Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
File: grxjPihGZKTKUa1Zdsf68sYka0s.mft (raw, json)
Hash identifier: x+kOxNvQnwu7EuIil3TTCH1sj5aBgPsKjg8rF6mqyGA=
Subject key identifier: AB:47:5E:CE:94:D8:07:0A:76:3A:85:1C:B7:4D:1F:39:FC:61:93:3F
Authority key identifier: 82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
Certificate issuer: /CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Certificate serial: 019D98BD20B0A127C058A03BADB068838448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
Manifest number: 1832
Signing time: Fri 17 Apr 2026 00:00:24 +0000
Manifest this update: Fri 17 Apr 2026 00:00:24 +0000
Manifest next update: Sat 18 Apr 2026 00:00:24 +0000
Files and hashes: 1: grxjPihGZKTKUa1Zdsf68sYka0s.crl (hash: L/rkhPmYXzKymf+X1OKSIX8TovHuCveFIFmMWputa48=)
2: yw6q1hkAJlSyS4cx4aE_Somz8R0.roa (hash: yxlYFiZu48s1aJCqUUrEWED3axrhE7jpSTvifZqxXUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:20:b0:a1:27:c0:58:a0:3b:ad:b0:68:83:84:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82bc633e284664a4ca51ad5976c7faf2c6246b4b
Validity
Not Before: Apr 17 00:00:24 2026 GMT
Not After : Apr 18 00:00:24 2026 GMT
Subject: CN=ab475ece94d8070a763a851cb74d1f39fc61933f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:24:dd:55:22:50:35:dd:42:a9:8e:a1:ab:
8e:60:bc:01:f1:57:c4:90:3b:8f:ad:9c:74:2d:ca:
49:d5:30:ac:6c:e5:c1:1b:76:13:14:73:09:74:3e:
39:31:9b:6d:0d:f0:97:4e:a2:e6:fb:fa:25:dc:a5:
c0:f9:c7:97:35:cd:d2:09:c7:a7:bb:9f:4e:90:5c:
1c:09:98:b0:64:70:a2:3e:2f:59:99:91:22:dd:8b:
a5:39:35:2f:3a:ff:14:03:1d:a1:75:20:60:2c:f7:
d2:b4:df:72:d0:43:52:04:40:57:ff:7c:a5:63:71:
08:a6:a9:64:9b:b6:62:55:c8:d9:5f:cb:e9:cb:26:
6f:c3:62:fa:09:4e:c4:19:9c:05:9c:56:22:cd:3a:
35:72:d1:ad:40:c6:4b:83:b2:31:8f:d9:2c:01:e7:
d3:a7:d1:d0:18:a9:90:4d:e8:49:59:2b:80:3a:c6:
fd:4a:b6:a3:52:42:a1:9e:ef:7b:e6:65:62:34:12:
6d:86:09:65:af:c2:1c:e0:bd:db:7c:e5:42:bc:33:
5a:d8:91:aa:0c:6e:b8:ab:85:67:4b:0c:b6:14:6d:
c3:57:0f:47:dd:67:b9:df:af:82:a3:d0:13:64:84:
5e:b8:78:58:9b:1d:d1:c7:a8:96:e0:67:fe:21:98:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:47:5E:CE:94:D8:07:0A:76:3A:85:1C:B7:4D:1F:39:FC:61:93:3F
X509v3 Authority Key Identifier:
keyid:82:BC:63:3E:28:46:64:A4:CA:51:AD:59:76:C7:FA:F2:C6:24:6B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grxjPihGZKTKUa1Zdsf68sYka0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/403ec3-c02e-4463-ad40-2a91c2cd2079/1/grxjPihGZKTKUa1Zdsf68sYka0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f1:42:ab:95:70:e1:2d:d7:6d:bb:64:ca:d2:46:c2:68:f2:
f2:8f:70:bb:69:e9:67:a5:ce:db:8e:da:7d:56:47:59:0a:37:
c1:9c:d5:74:39:2b:cc:f4:27:e0:2d:83:16:51:09:4a:59:97:
e8:a0:b6:b0:a1:bc:24:7d:78:f5:9e:e4:e7:c5:65:30:79:86:
40:78:72:17:db:2d:bf:d3:99:b5:c6:a4:0e:ba:b4:f0:4d:ed:
a4:4a:e8:9d:7d:9a:06:a7:4b:fa:0b:30:a6:04:69:57:00:fe:
95:08:a5:22:68:f5:58:6f:10:f7:38:1b:f7:5d:4c:b0:b8:cb:
a8:31:5e:31:eb:48:8f:7c:86:0d:dd:81:45:b4:99:ca:42:fc:
f5:1b:04:b6:43:8a:b9:95:49:a1:17:8a:64:9c:2e:17:b0:50:
d0:7e:cd:f4:7a:6a:18:a7:7e:7f:92:26:f3:ab:5f:8f:c8:73:
c7:76:8a:71:69:04:3b:6a:c2:ec:7e:4f:4f:b2:b4:40:7c:c8:
85:5b:13:3e:83:4a:66:a6:03:d9:52:e9:46:cd:60:4f:aa:7a:
49:ed:82:ed:0d:4a:59:75:55:9f:f2:c4:86:e2:6e:b4:8b:be:
43:b5:03:30:b9:51:4c:56:00:c5:d5:14:5a:de:50:d0:62:39:
b6:73:7a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:59:08 2026 by rpki-client