Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
File: T01-Grss2D6aLemgazkbOlJERBs.mft (raw, json)
Hash identifier: 4mOBDnaWNCDNXJyM9gjJ7McBkgDEsQf9YgBhqhsVmkg=
Subject key identifier: 2D:FF:A9:C8:07:F0:5D:79:A9:10:56:D6:E4:05:02:DC:5E:BD:84:37
Authority key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
Certificate issuer: /CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Certificate serial: 019CAD59451CE9914F67DE366054C38C6ABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
Manifest number: 14D8
Signing time: Mon 02 Mar 2026 07:00:34 +0000
Manifest this update: Mon 02 Mar 2026 07:00:34 +0000
Manifest next update: Tue 03 Mar 2026 07:00:34 +0000
Files and hashes: 1: T01-Grss2D6aLemgazkbOlJERBs.crl (hash: nIfc7VTrHm/2gILGBMxj+BeYIadU+S8xpNNyfrhdCPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:45:1c:e9:91:4f:67:de:36:60:54:c3:8c:6a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Validity
Not Before: Mar 2 07:00:34 2026 GMT
Not After : Mar 3 07:00:34 2026 GMT
Subject: CN=2dffa9c807f05d79a91056d6e40502dc5ebd8437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:98:be:11:95:8a:ab:83:6f:bb:c9:27:88:
5e:97:bf:57:c4:0f:12:d0:9f:b1:c9:eb:39:f0:ff:
fd:97:78:44:d3:55:cb:29:cc:df:1d:60:1c:e4:93:
73:49:63:fe:0f:5d:13:10:e1:88:d1:14:b8:f6:a2:
b3:08:d1:11:c1:d9:a9:b0:85:64:2e:9d:fd:c4:17:
d9:b7:e7:a1:b5:1a:eb:36:88:12:28:ba:16:c5:ef:
c7:b1:77:48:4c:a3:00:cc:0b:5a:d3:f3:4e:a3:ed:
84:e2:53:1d:9c:36:d7:67:3f:cc:fd:49:8e:5b:a7:
a4:c8:59:87:68:57:33:16:09:86:3d:ed:bd:19:fb:
a2:10:f9:a7:d2:cc:c2:80:7f:e8:c8:5e:7f:02:26:
72:11:b2:aa:b4:da:2b:39:7e:84:b1:1c:1f:d8:ff:
20:93:4e:b6:12:7c:bb:2a:1e:9f:a1:c5:5d:5d:40:
32:82:db:bd:09:a6:f5:b6:f0:df:a3:a7:9b:a7:dd:
66:e0:b5:98:38:9c:6a:1a:32:98:04:42:1d:c6:e9:
89:68:79:ca:67:97:8e:ad:ef:ec:aa:d4:69:8d:77:
d8:81:91:72:8f:d9:03:41:e7:b3:71:f6:09:9e:98:
20:da:68:d8:3f:3e:aa:01:0e:7d:7b:b6:23:25:b6:
ad:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FF:A9:C8:07:F0:5D:79:A9:10:56:D6:E4:05:02:DC:5E:BD:84:37
X509v3 Authority Key Identifier:
keyid:4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:61:99:c9:42:28:b7:eb:2f:12:5b:b1:ae:ad:9d:13:e6:9f:
62:4a:fe:17:d5:aa:dc:27:ff:46:d8:4d:c9:5b:18:55:dc:c3:
e5:27:dc:96:f5:63:44:46:83:5d:10:ee:d3:58:88:dd:90:93:
bd:d2:7f:7b:e0:2a:8a:02:56:fb:1b:ce:15:c2:03:4a:11:ec:
7f:89:7d:1c:48:03:5d:6f:42:d6:92:2c:7d:16:cf:fd:3a:c6:
9f:12:ad:1b:32:7c:88:1f:1c:7f:22:11:8e:f1:e8:10:ec:c0:
71:74:5d:3d:f3:66:e2:c8:4c:d0:96:d8:b3:90:30:74:37:60:
f1:e1:b3:90:88:60:7f:5a:a5:91:4f:4e:91:72:f4:bf:dc:f8:
15:a9:12:16:0a:f0:cb:87:55:2c:5f:d3:b8:df:2c:00:36:6a:
5c:d9:2d:68:ce:3f:77:52:60:33:13:84:fa:d1:84:d4:46:cc:
af:f7:a0:df:4e:be:2e:a6:4a:cd:81:4f:f6:e7:58:d1:6a:b3:
49:81:39:52:42:5c:4b:ad:ec:6a:25:07:43:21:9b:ad:d5:18:
cf:c2:d2:d0:b2:bd:b9:bb:0f:bc:7e:c0:cb:93:fd:e7:49:32:
df:0f:f5:7c:0f:02:d1:ce:5c:57:7c:d5:65:3f:45:50:de:7b:
25:6d:84:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:17 2026 by rpki-client