Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: AB93qVDlSKbCa4+Ki+R8qjSdaSP/UojVQ7QrWi61DJE=
Subject key identifier: D4:DB:E9:3E:1E:6D:F4:89:C9:BF:2F:CA:19:FE:47:96:0D:60:E6:31
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 01A0CAEB5A5C85875A6E68CF3B1AF3FD0354
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 19DD
Signing time: Tue 22 Sep 2026 21:00:16 +0000
Manifest this update: Tue 22 Sep 2026 21:00:16 +0000
Manifest next update: Wed 23 Sep 2026 21:00:16 +0000
Files and hashes: 1: VHNvk1pFhm2Mv_jid3eMW8ccVIQ.roa (hash: 3Q72fFJWqHecJIDYOJyGhpclhNZ8eqSuAMkTIjrp1cA=)
2: eCnE-AztecUH0Ii4xKzJKUvwNPI.roa (hash: kbLe39umBoFt3OqV1v6hrqR6Zd5EvOXtfjO+6C3/NUQ=)
3: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: fp4GBIlhwlZvKcObkpOXG4tp+uIr+4JU+hvveKsddoU=)
4: uox9Nc0O9CJq0e64gzsPQekDCMg.roa (hash: ERSV0kbvjLPbsPDrGybsMiHpmNJWDqc9dKdBHSCap64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:5a:5c:85:87:5a:6e:68:cf:3b:1a:f3:fd:03:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Sep 22 21:00:16 2026 GMT
Not After : Sep 23 21:00:16 2026 GMT
Subject: CN=d4dbe93e1e6df489c9bf2fca19fe47960d60e631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ea:91:0b:97:04:5c:3d:48:58:f0:a4:f0:3c:
a8:40:49:99:ba:ee:95:d7:58:a1:2e:94:25:93:99:
4d:47:10:9c:e6:99:01:a4:3e:b2:41:ea:88:74:95:
ae:4d:b1:3c:5c:26:fc:e9:b6:ed:9e:ed:50:7b:90:
e8:ce:45:25:4b:0c:d8:97:47:a9:7f:a8:96:84:69:
67:bd:2f:d5:7f:aa:f3:bf:8c:4b:61:62:1c:8d:77:
62:10:92:39:99:8e:70:f5:5d:36:28:72:d0:08:95:
bd:df:9f:5d:db:06:48:89:a2:3f:96:5f:2b:68:a0:
0c:e0:38:0c:fc:13:10:9d:ce:6a:af:d0:16:e9:39:
e7:11:c4:2e:57:d2:e1:b2:2c:5b:13:9d:de:10:d9:
a1:5e:11:d0:c6:56:3a:b9:09:de:9f:f1:f6:1c:a5:
f7:a5:c3:41:c2:2e:0e:5a:85:aa:5e:c4:6f:86:66:
d5:4b:9a:38:31:32:07:05:19:5c:3e:48:58:e2:3f:
71:1b:ab:cb:13:f1:29:e3:0f:6c:25:13:6f:d7:1f:
8d:62:73:2e:1d:8e:a9:cf:2f:8b:be:f2:17:aa:bc:
a8:4d:fd:f4:a3:85:cb:2b:ff:5f:16:56:0b:1c:86:
20:ed:75:58:1d:f0:b5:bd:b3:bb:5b:ef:14:d0:4e:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DB:E9:3E:1E:6D:F4:89:C9:BF:2F:CA:19:FE:47:96:0D:60:E6:31
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:9b:c9:cc:59:09:fa:31:83:44:5c:c2:20:dc:a6:e8:55:a1:
d2:32:6a:49:7e:3a:3b:e9:bf:2d:06:27:88:9f:d6:c0:53:8d:
a8:85:4a:a9:42:d0:2e:c2:b5:cc:4e:36:cd:3e:8f:66:9b:16:
f7:46:bf:87:9b:75:b3:dc:d3:43:99:75:45:b0:af:10:6b:ad:
2c:92:0a:2f:30:c0:bc:f7:3f:d5:ce:8c:68:88:b2:28:32:87:
2c:d8:30:d5:6c:31:ce:b3:a6:d1:ca:a2:81:4b:0d:16:8d:66:
fe:ab:24:a0:39:8d:a7:24:40:ea:3a:de:66:68:e3:c8:66:27:
98:0a:27:ea:a5:8f:18:f0:c4:0d:73:be:7a:dc:e3:e8:7f:5d:
f2:30:b6:00:5c:cf:1c:20:04:b9:cf:2e:2a:a5:7a:48:9c:a2:
7b:f4:55:7c:4c:11:34:6f:be:38:63:27:ce:66:d3:41:19:24:
48:03:23:8e:fa:d6:4c:bf:4d:9a:b2:d8:51:8c:87:d1:1a:89:
3c:65:ef:3e:e2:8d:e1:3d:41:d1:aa:30:35:e0:73:d5:14:b2:
06:a7:b5:53:89:ad:11:b0:13:7f:53:16:fe:40:94:36:41:db:
37:2e:7c:98:17:de:fe:b8:4b:ca:08:e4:54:6f:b2:98:b9:5b:
7e:09:18:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:27:46 2026 by rpki-client