Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
File: grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft (raw, json)
Hash identifier: +T8eWxSG8GDTyjap84RAQtA858DEpaci3sBneBSJcvA=
Subject key identifier: 77:EC:1E:F6:CC:E9:29:ED:D1:1A:C7:D9:F9:6A:51:8E:D9:EA:1B:76
Authority key identifier: 82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
Certificate issuer: /CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Certificate serial: 019CAC477797EEE2EF989C7AB447EB3EE094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
Manifest number: 088A
Signing time: Mon 02 Mar 2026 02:01:30 +0000
Manifest this update: Mon 02 Mar 2026 02:01:30 +0000
Manifest next update: Tue 03 Mar 2026 02:01:30 +0000
Files and hashes: 1: RqkjHn1__XEjnWyHvV0T7PxyWK0.roa (hash: Ssqz1V4GBD9MzNBS/3Ky31egjDUQPgdZXUNSxQFlN6Y=)
2: grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl (hash: deuZwIyyzvYv+SC2L8qUKZrXSKLfiYOW9IIhshBDeFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:77:97:ee:e2:ef:98:9c:7a:b4:47:eb:3e:e0:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b53661f621b6f574a5f38f1162ca679c3b30ee
Validity
Not Before: Mar 2 02:01:30 2026 GMT
Not After : Mar 3 02:01:30 2026 GMT
Subject: CN=77ec1ef6cce929edd11ac7d9f96a518ed9ea1b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bf:7c:dd:2c:8d:ab:8b:bf:b9:96:5d:e2:e7:
b7:35:da:4f:8e:49:32:76:39:0f:17:79:eb:cf:a0:
ec:55:ab:7f:ed:2e:60:3d:ec:94:6e:6f:a8:bb:45:
f2:23:2d:6f:a3:bf:ab:96:88:f3:63:72:93:e5:55:
38:62:fc:8b:43:0a:22:44:e2:64:74:83:65:5b:db:
6c:7d:4a:f9:01:fb:91:d8:0b:7d:7e:b9:5f:bc:24:
4b:57:da:7a:f7:ae:df:f8:64:dd:bf:da:16:cd:86:
8c:11:2e:5b:dc:36:fd:1c:aa:0e:4e:d2:44:05:05:
33:6f:ff:f7:1f:96:99:94:98:c7:fe:6c:77:b0:eb:
bd:7f:61:a3:b7:9a:01:a0:43:5f:f1:8f:d5:13:9c:
73:1e:cb:c3:a2:53:6f:7b:33:ac:7b:36:34:b5:96:
ed:ce:00:da:b0:b7:98:48:04:76:87:fc:41:49:86:
01:d4:c1:1a:a7:52:31:73:5e:8a:bd:f6:4f:f4:fd:
87:5a:9c:1b:18:7a:b3:29:6b:52:99:82:7c:30:6f:
7c:dc:67:15:31:01:dd:bc:e9:04:01:06:5c:04:a5:
bb:4d:00:20:cf:fc:db:c5:6e:8c:62:ff:77:a4:26:
f7:ae:45:98:1a:ed:ae:5d:f8:89:47:3a:89:06:8a:
81:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:EC:1E:F6:CC:E9:29:ED:D1:1A:C7:D9:F9:6A:51:8E:D9:EA:1B:76
X509v3 Authority Key Identifier:
keyid:82:B5:36:61:F6:21:B6:F5:74:A5:F3:8F:11:62:CA:67:9C:3B:30:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grU2YfYhtvV0pfOPEWLKZ5w7MO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b74ad6-aa5a-4949-b860-649bfc548587/1/grU2YfYhtvV0pfOPEWLKZ5w7MO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ac:ec:2b:1a:24:09:6e:60:8c:64:2c:43:eb:41:7a:a3:c9:
d0:2f:02:91:f2:11:c4:7b:85:04:a8:e8:f4:e1:3c:4d:73:82:
e0:89:21:54:4a:4a:7b:f1:b6:a6:ff:59:f2:2c:f5:ca:cf:7b:
46:de:86:6b:67:df:70:91:09:b5:89:d3:30:1c:7b:ac:16:80:
6c:bc:6f:cd:f3:3e:b4:c1:e3:d5:9f:69:d1:12:49:96:a8:d8:
a0:53:08:74:c5:80:c8:39:8e:75:60:3c:60:ce:84:a7:af:b6:
c0:8f:f1:3c:70:02:fd:4a:62:78:b2:8f:a9:04:94:2d:8c:7a:
39:06:27:10:c3:9e:a2:82:e6:c0:66:fb:b9:f6:ee:05:c3:1e:
d0:4e:17:e6:43:a8:2f:03:9f:e3:9f:fa:0b:98:59:fd:26:bd:
e6:24:04:1d:b5:74:d7:4d:39:1b:f2:02:0f:d7:85:cb:2d:79:
81:8b:6e:16:9b:b3:67:d6:95:5b:fb:1e:f0:07:61:0d:ad:20:
af:31:44:28:31:7f:d7:70:6a:44:f3:b4:68:b0:17:d8:ef:13:
d8:81:e6:ca:30:99:0a:16:b0:c3:f6:41:1c:ab:64:e2:5b:7f:
73:22:3d:88:d8:6a:53:6c:c0:82:49:b5:7d:46:fb:72:4a:ce:
1a:1a:c7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:08:00 2026 by rpki-client