Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
File: grE25oINlPA7HF1x7uPUsiGRUo8.mft (raw, json)
Hash identifier: sn49KVA73T22d5i+DE/JrhYv0ExxftNlE/2vQGhiCtQ=
Subject key identifier: 43:B4:9C:A3:B7:00:31:05:91:02:13:66:1D:4A:AF:89:A8:DD:96:DE
Authority key identifier: 82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
Certificate issuer: /CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Certificate serial: 019CAF7E84D90A12573674687E1CB9F972C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
Manifest number: 13EF
Signing time: Mon 02 Mar 2026 17:00:30 +0000
Manifest this update: Mon 02 Mar 2026 17:00:30 +0000
Manifest next update: Tue 03 Mar 2026 17:00:30 +0000
Files and hashes: 1: RpMIwwKNDJ2StC4zRLgKJPlvR8w.roa (hash: cXPNnS64bUQTjJNvAeCad/jzk4TlUd0umXx2TLacFB0=)
2: grE25oINlPA7HF1x7uPUsiGRUo8.crl (hash: BCJwN4VLbki6Nm/96GMHpcrZYpurHS0Lt9HwuvoqZCA=)
3: kp-VMkih7qc6B23hHp-3gThKHNw.roa (hash: bxojK3FurSVV0NeQ9kkDlIbku+sPTPShkBdp5lGAEYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:84:d9:0a:12:57:36:74:68:7e:1c:b9:f9:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b136e6820d94f03b1c5d71eee3d4b22191528f
Validity
Not Before: Mar 2 17:00:30 2026 GMT
Not After : Mar 3 17:00:30 2026 GMT
Subject: CN=43b49ca3b7003105910213661d4aaf89a8dd96de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:94:49:bf:c3:ae:26:db:a3:0a:a7:07:44:
98:1a:54:c8:cf:30:8f:ef:3a:77:72:3e:91:88:9c:
1d:11:ea:e7:a5:d5:39:71:ea:b8:09:37:28:1c:96:
69:d5:a7:e8:09:c4:dc:cd:1b:1a:3f:06:90:ed:be:
71:e1:f1:dd:26:c2:e0:c6:bb:5c:68:16:f3:42:95:
0b:01:8d:c6:c7:c5:62:8a:b3:6f:82:e7:1d:c3:05:
87:a4:4b:df:cc:d1:20:c7:52:0a:d5:df:38:61:0d:
a6:78:b4:da:99:77:e2:97:b4:4f:10:62:c4:4c:a5:
ac:b0:ea:d2:f1:c2:0c:13:6b:7c:bc:29:23:d6:03:
ff:9f:0d:9b:91:b0:96:63:ef:ca:84:a2:a3:b3:91:
01:db:0d:bc:6c:02:04:a3:df:14:0b:b2:2f:93:51:
4a:60:b8:cd:00:5c:67:f3:b3:42:a3:0b:4a:72:97:
ed:01:b7:12:72:8e:2f:1c:1e:f9:76:c0:67:d8:17:
bc:d3:9b:35:44:4b:33:3c:0c:17:b8:ae:4c:ef:7b:
c5:ff:65:e1:be:86:cb:a1:b2:fb:f1:42:25:bf:f1:
f3:2d:97:50:02:81:91:f3:06:55:3d:7f:58:c7:94:
a0:74:95:ae:00:5a:a7:f0:49:d6:65:a7:5b:54:1d:
74:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B4:9C:A3:B7:00:31:05:91:02:13:66:1D:4A:AF:89:A8:DD:96:DE
X509v3 Authority Key Identifier:
keyid:82:B1:36:E6:82:0D:94:F0:3B:1C:5D:71:EE:E3:D4:B2:21:91:52:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grE25oINlPA7HF1x7uPUsiGRUo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/22112e-4e13-43d0-9eb1-0da3caa91429/1/grE25oINlPA7HF1x7uPUsiGRUo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:80:93:f1:31:9b:2a:84:65:6b:37:44:cf:64:06:e2:63:11:
a1:e4:3c:13:5c:c4:fb:b8:28:fd:08:3a:a2:76:db:73:c1:cd:
fc:3d:da:c1:e5:bf:87:39:12:cf:e7:d4:e1:56:be:54:13:9e:
da:89:97:bc:15:d1:6c:32:fc:be:0e:cf:fd:a1:f0:98:1b:17:
31:ed:dc:8f:94:65:22:2f:cc:26:9c:81:be:22:15:a3:e1:aa:
2a:6b:94:11:37:9e:ea:cf:dc:9e:07:13:dc:96:76:9f:bb:aa:
1c:d7:6b:af:68:fa:4b:9b:f0:17:e7:7b:e9:d6:9a:55:2e:a0:
b5:c5:70:25:d2:50:f1:92:8d:7c:b1:77:eb:36:d8:e1:2d:fa:
e6:e9:e9:73:9c:66:59:68:6f:b9:52:39:dc:6b:4f:d9:c3:dc:
ca:b6:c1:c1:21:e9:29:85:15:c1:a3:d7:bf:c8:bd:2f:03:d1:
36:12:9b:15:dc:6f:c5:84:9a:33:4d:cd:df:48:e6:c0:df:d5:
86:d9:52:79:8b:9a:38:da:8c:7d:aa:01:02:dd:8f:a3:dc:65:
2c:2b:c8:8d:56:d6:42:56:31:d8:97:b2:96:76:39:5e:54:93:
01:62:c9:64:f2:0f:94:12:d9:6a:66:dd:4e:d6:75:68:8d:ed:
c8:3d:0f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:56 2026 by rpki-client