Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
File: Grj4--pJuvWfzsIuSKn-IVfYZIM.mft (raw, json)
Hash identifier: NoCL2+fGm5JtLoSPlgAAZvRcHCoVX1CPv6G9Fg75yqI=
Subject key identifier: 39:E3:FD:72:42:61:ED:45:8A:95:3C:81:90:18:CD:BB:04:A1:82:44
Authority key identifier: 1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
Certificate issuer: /CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Certificate serial: 01A0C4B2A114D36A26FC9D805C6D099B9A8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
Manifest number: 0A1C
Signing time: Mon 21 Sep 2026 16:00:35 +0000
Manifest this update: Mon 21 Sep 2026 16:00:35 +0000
Manifest next update: Tue 22 Sep 2026 16:00:35 +0000
Files and hashes: 1: 0fJ-yxybAv-QFlNN6p0SVmcLCCw.roa (hash: XxEl++z5OIGhbPXD3dDGiudXN2Aw4yLGeSfQzFdx6XE=)
2: Grj4--pJuvWfzsIuSKn-IVfYZIM.crl (hash: sP8KLBKKT+Ksz/dym0/iw6zC5CoUDsz0MRszFRFJqQo=)
3: mNrbGyIIfa4fLmutHXkEY0XNdeA.roa (hash: XyZ31cfTK799tFnPajLPxNb05Usvc+Q+zvjntqi0x6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:a1:14:d3:6a:26:fc:9d:80:5c:6d:09:9b:9a:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab8f8fbea49baf59fcec22e48a9fe2157d86483
Validity
Not Before: Sep 21 16:00:35 2026 GMT
Not After : Sep 22 16:00:35 2026 GMT
Subject: CN=39e3fd724261ed458a953c819018cdbb04a18244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7b:4b:6d:f8:14:b6:c3:9b:fb:66:c4:da:0a:
db:92:83:95:f5:28:06:ac:bf:bb:81:11:80:4c:84:
64:57:0f:dd:50:f5:e6:83:bf:05:1e:c3:41:d3:46:
e8:14:15:b6:6a:8c:fd:84:f4:a5:f3:1f:02:ff:b6:
24:6d:25:45:ec:26:14:ab:c5:49:cd:65:ff:6d:f0:
1f:a9:f6:ff:c0:15:07:7d:3f:38:f2:69:d2:37:a6:
29:aa:5f:e6:03:b3:12:a3:4e:00:02:47:ee:72:eb:
b5:b4:28:16:ba:48:df:b3:d2:ec:31:34:6b:31:23:
92:cc:52:f0:fb:28:cc:ed:08:cd:47:fe:71:ad:ca:
65:4b:77:7f:ec:aa:95:b9:5c:1b:c3:7e:15:ab:b9:
a2:e8:94:c1:56:4c:33:2e:1b:ae:ed:d2:81:04:c8:
ad:b1:15:47:28:ed:11:27:12:69:22:f4:96:a3:47:
b6:6f:d0:b1:fa:00:70:db:58:38:e0:71:63:e6:12:
7f:45:e7:28:08:b8:2e:5d:c5:6c:17:ac:e3:4e:18:
16:63:ce:f0:0e:c0:09:f8:88:11:3f:b1:ee:2c:02:
08:4e:35:8b:f8:a4:de:71:24:d7:85:28:d3:40:1e:
fb:5b:3b:e6:b8:87:1e:14:b4:e5:67:2f:52:6d:d6:
06:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E3:FD:72:42:61:ED:45:8A:95:3C:81:90:18:CD:BB:04:A1:82:44
X509v3 Authority Key Identifier:
keyid:1A:B8:F8:FB:EA:49:BA:F5:9F:CE:C2:2E:48:A9:FE:21:57:D8:64:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Grj4--pJuvWfzsIuSKn-IVfYZIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ecc102-ad7e-4101-a727-58018a03330a/1/Grj4--pJuvWfzsIuSKn-IVfYZIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:49:ee:b3:31:2e:4e:3e:1b:81:b8:2d:cf:18:cf:4b:49:cc:
6a:05:79:7e:4b:e6:f5:ce:a7:00:78:83:05:55:61:f7:b2:72:
95:04:c8:54:76:6e:0e:54:01:8f:ce:2d:c7:eb:ec:9a:b4:fe:
27:01:c6:60:e7:a9:ff:6d:14:ca:92:86:98:51:0e:6e:76:3a:
a6:85:67:5f:ed:d1:ff:0b:08:c0:91:a9:df:94:dc:0c:75:07:
a9:0e:73:04:76:48:d0:ea:5d:c4:63:d1:d0:cc:31:8e:82:c3:
98:fe:42:78:7a:00:fc:08:43:10:59:5d:6c:26:a3:9c:d8:42:
04:37:64:93:d5:5e:61:1d:4c:b4:1f:70:f1:92:fe:07:34:e8:
20:cd:be:2d:b9:31:ed:83:cf:ad:ae:e1:3c:b0:13:a7:bd:d1:
40:10:46:e0:36:b0:dd:28:6f:15:f2:06:f5:1b:c4:72:5d:57:
92:c6:7e:3a:08:94:6e:a1:87:3b:da:d5:e8:39:db:f6:67:76:
f1:89:1d:60:22:12:2a:23:d3:72:fb:bf:8a:77:93:0e:e5:a5:
f3:ab:06:8f:0a:fb:4a:ab:8d:5e:3b:e0:ea:ff:77:37:bd:d7:
55:64:3c:1c:08:a6:5b:13:ad:1e:8a:30:af:c4:58:8a:04:72:
c3:c3:46:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:09:01 2026 by rpki-client