
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
File: GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft (raw, json)
Hash identifier: Pr1cQalHDJtapAPB9UUx2P/5Wk/RGPuIYomW66btWxQ=
Subject key identifier: 6B:D9:4B:D2:0A:92:4E:DE:95:69:EE:8C:EE:17:7D:A1:70:E5:CD:8C
Authority key identifier: 1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59
Certificate issuer: /CN=1ab7a257e2617897749952fe56df1940c9a38659
Certificate serial: 019D37F78435363E0BE8937C6DCD2BE491EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
Manifest number: 144D
Signing time: Sun 29 Mar 2026 05:01:01 +0000
Manifest this update: Sun 29 Mar 2026 05:01:01 +0000
Manifest next update: Mon 30 Mar 2026 05:01:01 +0000
Files and hashes: 1: GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl (hash: DKrd6tbbvdGLyI4JggSbJzTmv8+EDQ5aDZjcyUfDzWs=)
2: hAkeq7GRn7BJ9C2KAa5e_cpADdo.roa (hash: Np2uhqI5h6brKBft17+MzN85jTcWcCkVrose4xwa1iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:84:35:36:3e:0b:e8:93:7c:6d:cd:2b:e4:91:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab7a257e2617897749952fe56df1940c9a38659
Validity
Not Before: Mar 29 05:01:01 2026 GMT
Not After : Mar 30 05:01:01 2026 GMT
Subject: CN=6bd94bd20a924ede9569ee8cee177da170e5cd8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:d0:c8:40:c1:06:28:d7:72:c8:8f:1d:6b:
68:0b:7c:e5:50:f9:57:47:0b:82:a4:d0:df:64:b9:
02:16:62:83:67:cd:27:8b:6c:42:16:f7:0c:c3:e3:
bb:e4:6b:26:e5:d3:39:4c:d3:40:89:3f:8b:40:41:
76:cf:89:9e:f4:2c:1f:ce:ec:26:15:67:d7:e6:f0:
c4:e0:56:06:b5:b7:b3:f5:ff:b3:c1:29:bd:86:c2:
19:c5:e7:06:08:f6:62:6a:45:a7:5f:82:d7:51:a0:
68:b5:2e:98:56:ed:93:f3:c9:8b:4e:ff:6c:de:32:
fe:0f:ec:09:45:db:af:02:40:81:30:c8:fb:fb:90:
aa:07:4e:16:59:17:33:bf:4c:17:02:54:a7:9a:10:
5a:dd:6a:a1:f2:65:4c:d6:f3:50:27:06:2c:8c:01:
55:d9:0b:8a:a2:a5:76:2b:f6:9e:4c:29:c2:a2:20:
f8:46:dd:02:ec:8d:30:75:0e:75:0a:51:c2:d0:f1:
60:e6:bc:eb:49:a5:d0:35:8c:53:b4:81:02:c6:5e:
75:93:cd:01:dd:c9:47:2d:4f:3a:23:6b:c7:65:ae:
10:da:36:cf:47:44:b9:de:32:68:ad:d1:f9:55:bb:
b9:9e:52:66:fe:67:61:84:54:34:e3:56:ef:09:28:
09:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D9:4B:D2:0A:92:4E:DE:95:69:EE:8C:EE:17:7D:A1:70:E5:CD:8C
X509v3 Authority Key Identifier:
keyid:1A:B7:A2:57:E2:61:78:97:74:99:52:FE:56:DF:19:40:C9:A3:86:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GreiV-JheJd0mVL-Vt8ZQMmjhlk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c3daf9-3721-4591-8890-1e7a505864ba/1/GreiV-JheJd0mVL-Vt8ZQMmjhlk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fe:6c:86:bc:59:93:c3:22:fb:64:bb:8e:e3:01:90:8c:f2:
c4:cb:45:7d:73:15:a0:95:84:8b:c7:ed:3e:42:0a:6b:dd:d7:
c2:12:ac:57:49:fc:1b:f9:9d:3e:c2:2a:6e:4e:63:08:77:b7:
08:e4:41:94:df:a8:01:be:d7:76:7e:67:61:c2:0c:89:5c:db:
74:58:8e:cc:3b:f8:a0:03:07:f4:0a:a5:ae:bc:48:de:32:9b:
91:b4:85:a0:0b:78:c4:e3:fb:94:a9:cc:03:0d:c2:b7:bf:d3:
9b:b5:b1:01:c6:dc:bc:29:fb:0d:df:14:b8:98:e8:54:41:5b:
bb:eb:46:2e:e8:2f:4e:9e:ac:f0:62:a8:43:e6:61:20:09:f7:
fd:3e:7a:a2:25:70:10:a4:c3:0d:81:45:8a:c3:d9:3c:7e:c0:
ff:0d:56:c2:09:4d:4d:a2:6e:e7:ef:96:d9:57:1f:4c:9b:f3:
01:3d:50:a6:c8:ca:ac:51:f5:2d:4d:fd:5a:fc:58:c7:f2:83:
0f:82:11:60:cb:48:1b:7e:b7:0f:86:7b:a1:d6:db:df:57:9c:
7a:21:0e:8d:9f:a9:ed:e6:0b:7d:7c:36:1b:84:1c:23:5d:7f:
77:5c:87:f2:aa:de:fd:40:a9:25:c1:90:76:e5:e7:26:88:86:
cc:cc:60:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:00 2026 by rpki-client