Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: jAnpQzCfJDEwZQ7Kl6RTuViEqiOV4es8hD3DV/9kyow=
Subject key identifier: 56:95:87:72:EC:3B:9A:33:77:E4:33:14:BD:04:8B:9E:22:1A:2A:28
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 019D39E5532719954AEAF8DE90AD385B218E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 14:00:23 +0000
Manifest this update: Sun 29 Mar 2026 14:00:23 +0000
Manifest next update: Mon 30 Mar 2026 14:00:23 +0000
Files and hashes: 1: EK-BO9njT8D0PUd03822T1Wcn_Y.roa (hash: IVt2nvgD6bQiKsQebz3stonbNyplhQ3WbabmnplyKUM=)
2: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: zeFoVtFtL9Zxje4F4BK5W6e8YC5Twk4TXnlmO9Gf4Ng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:53:27:19:95:4a:ea:f8:de:90:ad:38:5b:21:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Mar 29 14:00:23 2026 GMT
Not After : Mar 30 14:00:23 2026 GMT
Subject: CN=56958772ec3b9a3377e43314bd048b9e221a2a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:1b:6c:3a:86:47:f8:1c:55:1a:31:c6:1a:
b6:9d:f2:2a:f2:72:fa:84:16:09:31:13:50:6f:4d:
4c:c9:c9:a4:7c:38:74:8a:75:b5:ef:7b:73:ff:b3:
51:d4:3e:6d:6e:db:af:10:9a:63:29:2e:6e:f4:87:
e3:d2:52:7f:11:b3:bf:69:d6:e0:62:ba:12:05:93:
08:37:4a:5b:b0:56:15:c9:4a:8c:9e:e3:e4:ec:3e:
6f:94:53:e9:73:f6:cd:4d:e8:aa:8c:8e:17:2a:1f:
eb:c4:3f:49:49:e7:38:53:65:16:82:99:e5:cc:75:
4d:9d:f9:75:1d:a0:c3:86:29:58:d5:5d:55:34:11:
97:34:25:d0:cd:c7:2f:46:c0:da:66:aa:71:4c:29:
d6:e6:47:36:a6:9f:1e:a5:e0:34:a3:05:a0:41:cc:
57:29:7b:0e:cc:26:b0:f0:23:f5:d1:6e:ab:24:be:
48:f4:cc:0b:bd:92:5e:fe:44:54:8c:b1:37:6c:56:
37:86:42:66:3d:27:b4:01:f4:84:1d:2b:2d:58:e4:
ca:a5:46:bb:25:d3:c8:61:05:1f:6a:cc:5f:78:76:
95:a3:f8:63:a7:b6:17:3d:24:e3:8c:ca:08:74:da:
72:fd:ac:27:d7:2a:3a:cb:26:c0:29:79:70:4b:ad:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:95:87:72:EC:3B:9A:33:77:E4:33:14:BD:04:8B:9E:22:1A:2A:28
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0a:58:32:f5:78:c5:b6:38:62:1f:b2:aa:6f:41:e8:25:ee:
47:fe:86:2c:e9:0b:c3:bc:39:e9:eb:8c:cc:4e:dd:46:3f:f3:
a4:4d:f1:63:08:c9:43:ef:8a:df:2f:b9:e2:21:a7:47:f7:cb:
4f:5a:cd:61:56:43:06:05:de:49:eb:14:26:de:9d:f6:05:72:
43:20:4e:4c:4b:b1:0d:2e:00:45:39:43:a2:c5:bc:6e:c8:f1:
6e:ed:0c:1d:ef:7b:4e:52:7b:09:e0:cb:e3:ec:64:85:b1:fc:
f7:27:40:50:2b:24:de:b4:97:4e:75:76:7d:f9:a5:52:68:37:
3f:eb:13:e1:0e:95:ca:fc:0f:af:f7:2d:f7:f4:e3:e6:0c:cc:
d1:e2:d9:f4:4d:f3:c1:07:d9:93:13:3a:6f:3e:e6:8a:52:8f:
fb:f7:78:a0:89:d8:b6:cd:3d:54:4c:94:2f:ae:7d:d4:17:7f:
a2:9f:19:91:ca:1a:e5:86:46:34:3b:80:e5:fd:5a:58:1c:89:
db:99:f5:71:b6:7d:bb:4b:a7:07:5b:dd:78:f7:e1:f3:be:27:
98:40:41:b1:1a:9f:04:ca:0b:97:e7:58:cb:c7:24:cd:cc:7c:
a2:45:b3:54:6c:70:13:49:73:c3:be:c8:20:fb:8f:19:7f:a3:
6f:a3:d3:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ055VMnGZVK6vjekK04WyGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjcwZTM0ODhkYzgzMWQ0NWE3NTc0NGUyZjhiYmEyNjdm
ZDMxZDYwHhcNMjYwMzI5MTQwMDIzWhcNMjYwMzMwMTQwMDIzWjAzMTEwLwYDVQQD
Eyg1Njk1ODc3MmVjM2I5YTMzNzdlNDMzMTRiZDA0OGI5ZTIyMWEyYTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoQbbDqGR/gcVRoxxhq2nfIq8nL6
hBYJMRNQb01MycmkfDh0inW173tz/7NR1D5tbtuvEJpjKS5u9Ifj0lJ/EbO/adbg
YroSBZMIN0pbsFYVyUqMnuPk7D5vlFPpc/bNTeiqjI4XKh/rxD9JSec4U2UWgpnl
zHVNnfl1HaDDhilY1V1VNBGXNCXQzccvRsDaZqpxTCnW5kc2pp8epeA0owWgQcxX
KXsOzCaw8CP10W6rJL5I9MwLvZJe/kRUjLE3bFY3hkJmPSe0AfSEHSstWOTKpUa7
JdPIYQUfasxfeHaVo/hjp7YXPSTjjMoIdNpy/awn1yo6yybAKXlwS608hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaVh3LsO5ozd+QzFL0Ei54iGiooMB8GA1UdIwQY
MBaAFBq3DjSI3IMdRadXROL4u6Jn/THWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMt
MDk3MzNjYjAyNjllLzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMtMDk3MzNjYjAyNjll
LzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwpYMvV4
xbY4Yh+yqm9B6CXuR/6GLOkLw7w56euMzE7dRj/zpE3xYwjJQ++K3y+54iGnR/fL
T1rNYVZDBgXeSesUJt6d9gVyQyBOTEuxDS4ARTlDosW8bsjxbu0MHe97TlJ7CeDL
4+xkhbH89ydAUCsk3rSXTnV2ffmlUmg3P+sT4Q6VyvwPr/ct9/Tj5gzM0eLZ9E3z
wQfZkxM6bz7milKP+/d4oInYts09VEyUL6591Bd/op8Zkcoa5YZGNDuA5f1aWByJ
25n1cbZ9u0unB1vdePfh874nmEBBsRqfBMoLl+dYy8ckzcx8okWzVGxwE0lzw77I
IPuPGX+jb6PTrg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 17:19:02 2026 by rpki-client