Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
File: GR0Irp2FEZYMPHuEweKmZiHiReE.mft (raw, json)
Hash identifier: 3VkV+VikHlsbo2dSrSGRm+8hoMVzYuV6Le7XIXzDdCM=
Subject key identifier: 9D:25:D2:70:55:E0:E0:6B:1F:B5:0B:B8:1D:74:F5:A8:A9:E4:FD:9E
Authority key identifier: 19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
Certificate issuer: /CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Certificate serial: 019CAC468A2BED4D4247D6D671632319443E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 02:00:29 +0000
Manifest this update: Mon 02 Mar 2026 02:00:29 +0000
Manifest next update: Tue 03 Mar 2026 02:00:29 +0000
Files and hashes: 1: GR0Irp2FEZYMPHuEweKmZiHiReE.crl (hash: 0A6JPyfLVjito/2MHPSnP40nLJkhhG/ggvqAInMOFQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:8a:2b:ed:4d:42:47:d6:d6:71:63:23:19:44:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191d08ae9d8511960c3c7b84c1e2a66621e245e1
Validity
Not Before: Mar 2 02:00:29 2026 GMT
Not After : Mar 3 02:00:29 2026 GMT
Subject: CN=9d25d27055e0e06b1fb50bb81d74f5a8a9e4fd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:29:34:78:22:5a:44:9f:2b:4a:72:99:d5:b4:
f3:fc:67:3e:ef:5b:7c:10:06:ba:8e:34:85:d6:33:
1f:6b:fc:d1:14:6e:d5:9b:af:7e:17:c3:32:69:40:
93:80:f1:ba:7f:bd:18:ca:27:85:4e:67:96:72:ed:
b3:f9:be:3b:f3:dc:d8:13:ba:55:3c:06:18:12:d8:
2c:e1:6e:6a:c1:ce:0d:a4:9a:b7:0d:85:a4:9e:8d:
7d:60:df:96:ec:dd:e1:9b:6e:31:f9:a1:27:e7:d0:
a1:3d:37:38:83:2c:a6:ee:c8:84:47:2f:a2:dd:2d:
da:db:ed:ce:ff:ae:90:38:a6:a2:05:84:65:17:85:
45:28:96:d1:10:68:65:3b:74:51:7a:27:f4:c9:ce:
be:12:30:92:73:d7:01:f4:04:b7:0f:0e:aa:34:a6:
d7:15:26:3d:84:99:c1:53:6b:fe:c4:b5:d9:49:e1:
2a:cf:dd:5a:a4:d0:98:82:81:ae:68:2a:86:5f:80:
59:9d:86:0d:d9:f1:8d:fc:d8:00:56:be:2e:2b:9f:
cd:2e:54:c7:21:45:9b:ea:18:54:03:13:dc:98:86:
a0:0b:8f:ec:a1:32:48:61:79:18:85:c3:41:69:a5:
0b:5f:fd:83:55:a8:b7:f7:fa:76:9e:0c:c6:bb:73:
0d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:25:D2:70:55:E0:E0:6B:1F:B5:0B:B8:1D:74:F5:A8:A9:E4:FD:9E
X509v3 Authority Key Identifier:
keyid:19:1D:08:AE:9D:85:11:96:0C:3C:7B:84:C1:E2:A6:66:21:E2:45:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR0Irp2FEZYMPHuEweKmZiHiReE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/dd3755-6411-4064-a46e-9b5695e3c901/1/GR0Irp2FEZYMPHuEweKmZiHiReE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:00:98:bb:14:5e:f0:63:52:50:d2:45:1b:44:23:5a:86:c4:
aa:9c:cc:5f:7b:de:3f:38:2f:56:e8:f9:0b:0a:3a:54:6a:83:
5e:d3:06:0b:1a:92:e2:ee:1c:d1:f6:fb:42:a2:31:6c:5e:77:
86:0c:03:2d:a0:8d:52:e7:70:bb:70:61:b2:3a:20:38:92:2b:
f8:e0:e1:4a:4f:53:bb:ea:c7:f8:bc:c7:ca:75:61:45:20:a5:
62:29:f0:c5:3e:d7:33:7a:e1:b4:7d:e2:b0:cb:f4:63:e3:54:
66:85:45:28:74:6c:98:51:25:18:7d:2d:24:fa:75:24:18:59:
1b:e3:3d:c7:3d:e0:aa:99:bd:59:62:7c:8f:ce:a7:85:ee:47:
6d:f0:26:a2:0f:fa:59:d6:e8:30:1a:81:96:66:d0:ef:05:c3:
85:29:45:fb:b1:e7:9d:98:e7:01:77:c3:99:e7:8a:18:a5:b8:
21:ef:44:b5:ea:e7:b1:06:69:fb:2f:c2:27:c0:2b:56:e4:83:
e3:57:05:56:c2:c9:ba:ad:49:ce:47:b8:7f:53:a7:67:90:d7:
2d:b3:ee:66:f0:53:f2:91:7d:c2:88:eb:2f:cb:37:30:07:e2:
54:7b:0c:92:00:61:bb:c0:c3:4d:28:25:bf:1a:ac:a8:71:02:
a2:d5:b5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:36 2026 by rpki-client