Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
File: GR0Irp2FEZYMPHuEweKmZiHiReE.mft (raw, json)
Hash identifier: jRfs5aEzidhqcKl19IqmAlmntsvguH0QbKbR2SVqToY=
Subject key identifier: E2:D3:75:84:FD:AE:CD:78:F5:57:BD:DC:57:5C:DB:24:63:3F:2F:FE
Authority key identifier: 19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
Certificate issuer: /CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Certificate serial: 019D97E21A26B53AB5B6BFB3F2A9264315AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
Manifest number: 18BC
Signing time: Thu 16 Apr 2026 20:01:10 +0000
Manifest this update: Thu 16 Apr 2026 20:01:10 +0000
Manifest next update: Fri 17 Apr 2026 20:01:10 +0000
Files and hashes: 1: GR0Irp2FEZYMPHuEweKmZiHiReE.crl (hash: TdGbJSWLqj5oCDmc0Z+3ni/Oox4KgpL/PFnNQr01yQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:1a:26:b5:3a:b5:b6:bf:b3:f2:a9:26:43:15:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Validity
Not Before: Apr 16 20:01:10 2026 GMT
Not After : Apr 17 20:01:10 2026 GMT
Subject: CN=e2d37584fdaecd78f557bddc575cdb24633f2ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:62:e2:1c:32:b6:60:9f:b8:4c:1d:4f:73:eb:
b8:4a:6d:b7:c3:90:30:c8:e8:26:7a:a9:59:f4:d7:
10:01:31:e2:14:87:1d:97:a9:2e:1c:f0:72:7c:55:
30:2d:ff:78:f0:e5:e0:75:64:d8:fd:35:a6:d9:3c:
49:98:46:44:f1:d5:f9:68:41:64:c5:73:c5:90:db:
ab:96:d4:8c:b0:32:77:6b:41:7b:13:00:88:4e:2b:
9a:8d:8d:f9:dc:64:71:1c:75:6a:e6:3c:6b:b4:a3:
9b:6a:e3:6a:9f:50:21:50:f9:3c:10:35:b7:2b:b7:
61:39:20:4a:10:15:95:27:8a:69:fd:21:90:04:60:
50:95:c5:07:c2:33:5e:bd:eb:95:60:7d:20:2f:5a:
88:a9:2e:05:f3:c7:f2:e9:50:82:eb:02:54:01:33:
1f:53:08:e4:47:3e:7b:28:50:b7:75:1e:6b:22:84:
aa:0d:17:3f:c7:02:35:ae:30:f0:37:3a:ad:f7:e4:
0a:04:72:56:68:5e:03:7c:7e:31:71:4c:59:ba:7d:
a3:93:99:08:69:d3:38:40:17:7f:e6:5d:86:55:bd:
dc:90:f2:ae:4d:7a:73:21:f4:4a:ba:41:58:9f:cb:
87:a1:89:df:b3:f0:2b:74:ec:ac:c7:2b:ff:e9:c2:
c9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D3:75:84:FD:AE:CD:78:F5:57:BD:DC:57:5C:DB:24:63:3F:2F:FE
X509v3 Authority Key Identifier:
keyid:19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:55:76:89:9e:a3:a7:ba:49:4a:ac:94:fa:e3:62:ba:3b:d6:
10:89:8f:fe:3f:1e:f6:7b:24:3f:ca:f2:a5:53:b8:24:79:10:
65:46:84:aa:dd:b8:48:38:ef:5c:6c:8b:0a:cb:4b:94:fc:9e:
8b:95:1e:28:e8:b0:18:23:c0:17:b2:1d:61:a6:66:fc:0e:ab:
8d:01:f2:09:9b:7d:c4:05:bb:0f:7d:b6:b3:6f:72:71:b8:21:
f1:59:7f:48:32:22:5a:fb:da:c6:89:44:f8:52:d0:77:40:ff:
fe:c6:ff:05:1b:25:d7:50:91:fd:74:f5:e8:94:b5:87:92:d3:
47:7d:fe:20:73:17:06:a3:cf:ad:e5:9b:38:a1:23:be:cb:d1:
da:a6:25:36:90:90:34:92:7c:50:d5:be:45:8b:a4:a1:c4:08:
76:8d:c6:52:81:ce:ab:d7:79:76:a4:04:da:da:29:da:ba:5c:
35:0b:c1:be:83:c2:db:07:f0:43:4a:2b:a4:ad:79:1c:77:e0:
aa:a3:c8:b4:ad:3d:db:9e:2e:8d:f8:e9:cc:44:4a:4f:8b:91:
6c:67:8c:e2:49:9a:dd:1f:e1:68:05:c8:6b:71:57:a9:38:a7:
0a:4f:04:db:ee:8f:65:b0:14:78:22:91:6c:a4:d6:8e:6e:33:
76:ee:51:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:12 2026 by rpki-client