Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
File: T01-Grss2D6aLemgazkbOlJERBs.mft (raw, json)
Hash identifier: 0RAcrYcowsyeEkNhLbPqpTfrYRlh6ah27gyRA2NUV9M=
Subject key identifier: DA:9B:CF:22:CE:C9:3F:62:33:9A:12:68:65:B3:EB:7D:DA:72:03:47
Authority key identifier: 4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
Certificate issuer: /CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Certificate serial: 019D9AE304A041353776E424F515BC538004
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
Manifest number: 1553
Signing time: Fri 17 Apr 2026 10:01:02 +0000
Manifest this update: Fri 17 Apr 2026 10:01:02 +0000
Manifest next update: Sat 18 Apr 2026 10:01:02 +0000
Files and hashes: 1: T01-Grss2D6aLemgazkbOlJERBs.crl (hash: DnB1qTFwNT7OnIrQQkhCEZM5nskjCx1SRXJpb7nG4wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:04:a0:41:35:37:76:e4:24:f5:15:bc:53:80:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4d7e1abb2cd83e9a2de9a06b391b3a5244441b
Validity
Not Before: Apr 17 10:01:02 2026 GMT
Not After : Apr 18 10:01:02 2026 GMT
Subject: CN=da9bcf22cec93f62339a126865b3eb7dda720347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:24:73:40:08:a7:25:6e:36:b1:b7:3b:87:f2:
0d:4d:3a:e3:5d:9f:8b:7c:e5:ff:23:2f:62:8a:55:
63:c4:6b:ae:38:1b:d6:54:71:d2:3d:2b:0d:33:ce:
90:00:a8:c8:49:c5:77:9a:49:7a:7e:dd:dc:a7:68:
d1:4b:d5:81:da:7c:6c:96:38:73:de:2e:ac:ca:12:
f2:77:2a:33:a6:ce:f7:f0:eb:c6:7a:d6:8d:b0:f7:
d9:01:6e:85:f7:9a:a7:e5:6e:a6:cf:d0:52:e3:a8:
08:01:2e:76:df:3d:8f:5d:6f:84:4b:8f:94:68:c1:
27:2d:cc:8d:1d:c8:3a:94:5c:7f:58:ca:24:7d:33:
f4:1c:ad:38:c9:21:a5:2a:9e:d4:1c:b8:b3:28:84:
ae:52:6d:26:1e:08:13:47:7a:da:88:d3:cd:9d:56:
fa:0d:22:d8:b8:db:cb:b4:e2:46:1e:1a:fb:7d:7c:
41:59:27:56:b9:16:79:f4:31:a5:41:2c:ea:18:3f:
8f:a4:87:66:d5:d7:22:d8:30:7e:45:c3:0b:d5:25:
c2:29:6f:49:cb:aa:89:f3:30:89:e5:2d:7f:e2:e8:
9e:64:59:f8:31:8a:4e:51:39:1d:7b:43:e6:b6:b9:
c3:d5:dd:bb:51:2f:f9:e7:21:ea:1d:9a:b4:d5:14:
6a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9B:CF:22:CE:C9:3F:62:33:9A:12:68:65:B3:EB:7D:DA:72:03:47
X509v3 Authority Key Identifier:
keyid:4F:4D:7E:1A:BB:2C:D8:3E:9A:2D:E9:A0:6B:39:1B:3A:52:44:44:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T01-Grss2D6aLemgazkbOlJERBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/c2f6a0-1cac-46c3-8740-51f5c458f12c/1/T01-Grss2D6aLemgazkbOlJERBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:99:82:b6:27:ec:19:d8:53:5f:83:99:e6:92:4b:2d:e4:b4:
ca:5f:43:9a:16:18:c5:af:07:41:1e:d6:f9:9a:30:ae:6e:78:
23:80:55:aa:61:32:e9:3f:ef:e5:35:ef:f9:9a:58:ed:78:c0:
53:11:13:e5:ab:38:f3:bb:71:c7:32:37:cc:6c:98:48:68:2d:
77:c7:84:3b:b5:2d:a6:0f:e3:2d:a0:dd:d8:de:5a:5c:5c:3a:
35:24:44:7c:d9:5d:fd:b6:f4:28:a3:bd:45:ee:33:11:b3:d3:
37:92:63:84:72:91:97:9b:77:81:7a:97:c3:f1:51:9e:7e:79:
85:40:06:8d:1c:f5:2d:2b:6a:3f:3b:4f:0f:67:5f:26:5a:2f:
af:3d:ab:89:25:9a:34:82:72:59:b2:5c:27:6f:28:f0:f2:3b:
cd:42:83:0d:22:89:b4:54:e6:bb:05:62:b4:5c:db:52:e6:01:
33:9e:1f:b4:67:46:fe:d7:13:18:93:70:e8:5f:16:16:cc:ef:
6b:1a:37:c2:52:01:f7:70:85:ed:49:71:32:71:2c:4c:a3:2a:
75:a2:8a:f1:16:f9:ba:6b:95:ad:cf:61:2a:f0:5d:38:f8:6e:
3d:27:d2:f7:8e:56:9b:79:bd:f5:33:b1:4e:b0:c4:0f:a5:a0:
83:77:91:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:57:50 2026 by rpki-client