Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
File: GryfszEqSr8d3ChRjnYI4Owydd8.mft (raw, json)
Hash identifier: zuthB8b8s7SP83Bia3F6OJYWYa45ZHYdCuAjXBm8zpg=
Subject key identifier: E1:B5:A5:29:47:E1:84:97:2D:99:8C:5F:3E:A5:A5:2C:14:A7:26:BC
Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Certificate serial: 019CC03BCF21ADDE1A1389BECE1B0B4F4589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
Manifest number: 0100
Signing time: Thu 05 Mar 2026 23:01:10 +0000
Manifest this update: Thu 05 Mar 2026 23:01:10 +0000
Manifest next update: Fri 06 Mar 2026 23:01:10 +0000
Files and hashes: 1: 6bjSbhqwKfCJyzuoHErLZFiQKFE.roa (hash: fv9LqISQEhkBU4rB+B0VGbDuz4p90Et8y3hrdyyRFaA=)
2: DJdi3T9GBdXyWlmkF-1AfJu00z4.roa (hash: 9uSdWnZMdUgF7nF1Y5Ayng87XmAG51T65tQ1ewgeEQc=)
3: GryfszEqSr8d3ChRjnYI4Owydd8.crl (hash: n/GBCJwLW9VMhCb2ArKv9kGjoPfQoqyjqg7JWEb255c=)
4: Xvu0C67-BWy0g8WYONkS-2tc_BM.roa (hash: 5IIvu8y7oObXXHmvGLjhkK8E3RwHEJbfJJNw4p6yHig=)
5: oBSIemnga5g3zbM0MhQPYpUQkXk.roa (hash: vUqBxjZNdA/2K4hIUfgJGI6rYfhtyuZbedTN6yjPJdk=)
6: schmDmE2CKJCpiAehrjpSNlTDGg.roa (hash: +x21cIiTbRvA+l5+kVYBAJIbR8+s45Qj0TzBMrcAZH4=)
7: ta7hQSc7ARZjjGzwCStEeYhJ0BE.roa (hash: Py8T1t5CIRrQnYUBu52tDBLLob8RSsHoARPvObfZdB0=)
8: vdxk280EZJdsjHh7wsXDY4EoHlo.roa (hash: +1LA/Ivx7z3Vxl1WaI94b4YLVsQkfux8YU6LuCoqZyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c0:3b:cf:21:ad:de:1a:13:89:be:ce:1b:0b:4f:45:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Validity
Not Before: Mar 5 23:01:10 2026 GMT
Not After : Mar 6 23:01:10 2026 GMT
Subject: CN=e1b5a52947e184972d998c5f3ea5a52c14a726bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bb:20:52:25:d9:47:fe:24:68:3b:2a:80:1f:
7a:7a:c0:84:d7:53:74:48:21:8d:b4:12:45:c3:bd:
62:a5:e4:e2:58:aa:49:aa:96:31:4a:fe:ff:ed:b7:
38:b6:4a:8e:e5:c7:5a:8e:6c:88:3c:75:cb:48:a5:
12:ce:5b:ec:fe:3f:85:19:8d:2e:26:58:32:bb:7f:
0e:48:f7:d9:99:39:60:1c:6d:24:80:0d:c9:e7:44:
6e:c4:c9:69:59:94:24:2a:f4:0a:d6:fd:e2:30:56:
30:c5:0f:50:f1:0f:8e:d3:38:0f:55:95:19:6d:ac:
23:14:92:d0:59:8b:cd:1e:07:c2:19:59:28:87:45:
3d:0f:48:bb:97:3e:e4:b5:c4:d6:55:9f:32:bf:71:
29:39:a1:7a:ce:98:24:c5:c0:b5:28:8e:db:7a:b7:
36:89:57:55:c7:96:10:8c:fb:3d:b3:4f:a8:28:a3:
b6:39:4c:4b:4d:29:99:60:5e:47:f2:07:04:af:a8:
1f:f9:19:b5:b2:11:55:f1:8b:4f:cd:28:91:2c:80:
00:a2:56:c9:f9:ce:97:47:96:84:a7:7f:48:40:5c:
9d:09:f0:67:bf:de:a9:41:66:df:3d:9d:c4:30:09:
de:57:40:3f:ba:83:bd:ae:87:14:b5:89:3b:39:06:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B5:A5:29:47:E1:84:97:2D:99:8C:5F:3E:A5:A5:2C:14:A7:26:BC
X509v3 Authority Key Identifier:
keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:7d:7f:ea:6e:65:f9:70:c7:ac:64:b4:fa:23:e6:8d:9f:12:
57:38:16:f2:59:ff:9b:b6:42:bc:ba:0c:95:c0:75:0b:f2:c5:
b0:8c:f6:fb:d2:ff:b0:89:00:14:97:f7:ce:4b:36:33:5e:21:
56:e6:71:01:e0:90:42:ec:4d:31:a6:2b:be:27:64:1b:51:45:
fb:bd:26:18:e3:3c:d4:61:dd:0a:63:14:74:b4:a0:20:9c:03:
93:67:81:ec:55:16:69:4e:6e:d2:1a:e3:75:be:da:92:57:b8:
ee:e0:81:06:b9:53:de:a9:ca:84:e8:26:34:71:0d:77:28:fc:
bd:c7:9a:70:97:29:79:78:b3:03:ed:85:5b:18:dd:19:b9:81:
2c:25:57:c9:28:1e:4b:f6:f6:c4:c9:74:01:4e:42:87:cc:ff:
cb:31:a4:30:b5:37:68:07:26:de:1f:3e:f2:d0:8e:d2:ae:7f:
e6:23:58:f7:ed:f3:ae:32:bd:8f:ee:38:cc:76:47:27:8e:d0:
f4:46:96:4e:87:e6:9e:1a:eb:04:6e:c4:c6:51:e6:05:66:01:
e1:0d:2a:25:89:3c:72:db:3e:3b:14:93:5d:e7:68:37:f6:c6:
d7:40:8a:2c:88:76:95:9b:2a:e6:dc:cc:7c:69:65:fd:07:99:
6d:c2:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 04:47:19 2026 by rpki-client