Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: hb5rdQXsaL+eUf5UAroGevR2TIy4dg/XUUV7L+/7u5Q=
Subject key identifier: 5A:1D:89:2A:28:D3:8F:26:37:98:3A:0B:BC:EF:E2:28:46:C5:C9:FC
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 019FA0043BC19CFDC2401336A994BC1AD5CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 19CE
Signing time: Sun 26 Jul 2026 20:00:59 +0000
Manifest this update: Sun 26 Jul 2026 20:00:59 +0000
Manifest next update: Mon 27 Jul 2026 20:00:59 +0000
Files and hashes: 1: EK-BO9njT8D0PUd03822T1Wcn_Y.roa (hash: IVt2nvgD6bQiKsQebz3stonbNyplhQ3WbabmnplyKUM=)
2: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: weodcDzgH0/crMaS0ff0FLOnTVDpU8nNi0Xre7QgPg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:3b:c1:9c:fd:c2:40:13:36:a9:94:bc:1a:d5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Jul 26 20:00:59 2026 GMT
Not After : Jul 27 20:00:59 2026 GMT
Subject: CN=5a1d892a28d38f2637983a0bbcefe22846c5c9fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:6b:d4:ae:10:ab:b9:33:15:4f:b3:22:27:
1a:fd:bf:63:f7:ee:76:cf:74:f9:21:a8:09:2c:f4:
e6:92:ae:c4:63:9e:31:83:eb:e4:d3:60:6f:e1:af:
83:68:14:24:29:69:c8:a0:4a:88:5e:f3:e1:33:6d:
e2:89:8a:d3:2e:83:78:35:af:3e:6f:62:3a:54:aa:
3c:fb:b9:e9:5b:78:1e:d7:0c:61:7d:ad:c7:4f:8b:
88:8b:f4:e7:35:e7:75:fd:6d:d5:39:40:9f:60:c8:
13:2f:1e:78:e8:a5:af:74:49:76:08:84:78:55:c8:
82:5e:7b:0e:54:e4:04:9d:c5:86:cd:52:8b:75:70:
15:ec:6c:21:ec:a5:b0:cc:fa:aa:0b:f3:54:01:00:
6b:d8:7e:01:64:6d:db:51:c7:6c:55:41:7e:13:a2:
13:0e:0a:8e:de:9b:05:8e:52:ad:f6:59:73:9a:25:
05:05:0e:3f:56:75:3a:89:b6:53:73:9a:37:d0:89:
6a:50:10:b0:de:c3:c1:a6:da:ac:c0:0a:6a:0d:48:
aa:28:48:d8:24:ff:0f:9e:66:ad:4b:f2:76:d4:69:
75:2e:55:44:2f:ce:d7:a8:44:51:9c:c4:2c:a2:05:
46:c9:b7:47:1e:c8:af:d8:eb:59:0c:3e:7a:f1:5e:
64:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:1D:89:2A:28:D3:8F:26:37:98:3A:0B:BC:EF:E2:28:46:C5:C9:FC
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:92:2c:77:15:b1:0e:56:2e:e1:4f:d0:de:60:85:b2:97:63:
a1:72:36:96:c9:5a:8f:43:9d:5f:00:b0:d8:e3:29:fc:0d:ef:
4d:f0:6a:56:21:e8:bb:f1:7e:74:ba:f6:66:d9:80:fc:1e:ad:
8f:5c:77:5f:55:0e:e1:e0:ae:89:1a:4a:e1:9c:07:55:6c:e3:
9a:81:63:df:6c:3d:eb:99:3b:79:a6:ea:8c:90:15:4f:4c:f2:
9b:a9:16:6f:d0:0f:22:d3:c4:ca:73:82:5f:21:70:97:fa:26:
07:df:3e:1c:dc:d0:ab:ba:d5:5d:03:0a:0a:60:95:31:67:6a:
1c:ef:25:a0:ba:a9:2d:18:dc:74:e0:e2:67:1b:9d:07:2d:23:
c9:5a:05:20:71:f4:45:f4:f4:5c:99:be:86:a9:7d:01:69:ee:
db:a1:70:80:f8:da:fa:86:1d:0d:b9:70:a3:8b:03:b1:f6:9a:
57:f7:03:dc:1c:6a:91:b4:81:98:51:d1:43:a0:5d:20:08:76:
c7:66:bc:90:9a:36:a6:64:36:5b:8e:b8:84:b3:8d:98:40:3a:
4c:9c:57:9c:19:c9:48:0e:05:5f:bc:ae:de:96:67:42:44:30:
69:a6:66:4a:8d:66:78:fc:83:b0:c9:79:59:93:af:82:e2:49:
00:4a:74:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gBDvBnP3CQBM2qZS8GtXKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjcwZTM0ODhkYzgzMWQ0NWE3NTc0NGUyZjhiYmEyNjdm
ZDMxZDYwHhcNMjYwNzI2MjAwMDU5WhcNMjYwNzI3MjAwMDU5WjAzMTEwLwYDVQQD
Eyg1YTFkODkyYTI4ZDM4ZjI2Mzc5ODNhMGJiY2VmZTIyODQ2YzVjOWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRZr1K4Qq7kzFU+zIica/b9j9+52
z3T5IagJLPTmkq7EY54xg+vk02Bv4a+DaBQkKWnIoEqIXvPhM23iiYrTLoN4Na8+
b2I6VKo8+7npW3ge1wxhfa3HT4uIi/TnNed1/W3VOUCfYMgTLx546KWvdEl2CIR4
VciCXnsOVOQEncWGzVKLdXAV7Gwh7KWwzPqqC/NUAQBr2H4BZG3bUcdsVUF+E6IT
DgqO3psFjlKt9llzmiUFBQ4/VnU6ibZTc5o30IlqUBCw3sPBptqswApqDUiqKEjY
JP8PnmatS/J21Gl1LlVEL87XqERRnMQsogVGybdHHsiv2OtZDD568V5kewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFodiSoo048mN5g6C7zv4ihGxcn8MB8GA1UdIwQY
MBaAFBq3DjSI3IMdRadXROL4u6Jn/THWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMt
MDk3MzNjYjAyNjllLzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMtMDk3MzNjYjAyNjll
LzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJIsdxWx
DlYu4U/Q3mCFspdjoXI2lslaj0OdXwCw2OMp/A3vTfBqViHou/F+dLr2ZtmA/B6t
j1x3X1UO4eCuiRpK4ZwHVWzjmoFj32w965k7eabqjJAVT0zym6kWb9APItPEynOC
XyFwl/omB98+HNzQq7rVXQMKCmCVMWdqHO8loLqpLRjcdODiZxudBy0jyVoFIHH0
RfT0XJm+hql9AWnu26FwgPja+oYdDblwo4sDsfaaV/cD3BxqkbSBmFHRQ6BdIAh2
x2a8kJo2pmQ2W464hLONmEA6TJxXnBnJSA4FX7yu3pZnQkQwaaZmSo1mePyDsMl5
WZOvguJJAEp0Lw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:59:11 2026 by rpki-client