Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: Vk/ZUEhtMBalr+7PfqcLW+PBRnPfsxkZViaXOX5BJm0=
Subject key identifier: EA:EA:B8:75:23:EF:3D:E9:AC:BD:9C:A4:A9:82:05:04:3A:31:F5:C2
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 019EB65744D23E336FAF46B4C408B499E60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 11:00:32 +0000
Manifest this update: Thu 11 Jun 2026 11:00:32 +0000
Manifest next update: Fri 12 Jun 2026 11:00:32 +0000
Files and hashes: 1: EK-BO9njT8D0PUd03822T1Wcn_Y.roa (hash: IVt2nvgD6bQiKsQebz3stonbNyplhQ3WbabmnplyKUM=)
2: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: o8XmvM09HI/5S2l+QXdjqS86mkGZHqwf2DttOQHUy2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:57:44:d2:3e:33:6f:af:46:b4:c4:08:b4:99:e6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Jun 11 11:00:32 2026 GMT
Not After : Jun 12 11:00:32 2026 GMT
Subject: CN=eaeab87523ef3de9acbd9ca4a98205043a31f5c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:75:1c:df:28:6e:f5:aa:38:a7:3a:23:dc:
89:2f:4b:61:6b:ac:e7:42:82:fa:e6:02:97:c8:0b:
f5:e9:3f:ad:ab:54:c4:5b:92:7e:d3:4a:1d:3f:71:
a3:4d:df:09:8e:08:da:f5:f1:60:f3:e2:52:eb:8c:
e1:64:8d:19:b3:d4:1a:ae:9e:cc:39:67:b9:5e:ba:
1c:e0:9e:c6:8c:2f:1a:f9:71:1b:9d:1e:4d:aa:e5:
57:70:1f:61:30:dd:24:89:fd:80:5f:c1:71:12:e6:
f3:d7:b2:2d:54:ec:ce:a4:f4:0f:db:99:9f:d7:4c:
40:da:85:fc:31:7b:38:07:d4:e0:a2:6b:fd:05:ca:
cc:5f:8d:99:fd:0c:56:c1:ed:14:cf:69:93:ee:22:
3b:2e:32:1b:4f:9c:58:f9:f0:1d:df:69:93:53:35:
5d:e0:f2:2a:f3:e0:6e:39:84:17:c5:c5:56:99:57:
12:2a:73:9c:96:a0:c0:ca:42:dd:7c:46:4f:15:9e:
09:6c:d8:a7:34:2b:cb:07:ee:ac:a8:e2:74:f2:b2:
20:06:6a:f5:b9:ca:ca:1b:ee:23:89:3e:ff:8d:3e:
a6:91:cb:37:b0:ae:01:74:2a:24:95:ac:dd:37:40:
a1:aa:c9:0e:9e:6a:95:93:77:8c:5f:ef:d4:ec:c2:
e6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EA:B8:75:23:EF:3D:E9:AC:BD:9C:A4:A9:82:05:04:3A:31:F5:C2
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ea:6f:73:af:76:1e:27:a8:c0:a4:6c:db:3a:f0:9d:85:76:
31:79:82:c5:0a:68:1d:67:28:5f:22:55:4e:b8:6c:67:a6:01:
ee:82:d0:72:45:5f:37:eb:25:25:9c:42:fa:37:51:0b:6d:81:
45:ea:64:b3:bb:63:8c:3f:4a:50:bb:66:d4:ff:17:8b:6f:6e:
8c:79:37:1a:88:e1:a1:f7:47:1e:bc:5f:13:b9:9f:ca:b5:f6:
71:3e:ad:af:c8:46:11:32:c2:3f:fe:36:ac:f8:fa:48:7b:35:
77:19:61:a9:94:82:57:4d:da:c6:0c:94:f6:b7:cb:59:e0:42:
ca:fb:36:1c:54:9f:f0:66:6c:ec:f3:e2:d3:d6:92:d9:db:70:
6e:10:60:59:62:5a:12:25:6c:a2:d6:2c:6b:4e:02:3a:61:3d:
61:2d:59:fe:fc:63:41:fe:cb:60:bb:d4:04:53:dd:60:f3:0d:
fa:e6:e0:02:24:26:14:57:9a:b6:df:07:28:5e:b4:29:4d:ea:
dd:80:a3:94:a1:dc:66:67:2b:d5:9b:ba:3b:c8:c8:f1:76:42:
bd:30:18:ec:ba:7d:7f:76:22:4c:fb:2a:a0:4a:4e:b0:72:b5:
42:80:c4:a2:4e:50:a2:c3:63:51:95:0b:1f:fb:06:7a:cd:5f:
5f:de:be:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:52 2026 by rpki-client