Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: 00RQ4jUuX+hOPoXBwCCcVuMlvUsiqmu7oBNG27YI1/g=
Subject key identifier: 70:EC:FF:0B:12:56:8F:A8:14:7F:79:FC:61:A5:15:D9:53:5D:A0:56
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 019EBF91721F84BC5DF43FF368F3FFBAB98C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 18CD
Signing time: Sat 13 Jun 2026 06:00:40 +0000
Manifest this update: Sat 13 Jun 2026 06:00:40 +0000
Manifest next update: Sun 14 Jun 2026 06:00:40 +0000
Files and hashes: 1: EGSTH9RaybCR244Fn2_Wbni43Zc.roa (hash: G9xVaELj0jbf2AOTvJPCHauXxZeF3Os8VpZ5MksIAPc=)
2: VHNvk1pFhm2Mv_jid3eMW8ccVIQ.roa (hash: 3Q72fFJWqHecJIDYOJyGhpclhNZ8eqSuAMkTIjrp1cA=)
3: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: 3j7czDoYs1s1noikPHbH0E8DGuPBDiMQhe+HC71sUwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:72:1f:84:bc:5d:f4:3f:f3:68:f3:ff:ba:b9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Jun 13 06:00:40 2026 GMT
Not After : Jun 14 06:00:40 2026 GMT
Subject: CN=70ecff0b12568fa8147f79fc61a515d9535da056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:7e:12:a8:06:1a:0e:23:89:12:cf:da:0e:
c4:b5:b8:82:01:91:38:e6:5c:af:b3:0b:8c:1a:32:
85:3f:7c:58:7d:19:16:d1:15:d1:d4:ce:8b:5e:05:
fa:55:0f:39:3f:c1:ca:55:27:f7:2e:40:f5:f5:3b:
7f:bb:88:8b:33:53:32:8a:49:71:25:58:30:14:83:
78:9e:e9:98:0f:1b:3b:b5:77:cc:44:05:62:f1:f3:
1e:9d:08:88:2c:3a:a3:40:3a:8b:9b:72:f6:38:5c:
b6:48:71:dd:73:e1:46:b6:5a:0e:d0:ef:69:d9:e8:
c8:4a:3f:66:3e:81:d5:22:15:dc:26:71:ff:44:ba:
f8:55:ed:10:14:49:92:96:c7:e9:23:b0:d6:0d:ab:
66:6e:ee:1e:11:3a:41:94:7b:d6:d7:32:0e:90:da:
6b:3f:d9:db:88:f7:28:3c:59:90:6e:ea:76:6b:ff:
73:a5:c6:31:5b:f6:13:b1:02:f1:43:56:f8:82:c1:
eb:50:9f:65:d7:a6:b9:8d:a8:03:f7:8e:ea:88:1b:
8f:67:65:05:6c:4e:61:db:85:2e:2f:57:6e:b6:c2:
2f:26:1c:bd:de:50:12:50:31:b7:1d:2e:14:36:b2:
4a:54:0e:2c:ae:2c:9f:6e:f9:d7:f7:5d:46:97:e2:
b2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EC:FF:0B:12:56:8F:A8:14:7F:79:FC:61:A5:15:D9:53:5D:A0:56
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:72:26:8f:ae:1c:3e:1a:82:44:5b:f7:26:1c:2d:7c:4b:61:
5c:4d:f3:62:fe:1d:e6:30:38:15:b2:1b:e5:db:06:b7:60:4b:
a1:4f:58:41:46:3c:0d:cd:0e:be:d8:af:d6:a3:e6:b6:bd:95:
19:f4:21:67:f1:8d:6a:29:85:53:2e:eb:b1:c7:57:bd:d7:c1:
39:9f:eb:bd:32:47:09:22:c1:03:54:4f:dd:58:32:5b:d5:2b:
15:a3:e6:d9:a1:f1:03:22:89:e7:53:a0:1c:78:a2:71:3d:16:
3f:56:ba:e8:1a:0c:b7:9d:cc:c8:46:05:87:9a:71:a1:ee:f2:
cf:2e:85:d2:91:a8:09:08:4c:0a:76:41:d6:33:1d:ee:9b:ab:
fb:22:6f:1c:89:cc:f0:23:47:7e:6b:f2:cf:9b:93:48:5e:5c:
4c:e9:73:15:9e:27:a0:c3:2e:5b:6d:f2:b3:b1:d3:88:e3:60:
1e:fa:ec:8f:7c:58:78:2a:e8:17:e1:0e:45:98:80:1f:be:ed:
2d:8b:e2:e9:7d:e0:1a:43:9e:e2:80:b2:63:26:35:a0:6e:df:
fb:b7:5b:8a:f1:07:f5:e5:a2:76:f0:d4:a9:ed:83:5b:be:f6:
b2:65:c7:3d:96:62:50:a7:c6:77:84:fe:cf:84:7f:d2:b0:af:
7b:29:e5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:07:10 2026 by rpki-client