Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
File: Grj4--pJuvWfzsIuSKn-IVfYZIM.mft (raw, json)
Hash identifier: bG4+hTJYJN1mlI59O6jwCn1BmuhNOfzaR6A3uJA+XvI=
Subject key identifier: 5F:96:BB:2E:70:59:9C:92:1F:74:5D:EC:C0:2C:5C:F4:20:8C:E9:A9
Authority key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
Certificate issuer: /CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Certificate serial: 019D9B87DDE25ACC377592AEF3D35F7E5811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
Manifest number: 0879
Signing time: Fri 17 Apr 2026 13:01:05 +0000
Manifest this update: Fri 17 Apr 2026 13:01:05 +0000
Manifest next update: Sat 18 Apr 2026 13:01:05 +0000
Files and hashes: 1: 0fJ-yxybAv-QFlNN6p0SVmcLCCw.roa (hash: XxEl++z5OIGhbPXD3dDGiudXN2Aw4yLGeSfQzFdx6XE=)
2: Grj4--pJuvWfzsIuSKn-IVfYZIM.crl (hash: jV9EYprrnL3BhjcL/AOZ5Xj7phXqUewNfOuFz60uy1A=)
3: mNrbGyIIfa4fLmutHXkEY0XNdeA.roa (hash: XyZ31cfTK799tFnPajLPxNb05Usvc+Q+zvjntqi0x6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:dd:e2:5a:cc:37:75:92:ae:f3:d3:5f:7e:58:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Validity
Not Before: Apr 17 13:01:05 2026 GMT
Not After : Apr 18 13:01:05 2026 GMT
Subject: CN=5f96bb2e70599c921f745decc02c5cf4208ce9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e1:81:6c:52:d5:bc:21:33:68:19:25:e1:e0:
1e:71:9e:bf:5e:72:bb:8b:2b:91:b9:4a:ae:7c:a4:
5c:61:76:9d:80:6a:15:0b:35:54:6b:6f:b0:db:5d:
d7:20:f4:e6:b5:be:52:8e:6b:4e:e3:a7:19:a7:87:
93:db:c6:0c:1d:83:0f:89:ad:27:60:c0:8e:37:44:
ec:e2:c3:04:04:36:b4:65:a8:db:e5:fb:20:4d:f5:
94:f5:95:98:b7:8f:2c:ad:22:5d:1c:8d:4c:be:74:
8f:c7:ba:5c:8e:10:c8:7e:a1:b7:5c:3b:b0:fe:d9:
da:48:71:45:a7:b9:fd:3f:08:fd:13:fd:1e:76:bf:
1c:d1:0c:86:37:db:43:d5:2f:7a:eb:6c:9b:f7:a0:
03:fd:71:7b:6c:83:88:c7:6f:4d:f3:38:e2:42:5b:
f9:a2:0c:8f:b1:e3:e6:24:07:d5:bd:03:40:78:a6:
d3:83:71:3c:63:62:c6:71:52:a5:f3:ce:12:17:e4:
7d:7c:e3:3a:06:b7:4b:19:df:16:cc:c8:9c:18:36:
45:80:cb:44:56:3d:58:11:31:85:b2:27:13:c4:e3:
68:60:d7:38:96:71:2a:f5:7e:24:bc:a3:98:22:65:
7d:8e:b8:63:83:cf:41:19:98:6f:60:3b:fd:97:ee:
37:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:96:BB:2E:70:59:9C:92:1F:74:5D:EC:C0:2C:5C:F4:20:8C:E9:A9
X509v3 Authority Key Identifier:
keyid:1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:94:11:29:16:ce:2a:f3:4f:24:5e:52:63:ed:32:3f:3b:f2:
33:ed:3c:73:80:6e:97:c6:5b:00:20:75:30:35:70:65:01:42:
83:d8:f9:7f:9b:1b:35:8d:25:a5:ca:90:c2:f4:36:36:8c:42:
d2:e0:9e:55:d6:af:f5:53:f4:20:9e:bd:1b:22:ed:c2:25:26:
1e:e4:a7:06:c8:9e:c8:8a:6b:0b:3d:d7:f4:df:6c:24:df:85:
cc:c7:84:30:b9:72:c1:03:8e:08:b4:93:d5:c3:0b:59:db:f5:
fd:f4:57:c3:86:6e:2e:1e:98:f7:6a:43:2e:03:68:5c:02:f9:
2c:f5:87:ad:2e:ea:68:cd:19:86:10:0e:50:ff:aa:0d:e4:f8:
56:6f:3a:13:97:32:af:48:ef:96:fd:93:9a:e3:9a:8c:f6:26:
61:10:d6:38:ee:af:43:6a:31:78:d8:7c:ed:77:3e:77:ed:a9:
36:ef:1f:85:4b:23:20:e5:61:4c:8f:40:b8:3e:56:7f:88:37:
e1:66:d4:87:38:76:3f:0e:8d:3e:e5:5b:2f:0e:de:a6:3d:a8:
08:d8:fc:ca:f3:29:6f:c5:25:78:b3:69:c1:a5:21:5e:3a:3d:
89:cb:de:bc:4c:a5:27:3a:63:1c:08:5b:28:39:b3:cc:c1:40:
5a:22:02:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:43 2026 by rpki-client