Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: uVNr2qy2WjfsBboclkLMQq9Cd1iL+9fQlDh0m8GhNNo=
Subject key identifier: B2:71:66:5B:AA:3F:EE:C2:8B:7A:6E:BC:AE:A3:8A:2D:5E:C3:66:87
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 019DA4C17B3E977EB9E4180ED9248500147B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 146E
Signing time: Sun 19 Apr 2026 08:00:36 +0000
Manifest this update: Sun 19 Apr 2026 08:00:36 +0000
Manifest next update: Mon 20 Apr 2026 08:00:36 +0000
Files and hashes: 1: RpMIwwKNDJ2StC4zRLgKJPlvR8w.roa (hash: cXPNnS64bUQTjJNvAeCad/jzk4TlUd0umXx2TLacFB0=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: fcMFBpuTsMuEEGkg8msYcadT+CgMu+Iimf+/clOyoo0=)
3: kp-VMkih7qc6B23hHp-3gThKHNw.roa (hash: bxojK3FurSVV0NeQ9kkDlIbku+sPTPShkBdp5lGAEYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:7b:3e:97:7e:b9:e4:18:0e:d9:24:85:00:14:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Apr 19 08:00:36 2026 GMT
Not After : Apr 20 08:00:36 2026 GMT
Subject: CN=b271665baa3feec28b7a6ebcaea38a2d5ec36687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:53:1a:1c:53:c6:b0:49:90:39:11:c5:c8:8c:
1e:ff:61:55:44:c3:86:80:0f:53:55:e0:53:93:9e:
eb:db:86:fd:6f:37:04:bc:df:a7:9e:ff:ea:f0:9a:
ce:01:6b:bc:94:3a:69:64:e2:d2:29:67:81:16:7f:
10:52:c2:83:ad:8e:0d:24:5d:91:03:ac:d7:10:46:
35:c1:53:6c:96:bd:cf:23:c0:77:53:bc:f2:44:1d:
ad:29:e4:16:13:57:c8:d9:cf:4b:25:f1:02:2f:ab:
f8:70:81:f2:6a:f0:a3:99:19:82:92:f7:6d:3e:2e:
6b:af:e7:cc:d1:be:41:a5:50:fc:9b:a5:0a:29:00:
8e:ec:e1:10:85:49:cb:c5:41:37:37:b4:a5:d5:3f:
2d:2a:f4:59:58:21:16:5d:72:1f:9b:33:bb:ab:93:
fd:cc:a4:32:44:c9:2a:3d:36:8a:ba:51:a2:04:99:
f2:3f:98:e6:52:dc:9e:b8:fa:69:88:f7:24:63:09:
a2:ae:3b:1f:31:1c:a2:63:6e:4e:6b:0f:ea:dd:98:
0c:2a:c5:76:eb:d2:fe:54:d4:f1:76:c9:ad:ea:91:
1b:cf:84:88:dc:b0:a2:de:55:26:78:5a:36:1c:0b:
3e:98:18:18:1b:0b:82:b0:f5:91:53:9c:95:bf:43:
e0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:71:66:5B:AA:3F:EE:C2:8B:7A:6E:BC:AE:A3:8A:2D:5E:C3:66:87
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:79:d4:51:d1:40:aa:54:84:eb:dc:5e:08:9b:7c:68:07:c3:
99:f0:97:67:ac:64:51:2c:4a:f6:22:75:69:7d:99:ff:d2:f8:
aa:20:dd:aa:8d:14:62:c9:c4:03:78:53:cf:99:34:b0:b5:98:
9f:9c:ca:02:48:ba:46:80:e3:e8:49:5d:db:6a:dd:d9:a2:ed:
97:06:ee:c6:98:09:81:04:11:91:a2:60:15:25:3b:ab:91:c6:
7a:ce:f3:1f:43:c6:f7:10:9e:5f:ea:3f:52:83:22:44:ab:aa:
cb:7a:f7:f0:50:86:d3:cd:8c:d9:29:48:7f:15:5b:7f:f8:b4:
0d:99:dc:9a:54:03:50:9e:b0:de:fd:f2:60:37:a9:41:02:1b:
a2:3b:d0:34:c5:d9:f9:e4:78:63:df:34:d3:2d:aa:1d:78:d6:
ac:a4:c2:a7:c0:cd:7b:e8:2f:73:62:59:e6:d4:0e:64:7e:ba:
3f:3c:09:6f:6c:77:d0:34:07:ee:2b:fb:74:fd:68:f1:ca:e3:
96:40:ae:4a:79:83:62:5b:61:05:93:49:d6:0f:1a:0c:0b:c5:
67:aa:06:0c:f6:5f:b9:3d:1c:c1:ca:8f:cc:dd:ab:51:e1:d0:
35:02:28:db:24:76:4f:c9:ce:28:3b:fc:5d:cd:35:92:bf:3d:
87:10:c4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:26 2026 by rpki-client