
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
File: GryfszEqSr8d3ChRjnYI4Owydd8.mft (raw, json)
Hash identifier: AevySAXSwSHEBZSkpDms27Qxb0bsYcuBgLBZPad799c=
Subject key identifier: 4D:41:0F:31:F7:5F:DD:9F:C4:11:A3:59:C2:AE:66:9B:15:08:E9:54
Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Certificate serial: 01A1686BA20B1B5068A9A6CC82FE6C6F3FE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
Manifest number: 036E
Signing time: Fri 23 Oct 2026 11:00:46 +0000
Manifest this update: Fri 23 Oct 2026 11:00:46 +0000
Manifest next update: Sat 24 Oct 2026 11:00:46 +0000
Files and hashes: 1: DJdi3T9GBdXyWlmkF-1AfJu00z4.roa (hash: 9uSdWnZMdUgF7nF1Y5Ayng87XmAG51T65tQ1ewgeEQc=)
2: GryfszEqSr8d3ChRjnYI4Owydd8.crl (hash: K7u1r+xpVyVj6eDBjD6qaprvz+VWCkYMCUg3BeRXev0=)
3: REiaLPFJMgnbb32-B6MU-uTjIlI.roa (hash: nKuK7TPAmuzDf184++qSMR2f3U6nDVTJDG8nEA5Zshs=)
4: Xvu0C67-BWy0g8WYONkS-2tc_BM.roa (hash: 5IIvu8y7oObXXHmvGLjhkK8E3RwHEJbfJJNw4p6yHig=)
5: schmDmE2CKJCpiAehrjpSNlTDGg.roa (hash: +x21cIiTbRvA+l5+kVYBAJIbR8+s45Qj0TzBMrcAZH4=)
6: ta7hQSc7ARZjjGzwCStEeYhJ0BE.roa (hash: Py8T1t5CIRrQnYUBu52tDBLLob8RSsHoARPvObfZdB0=)
7: vdxk280EZJdsjHh7wsXDY4EoHlo.roa (hash: +1LA/Ivx7z3Vxl1WaI94b4YLVsQkfux8YU6LuCoqZyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 11:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:6b:a2:0b:1b:50:68:a9:a6:cc:82:fe:6c:6f:3f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Validity
Not Before: Oct 23 11:00:46 2026 GMT
Not After : Oct 24 11:00:46 2026 GMT
Subject: CN=4d410f31f75fdd9fc411a359c2ae669b1508e954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:66:39:0e:84:a3:ef:df:65:b1:cf:f9:7e:93:
87:27:8d:cf:45:75:d7:fc:fc:4e:a9:8c:fe:9e:4e:
0e:2f:af:aa:85:81:34:4e:6c:72:54:b2:5e:a5:e3:
d9:c6:38:80:4a:d8:77:98:13:ed:a5:1c:0b:fc:f1:
6e:7e:41:52:a8:9c:ab:dc:2f:8f:78:8f:ff:cf:c9:
99:67:3d:8c:ac:13:76:8a:46:81:0a:94:27:18:91:
61:82:88:bb:34:6a:f3:d8:8f:b0:9e:39:98:b6:45:
a8:27:cf:9a:49:fb:6d:e6:6d:a4:95:9b:fc:33:81:
63:cd:88:18:e8:43:c3:0f:b7:64:81:86:2f:70:08:
b3:ee:9d:d5:b7:57:3d:c2:28:4d:b8:16:ea:66:0e:
96:3e:45:84:27:43:74:69:b3:8b:79:34:2f:fb:1f:
d6:24:1e:09:a9:6e:54:1a:4f:85:33:28:c0:79:a0:
2d:61:b2:97:63:65:b9:19:c7:f6:01:fa:5a:14:5d:
64:50:25:a3:83:0f:51:c1:1a:d1:7d:ab:83:59:1b:
d2:a4:88:f5:a7:25:5f:00:87:ee:a5:67:94:c0:ce:
fd:01:21:08:d4:65:1f:40:a5:34:8d:07:eb:f8:5d:
22:51:70:59:c5:46:10:18:f5:46:88:0a:7a:cd:de:
f9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:41:0F:31:F7:5F:DD:9F:C4:11:A3:59:C2:AE:66:9B:15:08:E9:54
X509v3 Authority Key Identifier:
keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:17:70:8a:30:77:cf:5d:cd:64:b4:7c:69:c9:73:ab:52:aa:
65:91:00:05:5f:e9:85:d5:7c:a0:29:b8:bc:48:1f:f5:0d:cf:
30:ee:bc:36:2b:8f:6b:a0:36:8b:ab:ff:b3:78:32:70:17:a9:
cc:e1:65:04:8f:fe:a5:40:32:23:22:07:7f:b9:05:fa:2b:54:
ee:50:cb:8b:fe:67:87:73:bb:7e:01:d7:dc:6e:f7:6b:8b:fa:
03:01:0d:fc:b9:92:da:a3:87:49:5d:db:05:fc:b8:27:c7:f2:
de:99:21:08:90:d0:7f:01:4f:f5:2a:8d:ff:19:f6:ac:42:d8:
ca:97:79:36:24:51:b7:52:11:de:7f:1c:72:08:a8:89:39:06:
77:e3:3e:f4:49:08:79:98:b2:fb:2c:7e:a8:58:5a:d8:38:73:
a7:aa:4e:17:fe:85:1c:56:44:b1:1a:ac:df:e5:3a:77:70:1b:
a7:74:e9:fb:ab:b1:49:f4:1f:87:de:bf:af:f1:8c:01:5f:f1:
08:bd:83:28:ae:27:d5:d5:26:83:ae:f6:9a:84:81:bf:3e:56:
c6:2c:99:d2:59:6f:3b:47:fd:9b:7e:c5:94:1d:b9:18:3b:81:
45:aa:d8:dd:29:14:b7:e7:ee:c0:ac:fa:a9:ed:00:10:14:2d:
e9:59:3a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 21:07:23 2026 by rpki-client