Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier: eTlZLyqMiAcw+SCzlZNJiavIDtQnPq/UzMvVVXcYgLs=
Subject key identifier: 9B:4E:29:06:9A:FC:75:DD:C8:45:6A:D7:40:44:05:00:84:A4:6C:22
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 019CABD917BC2CDBF6FB7C8D2756412B4527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number: 184E
Signing time: Mon 02 Mar 2026 00:00:57 +0000
Manifest this update: Mon 02 Mar 2026 00:00:57 +0000
Manifest next update: Tue 03 Mar 2026 00:00:57 +0000
Files and hashes: 1: FjlUOZvW96ADTmmnM6L72d8iARo.roa (hash: kIe35Th4NAZk6eCGw7Pep7yHHgIezVmLRC6I4uCSvTI=)
2: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: BLyxDKC9AH/oN5ra7wX7xI0e51O59CGtx4f3iYos17s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:17:bc:2c:db:f6:fb:7c:8d:27:56:41:2b:45:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Mar 2 00:00:57 2026 GMT
Not After : Mar 3 00:00:57 2026 GMT
Subject: CN=9b4e29069afc75ddc8456ad74044050084a46c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7f:05:02:3f:49:72:b8:3e:4c:3f:03:4e:be:
9f:d1:a4:69:11:d5:c4:a7:b2:ec:03:fc:a8:dc:21:
61:60:9f:37:c7:8d:4a:73:cf:fd:a2:f9:d9:ec:04:
37:71:70:84:b0:42:32:76:89:6b:3c:41:68:7e:0f:
f6:84:c9:62:b5:3e:1b:10:9f:ce:be:ac:fc:7e:c6:
a9:01:56:36:1d:05:24:62:fd:f4:97:84:8d:7e:93:
31:11:48:f1:87:bd:f3:f2:db:b1:40:98:3f:52:09:
fa:bc:bf:7f:ba:27:8d:a1:11:a1:b6:c1:1e:1c:a8:
43:70:6b:ec:60:47:54:8a:67:f4:69:4d:86:6e:dd:
10:53:8c:8e:3d:00:a4:12:6c:9d:11:29:37:ce:84:
9a:88:93:bb:3b:32:71:13:76:e5:63:53:df:96:bf:
eb:c8:ae:a1:73:13:37:d1:c0:ad:59:b4:98:49:09:
7d:df:ae:b2:d3:d2:b7:e9:24:dc:77:a4:01:bb:dd:
9d:45:e7:5e:d6:26:9b:6f:63:e0:85:6a:24:a4:df:
57:3e:16:c0:d3:ed:e9:6f:de:ff:42:a9:5e:0e:de:
2d:0e:fb:ff:8b:77:67:11:f8:6d:59:ff:ba:76:8f:
b5:c0:40:f3:c1:49:de:7f:f2:d2:b4:9b:30:10:16:
4d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4E:29:06:9A:FC:75:DD:C8:45:6A:D7:40:44:05:00:84:A4:6C:22
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:73:be:bc:bc:e2:7a:d6:e2:72:0f:45:04:1f:c5:07:08:92:
c5:fa:bf:fa:6f:2d:4c:40:98:47:42:c4:d1:4b:11:06:2d:df:
c3:98:c8:9f:23:d9:c8:ed:e4:4f:d7:6a:9e:4b:90:cc:70:b2:
c2:02:98:da:7f:48:20:d4:d4:1a:0b:4f:2f:7a:d2:b7:8b:de:
31:0f:64:29:80:57:65:65:44:4f:c1:2b:7d:93:58:77:06:9e:
e6:ce:c2:b2:0d:5c:1e:96:8b:09:19:38:3d:82:85:6f:8f:f8:
ba:e6:23:d8:54:16:8e:32:a2:70:ea:6b:80:6f:d3:e6:cb:68:
8d:29:a2:42:aa:84:bd:df:65:8e:3a:09:bc:d5:5c:a5:82:6a:
55:c7:56:77:e5:6d:de:bb:ac:e8:65:1c:3e:eb:67:55:6f:bf:
d4:a2:66:0d:2b:81:e5:27:0e:85:94:82:5a:fd:6e:7d:77:97:
b6:05:08:14:31:c1:ab:c1:b0:bd:3a:01:01:35:43:d0:92:e4:
87:5b:85:4b:97:ca:56:05:5a:38:e7:43:29:2a:e1:90:5d:22:
59:c8:82:96:fe:0f:1f:65:a3:ad:e1:f3:b0:bc:66:40:34:43:
f2:5b:c4:13:76:04:7e:fc:53:d6:45:99:d2:88:49:fd:44:18:
04:2b:e2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:43 2026 by rpki-client