Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
File: grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft (raw, json)
Hash identifier: MMZUSaIwuX7kAnPjpljIM1nqnimF2Msai8b93fTv6DQ=
Subject key identifier: B2:A9:C2:01:44:52:11:FA:DC:69:6F:3A:9A:28:5C:94:61:AE:F6:5D
Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Certificate serial: 019D99D05AEA08E3B26E6F981732C9B89E7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
Manifest number: 0905
Signing time: Fri 17 Apr 2026 05:01:01 +0000
Manifest this update: Fri 17 Apr 2026 05:01:01 +0000
Manifest next update: Sat 18 Apr 2026 05:01:01 +0000
Files and hashes: 1: RqkjHn1__XEjnWyHvV0T7PxyWK0.roa (hash: Ssqz1V4GBD9MzNBS/3Ky31egjDUQPgdZXUNSxQFlN6Y=)
2: grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl (hash: AeK8XqL+4aVJIIpcwrn5oSzbafvWgSXlnV1rFZTyWG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:5a:ea:08:e3:b2:6e:6f:98:17:32:c9:b8:9e:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Validity
Not Before: Apr 17 05:01:01 2026 GMT
Not After : Apr 18 05:01:01 2026 GMT
Subject: CN=b2a9c201445211fadc696f3a9a285c9461aef65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:5a:10:d9:7a:79:89:b9:c7:aa:ae:0a:14:
22:10:75:3a:db:fa:f4:7c:b7:07:47:6c:a6:31:f5:
0a:40:2e:e6:0c:b9:98:ad:99:18:c6:b9:e5:ea:b3:
4c:f7:a4:c2:c6:de:a8:dc:73:42:79:e8:00:2d:dd:
21:3b:a8:3d:b3:45:22:ae:2b:97:88:64:47:88:a3:
d8:cd:a9:87:74:74:70:9e:3a:56:19:19:6b:ed:66:
65:76:e4:47:ba:23:0a:24:d6:d4:de:b2:c2:54:b0:
8e:00:87:ef:fc:f6:f2:eb:8d:14:12:b8:d6:5f:7d:
b8:a5:5f:f4:47:e9:3f:20:39:84:5b:bc:40:16:05:
58:40:5f:55:01:2a:30:75:c0:aa:15:e0:88:fc:a1:
3f:6a:8e:24:cb:17:e4:a9:86:86:c5:e7:3c:d5:36:
8a:d1:07:5e:41:fd:c5:63:cc:b7:ab:2f:70:87:b8:
25:37:19:aa:bd:4c:87:96:1d:68:1c:ce:7b:4d:4e:
d4:12:22:80:a4:08:49:5f:1c:66:29:c8:a6:60:fe:
64:78:b0:34:d6:d7:f3:16:7d:ee:fa:5f:90:c9:4e:
8f:4b:3c:32:5c:0c:be:b9:ad:ef:90:ec:2f:4f:5e:
bb:62:f0:ca:3a:2f:b8:74:72:48:aa:3e:29:6d:a9:
23:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A9:C2:01:44:52:11:FA:DC:69:6F:3A:9A:28:5C:94:61:AE:F6:5D
X509v3 Authority Key Identifier:
keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6c:33:0e:9b:cd:1a:71:18:05:78:8c:df:79:09:b8:90:1b:
49:5b:06:3c:01:b2:84:65:58:93:30:53:91:f8:0f:dd:db:4b:
83:8e:58:15:3f:0c:94:8b:ee:cc:79:91:6d:09:17:04:f5:5c:
5e:02:c5:2c:69:3c:68:78:7f:d2:3e:65:66:a5:d1:a7:2c:17:
c0:67:b5:2e:59:de:dc:e0:d8:16:c5:6e:c0:cc:96:86:20:bd:
05:80:7c:24:6b:b7:91:d8:91:88:87:e5:b2:f8:fb:bd:6e:b9:
bd:9b:3a:fe:04:36:e4:5b:72:ec:2a:12:b7:4e:f7:ae:8f:bc:
96:39:03:d8:21:cb:25:56:f9:ee:3e:23:6f:10:c1:36:2f:9a:
c2:8c:18:0b:da:53:4d:f0:33:7c:17:f9:5c:dc:5b:fd:3c:0a:
27:17:26:a7:47:29:6b:df:e0:b5:ae:fb:d3:93:fb:76:41:33:
9e:36:63:41:58:50:77:83:2b:08:38:06:27:71:ca:48:ac:b2:
0f:49:4e:9b:a7:8e:ac:97:61:6c:96:63:54:c9:6e:3e:83:08:
e7:b5:44:e5:e3:97:f9:7d:75:d1:18:bc:7f:01:1a:43:ba:7c:
13:7b:0d:e0:3d:c9:27:2e:a7:08:29:45:bd:7c:c8:a7:b9:67:
4e:76:c5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:58 2026 by rpki-client