Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
File: GryfszEqSr8d3ChRjnYI4Owydd8.mft (raw, json)
Hash identifier: uOQJptdoOVlDSdzcvKQ0/aAaXHOKFNnN0hK+tcrYyY4=
Subject key identifier: 60:8C:2A:C1:C0:23:04:BE:88:3A:CB:50:E8:DD:A5:C0:88:22:28:C0
Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Certificate serial: 019DA943A538F34000FD36294C3522988730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
Manifest number: 017B
Signing time: Mon 20 Apr 2026 05:01:15 +0000
Manifest this update: Mon 20 Apr 2026 05:01:15 +0000
Manifest next update: Tue 21 Apr 2026 05:01:15 +0000
Files and hashes: 1: DJdi3T9GBdXyWlmkF-1AfJu00z4.roa (hash: 9uSdWnZMdUgF7nF1Y5Ayng87XmAG51T65tQ1ewgeEQc=)
2: GryfszEqSr8d3ChRjnYI4Owydd8.crl (hash: HPbDQX0SJ5QOny/dp7YDcV3akUiYnJ6wGPjiKyK+6DA=)
3: RA0zayGPGSwaJHtlDtsJ8Xbgj5c.roa (hash: dZRiXeLTPEt1Z5RpO/wZBxbAns2Cy2hBCslnEmu5jIw=)
4: Xvu0C67-BWy0g8WYONkS-2tc_BM.roa (hash: 5IIvu8y7oObXXHmvGLjhkK8E3RwHEJbfJJNw4p6yHig=)
5: schmDmE2CKJCpiAehrjpSNlTDGg.roa (hash: +x21cIiTbRvA+l5+kVYBAJIbR8+s45Qj0TzBMrcAZH4=)
6: ta7hQSc7ARZjjGzwCStEeYhJ0BE.roa (hash: Py8T1t5CIRrQnYUBu52tDBLLob8RSsHoARPvObfZdB0=)
7: vdxk280EZJdsjHh7wsXDY4EoHlo.roa (hash: +1LA/Ivx7z3Vxl1WaI94b4YLVsQkfux8YU6LuCoqZyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:43:a5:38:f3:40:00:fd:36:29:4c:35:22:98:87:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Validity
Not Before: Apr 20 05:01:15 2026 GMT
Not After : Apr 21 05:01:15 2026 GMT
Subject: CN=608c2ac1c02304be883acb50e8dda5c0882228c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:9d:91:53:6d:1e:e8:9a:4d:5b:7d:9e:ad:
71:a4:0f:31:4d:63:6d:2d:cd:38:a1:5c:cc:7c:dc:
ec:62:fe:4c:d6:ce:25:a9:d2:7f:93:83:84:7b:75:
75:a7:8f:cb:fb:f8:4c:38:f4:28:02:64:e8:4b:f3:
c7:82:03:e8:68:2e:17:20:bf:70:33:c2:b6:59:cf:
39:2b:7b:ac:e5:5d:d0:45:b5:9b:5c:52:3b:3b:db:
c3:94:39:fd:82:d6:69:1d:15:27:82:c0:2e:32:bd:
d1:52:57:84:c2:64:36:2d:04:a4:9f:28:74:92:40:
51:90:73:5a:28:6d:3a:ef:26:e5:49:d9:f2:45:8a:
6e:0f:22:18:71:95:e1:6b:27:f1:e8:b4:fd:9f:9f:
4b:f0:46:39:23:4c:f4:43:fe:64:60:57:c4:62:5a:
98:27:97:9d:4f:c5:27:c4:58:8f:72:69:86:bd:93:
96:19:77:04:35:6b:d9:77:f5:8f:c3:7d:47:b2:82:
e8:58:e0:a8:41:09:24:5a:c0:29:64:d1:ed:19:84:
7b:ef:1b:52:bf:08:7e:9f:b1:fc:8e:d9:2a:1d:8d:
2e:c9:d6:36:c0:ea:bd:bc:16:a6:9f:d9:c3:4a:94:
2d:9d:de:a8:08:bd:07:f0:5e:5f:db:15:f8:40:8b:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:8C:2A:C1:C0:23:04:BE:88:3A:CB:50:E8:DD:A5:C0:88:22:28:C0
X509v3 Authority Key Identifier:
keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0e:0f:26:3f:ba:92:d0:ec:59:a4:13:0b:13:e0:7f:b9:e1:
13:ad:d5:e8:b1:aa:23:c5:3c:b2:1a:f4:07:6f:e0:e6:26:19:
43:37:f4:fd:cb:4d:f0:a8:89:f2:86:5c:9b:11:5f:80:b8:a0:
f5:51:3f:bb:2c:e2:ea:cf:28:1b:e1:ed:45:1c:fa:9b:04:26:
e7:3a:3f:eb:85:ff:f9:97:58:e5:7f:d6:3b:1c:c0:1b:f6:4c:
c1:15:98:40:b7:f7:94:6c:f3:78:5c:50:82:aa:3c:01:2a:10:
26:b7:d6:da:1a:f2:41:fe:79:8a:17:77:e0:e7:92:91:db:22:
cb:a7:06:01:81:d5:3d:56:d5:02:3d:84:bd:d9:8e:90:ee:e4:
00:f3:df:e6:5b:f1:2f:11:41:bf:80:11:ff:81:52:19:0e:1e:
5b:b0:78:b9:c0:b9:ad:78:0c:9d:3e:e5:ba:92:7a:f7:1c:4e:
e7:35:b3:41:2a:5d:26:b8:0c:ee:f8:11:95:ff:92:d1:04:93:
54:e5:d3:a9:73:aa:8f:4f:a8:f2:7d:90:87:83:dd:d7:89:4e:
ef:21:4a:57:c2:89:9a:22:0a:08:32:b3:8b:8c:06:07:25:6a:
5d:bd:03:5d:9a:aa:ee:1f:f4:f9:22:d5:fd:be:f5:01:08:4b:
28:56:4f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:27:39 2026 by rpki-client