2a:29:e7:7b:6d:ca:28:8c:81:16:
d8:09:28:8c:f6:fc:94:b3:e3:77:4b:51:c7:9d:78:
fe:fb:3a:97:7e:4f:5b:11:b3:8f:26:08:8e:89:ea:
40:67:bf:8b:fe:76:14:c2:50:f6:81:8f:0b:72:bc:
d2:35:cd:74:50:25:1e:39:4c:15:00:dc:bd:b2:58:
a6:ee:9d:4a:d0:c5:69:52:78:7f:1c:5b:a8:03:4b:
76:b1:83:d5:74:66:15:38:0e:b3:a6:63:8b:bf:83:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6B:33:70:C8:4A:33:B1:84:77:45:D0:86:BC:EC:6D:D7:B4:C8:EC
X509v3 Authority Key Identifier:
keyid:82:B6:4D:7F:15:9E:90:2E:A6:A5:AD:D7:A1:00:DC:05:FA:14:A9:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grZNfxWekC6mpa3XoQDcBfoUqe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a997b6-0bb7-4766-8acc-275ac1443318/1/grZNfxWekC6mpa3XoQDcBfoUqe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c0:ff:ec:31:2c:47:c6:c5:ed:42:35:8d:2b:de:de:a7:85:
57:64:7a:52:bc:54:a5:fe:9b:6d:8f:c7:59:bd:56:a4:f5:32:
72:ec:6a:47:d0:e3:90:4d:b8:c3:b0:27:45:a2:77:30:cd:9a:
d6:4d:44:dc:8f:1e:6d:db:13:4a:c0:08:75:b1:ae:57:39:c2:
6e:89:bf:f3:b0:0f:55:70:c8:a3:6f:31:8c:9c:5a:52:c4:f2:
7f:97:bd:d5:e9:0b:63:76:67:4d:6d:08:ad:1d:2d:b7:10:be:
6e:68:8a:e4:0c:f5:af:fe:5d:13:93:6d:20:5b:75:49:8e:62:
e5:e4:9a:f4:24:21:75:ad:17:c3:cd:f0:68:ae:ce:eb:9c:76:
b7:69:27:a0:60:7d:f5:b8:a8:b7:e1:ef:1e:36:4c:72:d8:fc:
3d:1b:7e:9f:b4:ac:56:c6:38:f1:e8:22:e9:2b:71:40:cf:b3:
5f:96:e7:ac:3c:3d:73:12:36:bc:27:7b:f7:33:ca:6d:bf:1d:
a1:16:4e:49:87:a3:da:61:13:5e:07:6e:ba:11:f4:91:3e:20:
64:d8:2a:bb:c8:0d:0b:3e:e0:26:6c:1a:a0:35:4b:2c:46:9d:
6d:6c:88:17:30:99:1d:bb:c0:03:56:52:b3:9c:47:2d:8f:1a:
d9:3b:94:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:27:12 2026 by rpki-client