Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: RNZTx8puf6kT/sgy/0721wJC5QNo9I0fXeF6+olbwfE=
Subject key identifier: 8B:42:53:5E:38:4B:D2:C7:20:F3:DF:F2:88:8F:55:8D:22:0E:7C:1C
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 019CABD91AF79D4F892FFE8C3887E06D5884
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 17B6
Signing time: Mon 02 Mar 2026 00:00:57 +0000
Manifest this update: Mon 02 Mar 2026 00:00:57 +0000
Manifest next update: Tue 03 Mar 2026 00:00:57 +0000
Files and hashes: 1: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: 90oHO7W5dN+jBo9ZrxPDf/YwL6reR21Rh8se5pb2uKc=)
2: ti3ObmEy21V2j-0W73NVwUe3ck8.roa (hash: schWmTw6g7AB2bDtVv9F+0FZ5DtNcX/Fqd7C3rT46tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:1a:f7:9d:4f:89:2f:fe:8c:38:87:e0:6d:58:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Mar 2 00:00:57 2026 GMT
Not After : Mar 3 00:00:57 2026 GMT
Subject: CN=8b42535e384bd2c720f3dff2888f558d220e7c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:85:dc:0a:09:0f:8f:68:e6:bd:34:4c:26:e5:
d2:f3:4b:d4:3f:70:5c:e8:69:3b:04:1f:25:3f:9f:
76:3e:55:2f:03:1f:2e:93:f7:1d:2e:94:17:75:87:
56:1b:0f:49:e6:7c:f4:6c:98:47:f0:89:dc:6e:b9:
4c:78:52:d9:11:92:b5:bf:a2:38:e6:ea:a0:4e:a3:
23:48:23:c2:22:9a:de:59:82:72:cd:57:3d:91:d8:
99:18:32:13:38:c9:4f:21:a9:a8:c2:ea:13:c3:c0:
9c:3e:2d:85:f0:18:08:02:4c:9e:dd:40:41:ae:cd:
19:6e:b8:3d:08:f2:31:be:14:9f:7d:c4:a8:fa:2e:
15:1a:9d:1c:73:45:36:39:a0:25:a6:3e:2c:38:0a:
27:be:28:8b:9d:e7:85:fa:4c:f2:b8:c8:b3:f2:dd:
c6:3f:4f:34:55:03:68:74:48:46:fb:a7:02:e0:e3:
e0:df:d4:7a:86:96:fb:76:0b:ba:03:88:50:5e:ee:
f9:66:41:09:3c:22:29:e3:c5:ff:55:a2:5d:58:d4:
7c:d5:7a:dd:e7:12:fb:b4:a6:c0:41:30:c6:c9:a4:
d4:64:ee:33:2b:5c:41:e7:bb:35:27:7a:0f:51:93:
10:d1:ee:4a:0a:6f:58:87:a8:19:15:92:bc:9b:7c:
88:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:42:53:5E:38:4B:D2:C7:20:F3:DF:F2:88:8F:55:8D:22:0E:7C:1C
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ef:a0:60:ab:c4:4a:53:49:cd:21:53:34:10:09:78:73:27:
95:1f:69:a3:60:9c:14:3c:a5:33:09:dc:6d:f6:28:01:0e:b6:
34:7d:ff:3f:6b:23:0c:f9:0f:a8:21:49:79:51:f4:51:8b:44:
d1:9e:08:fe:2c:a6:b6:bf:1e:dd:b3:2b:c9:d3:88:77:eb:cb:
a3:36:07:eb:9d:02:7c:b7:2b:4d:32:b1:c6:0a:bd:ae:81:72:
84:2f:f4:1c:ab:24:7a:ea:6c:70:8c:b9:2d:38:a5:a4:74:ec:
3f:e8:fc:71:df:4d:ac:34:3c:1e:ac:83:98:d8:f9:49:f8:fe:
59:bd:94:1e:24:66:2f:aa:c7:16:79:2d:25:90:a8:59:9c:8f:
d2:fe:75:da:5a:fc:5b:89:e5:17:27:e1:0a:7f:b3:00:5d:8c:
fb:1b:bb:85:d8:34:30:10:00:b0:61:20:54:5e:0c:32:10:2e:
c6:c7:63:00:1b:30:14:18:13:19:bd:9b:8c:c7:bb:9e:d9:fa:
cc:50:a6:d5:dd:06:f2:c1:54:5f:78:19:dc:fd:55:3b:fc:1f:
47:80:5c:c1:df:76:32:1e:91:82:3b:1e:2d:92:ee:e9:66:a0:
ac:82:73:55:09:32:5f:de:66:d5:cd:7f:be:3d:94:d0:e4:93:
23:dd:66:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:51 2026 by rpki-client