Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: ay+raOFi+FWTlJNeX+xV8IHxBS2c07wAw6Ys9Uv19s8=
Subject key identifier: EE:68:C4:71:E3:03:60:4D:37:35:59:32:3B:EE:D7:8D:B0:19:C2:0F
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 01A17EF37856290F8AF58FC5DC32393B943B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 1AC6
Signing time: Tue 27 Oct 2026 20:00:47 +0000
Manifest this update: Tue 27 Oct 2026 20:00:47 +0000
Manifest next update: Wed 28 Oct 2026 20:00:47 +0000
Files and hashes: 1: EK-BO9njT8D0PUd03822T1Wcn_Y.roa (hash: IVt2nvgD6bQiKsQebz3stonbNyplhQ3WbabmnplyKUM=)
2: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: m/Rz6ATInV6GdaGLD+Rxv92E7oDkHJTxyteKbmppbmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:f3:78:56:29:0f:8a:f5:8f:c5:dc:32:39:3b:94:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Oct 27 20:00:47 2026 GMT
Not After : Oct 28 20:00:47 2026 GMT
Subject: CN=ee68c471e303604d373559323beed78db019c20f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:91:9f:b7:45:9d:0d:bd:d1:00:59:06:04:79:
da:bb:34:19:2d:10:18:47:4a:0b:17:9d:79:a6:26:
22:fd:61:af:c9:74:26:0c:af:73:d2:04:b0:48:70:
27:9a:83:3a:36:48:e9:77:ab:25:9f:89:91:44:91:
33:88:26:02:62:c0:23:7e:2d:ab:14:84:e7:6e:46:
b4:56:15:c8:a7:c0:5b:5a:01:2c:aa:c8:83:bd:08:
60:a9:cf:d2:89:58:36:77:c6:cb:18:83:a3:9c:21:
36:dd:34:36:58:41:6c:ad:9c:d1:75:f9:32:3a:20:
ef:e1:d5:d4:f9:f9:e4:bc:20:f3:52:30:9b:a5:42:
28:9f:2c:9d:75:39:b0:f9:5d:c6:73:de:95:91:b3:
20:43:0f:6b:22:a9:4b:e0:84:16:c9:b2:05:42:e0:
c7:f3:6d:a0:40:0c:56:0b:a8:a9:6d:10:37:3b:6e:
86:ea:dd:28:7b:b7:ba:46:ec:ec:d6:20:6e:11:34:
04:e0:cf:51:b4:7a:f6:66:88:be:9d:5c:b6:b1:7c:
1d:54:e4:4a:ec:44:02:8b:ea:7c:6b:15:4a:8b:aa:
f1:d8:b6:c2:9a:ea:d7:1f:45:18:5e:c2:92:88:20:
36:9a:b0:2a:2a:f7:1c:3f:bd:2a:4f:30:13:40:99:
e9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:68:C4:71:E3:03:60:4D:37:35:59:32:3B:EE:D7:8D:B0:19:C2:0F
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e9:7f:b3:65:7c:0b:15:e4:44:14:b7:59:18:b5:d2:2f:1f:
90:dd:ef:15:75:5b:40:a7:bd:cc:9d:4a:4c:ba:84:7d:06:32:
01:e5:0c:07:db:2a:d2:1e:b3:c5:9d:84:67:bd:3e:c2:eb:ed:
0b:77:64:77:87:9a:59:67:2a:d6:14:34:9b:e1:33:30:55:2f:
45:3b:ce:75:9f:82:8d:98:1f:f5:13:04:0d:92:57:04:fa:54:
aa:c0:28:93:84:9e:0d:36:43:c0:34:9c:8f:7f:84:a3:a2:54:
4a:7f:97:44:f8:cb:59:e3:af:25:ce:76:4d:53:0e:a2:b5:c6:
11:e4:d6:18:37:87:30:66:12:c8:d5:da:eb:b8:2e:c7:71:2d:
8b:65:df:49:12:84:2c:13:f2:f1:db:26:e9:db:c9:75:5d:4a:
04:28:56:15:2e:3d:c7:b3:a9:72:d7:94:04:9a:c1:bd:9d:ec:
a5:a0:8d:c8:a9:55:2d:da:2e:e9:9d:4a:90:56:7d:81:68:3f:
83:dd:92:70:fd:78:39:af:c1:5d:74:b2:b0:15:29:83:61:9b:
11:3c:b9:db:f8:2f:3b:95:4f:f3:cc:5d:3b:56:de:ea:fd:60:
8d:90:35:25:12:bb:a7:e6:ef:ca:be:24:de:77:3f:1a:ce:26:
33:e9:a4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:23:21 2026 by rpki-client