Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
File: GrXCK_U7cFx6K7JzunPj8MBZW3s.mft (raw, json)
Hash identifier: vownwWJINusa0QJ2tu2GMm0WasodEBfnJ4unhZ2fqXE=
Subject key identifier: FE:83:1D:4E:2B:F6:A8:1C:46:AE:14:29:28:74:00:68:CB:7C:F5:88
Authority key identifier: 1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
Certificate issuer: /CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Certificate serial: 019D9962DCE6A0E0676BF8891199CD27416C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 03:01:26 +0000
Manifest this update: Fri 17 Apr 2026 03:01:26 +0000
Manifest next update: Sat 18 Apr 2026 03:01:26 +0000
Files and hashes: 1: FjlUOZvW96ADTmmnM6L72d8iARo.roa (hash: kIe35Th4NAZk6eCGw7Pep7yHHgIezVmLRC6I4uCSvTI=)
2: GrXCK_U7cFx6K7JzunPj8MBZW3s.crl (hash: 9QniKLSycw3pvlBFir3hWjGXMLBT3Q70G2G7Wl5paVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:dc:e6:a0:e0:67:6b:f8:89:11:99:cd:27:41:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab5c22bf53b705c7a2bb273ba73e3f0c0595b7b
Validity
Not Before: Apr 17 03:01:26 2026 GMT
Not After : Apr 18 03:01:26 2026 GMT
Subject: CN=fe831d4e2bf6a81c46ae142928740068cb7cf588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:f2:ec:d4:5d:bf:92:1a:3e:c6:2b:0c:7a:
e7:24:cd:fe:d7:b9:8f:fd:f0:12:f4:a2:50:49:22:
fe:79:3b:1a:99:76:ed:d3:db:fe:bb:f3:fe:ba:7b:
b5:d0:15:fa:72:6b:c1:e1:85:3f:43:18:21:29:70:
92:3c:65:d0:49:91:06:b0:e0:c4:e0:e6:9c:db:a8:
dd:41:9e:70:fa:7e:5e:d5:62:7b:97:54:44:a5:87:
5a:66:d2:86:61:5f:a7:d4:d4:23:5d:5a:63:46:11:
7d:ba:46:b5:59:11:f3:2b:d8:89:a5:a3:6d:0e:65:
6a:6f:6b:04:1b:a6:79:e4:95:38:da:6b:12:45:87:
c0:24:e1:1b:3e:36:7f:ae:9c:05:05:f7:45:e3:0a:
cd:a3:0d:ad:8b:73:48:64:d2:a2:da:b7:f6:30:1d:
e3:9f:ad:5f:62:1d:38:7d:4a:fa:6b:e4:c6:3c:28:
04:5d:4a:5e:36:da:dd:d0:a9:6f:6f:7a:7d:b2:8b:
15:17:cc:46:da:7c:90:d6:04:85:60:ae:45:c0:54:
2e:e5:b2:15:ef:61:94:0f:4c:84:77:83:05:83:8e:
11:2b:e4:a4:36:20:73:85:d6:0e:29:82:ee:9c:24:
63:60:fe:8c:c6:f3:dd:c6:ac:33:33:96:bd:67:03:
7d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:83:1D:4E:2B:F6:A8:1C:46:AE:14:29:28:74:00:68:CB:7C:F5:88
X509v3 Authority Key Identifier:
keyid:1A:B5:C2:2B:F5:3B:70:5C:7A:2B:B2:73:BA:73:E3:F0:C0:59:5B:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrXCK_U7cFx6K7JzunPj8MBZW3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7c8bf4-6ab6-4199-b3a7-b4b1f6f98a90/1/GrXCK_U7cFx6K7JzunPj8MBZW3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:a4:55:bc:a5:03:4e:c1:dc:4d:91:59:57:19:a6:5e:fb:6b:
0d:27:49:8e:1a:13:58:62:1a:98:63:72:c8:02:e6:4f:19:93:
57:99:d3:ff:2e:14:02:d1:f8:55:e2:d8:bb:38:fa:cb:dc:09:
cb:d9:b3:3c:93:92:3f:e7:22:52:6c:92:22:33:0c:78:f9:3a:
f9:79:7b:2e:f0:38:1c:ea:c3:3b:0b:b1:df:e7:fa:dc:14:f6:
b6:86:6b:19:58:7a:cb:d9:ec:30:79:e6:39:3c:f8:16:9f:db:
f5:fd:bd:fe:88:10:82:2f:99:6e:77:ec:91:7b:f5:53:c4:bd:
56:c9:05:17:b5:d3:c9:e5:cf:a7:eb:3e:60:e3:30:1b:74:66:
35:db:60:88:14:d2:d6:cb:75:78:be:7f:98:72:e4:89:b6:91:
aa:24:f8:48:b5:c1:1d:f3:91:e9:b9:42:76:bc:78:33:37:b3:
17:fe:f7:70:79:d1:bf:cb:a3:0c:61:3a:11:cd:04:a3:97:1d:
d1:46:5a:a5:39:17:b5:92:97:06:78:1f:cf:b0:35:bf:4a:a3:
bd:a1:37:1b:f0:d5:90:86:7b:9d:d8:ba:6a:b7:5c:5f:2c:f9:
09:01:86:c3:68:89:5e:02:2d:a7:44:05:b8:6a:c4:b6:02:16:
fd:e7:cc:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:28 2026 by rpki-client