Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: cgbT9rE8nhS/fHc0zIIvmwOFHafvCjEaqkw+fTjfrZk=
Subject key identifier: ED:21:1F:6E:9E:40:89:E9:E1:CC:4C:69:9B:51:77:AC:99:4A:1A:4E
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 01A0F3E7F4BE50C47FCE468FE3B347CBCA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 1A7E
Signing time: Wed 30 Sep 2026 20:00:59 +0000
Manifest this update: Wed 30 Sep 2026 20:00:59 +0000
Manifest next update: Thu 01 Oct 2026 20:00:59 +0000
Files and hashes: 1: EK-BO9njT8D0PUd03822T1Wcn_Y.roa (hash: IVt2nvgD6bQiKsQebz3stonbNyplhQ3WbabmnplyKUM=)
2: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: BKj6jOuMWiDREh6o+RX9gR3Y5Kcd1sUvJ1HffY8bbAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:e7:f4:be:50:c4:7f:ce:46:8f:e3:b3:47:cb:ca:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Sep 30 20:00:59 2026 GMT
Not After : Oct 1 20:00:59 2026 GMT
Subject: CN=ed211f6e9e4089e9e1cc4c699b5177ac994a1a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:68:9a:c1:d8:94:c9:d1:81:61:3e:ff:0e:c4:
4d:81:bc:91:41:55:fb:9d:54:91:43:25:90:ad:86:
3c:93:b0:e4:f4:2d:00:44:ff:04:e5:f7:4b:f6:32:
96:ae:45:e8:86:a9:a4:ed:95:22:08:c7:67:5c:99:
d1:7e:bf:d5:d6:9c:f6:17:ff:33:66:ec:e6:7a:d8:
67:14:1f:7d:b0:a7:51:27:cf:41:b6:5f:e7:06:d5:
cb:50:69:97:dd:26:bc:4a:8b:d9:c2:09:75:0c:3c:
3e:a3:c9:57:bf:4d:7e:3f:b1:95:a6:20:0a:4c:2f:
a0:8f:d6:73:ee:cd:d4:39:cb:4f:1c:96:5e:b0:e6:
62:72:69:3b:3d:85:fc:05:8d:0d:7a:20:a3:d5:de:
7f:38:06:0b:c9:67:75:53:36:bc:ac:64:47:b5:2c:
db:01:a5:f9:1a:35:4e:c1:7f:9e:1f:f5:dc:ab:c3:
f1:a4:24:7e:cd:2d:b5:12:da:20:c2:45:c6:80:e2:
09:d4:db:42:63:01:0d:a7:17:0f:28:1a:5a:19:39:
00:d8:39:f2:c8:45:ee:ed:a2:9a:c3:13:bb:d8:67:
64:a0:1e:47:cb:c1:68:c7:c6:d5:59:81:61:04:8f:
58:1c:d9:2b:e6:7b:d2:f6:7e:d1:fb:c7:e7:25:45:
62:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:21:1F:6E:9E:40:89:E9:E1:CC:4C:69:9B:51:77:AC:99:4A:1A:4E
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:76:af:6f:c5:34:55:fe:ea:f2:e2:7e:48:d5:2d:a8:81:01:
21:1f:1d:c9:68:a7:06:24:2c:4d:f0:34:b1:04:5c:8f:2c:3a:
a8:8d:87:9b:db:2e:48:87:6b:94:6c:a5:eb:df:b7:7f:fb:7b:
0f:c7:2f:d7:bc:66:bd:8e:33:4f:e8:6e:fc:ee:d9:17:a7:17:
2c:31:ce:dc:fe:09:8f:7f:b1:75:f5:06:2f:1a:12:e0:32:60:
e7:16:f1:0a:7d:34:a6:dd:c8:4d:8d:81:0b:aa:2a:8d:ea:0a:
93:e5:38:11:ed:cf:b0:5c:ca:53:1d:71:71:b9:5c:1a:b2:8e:
d5:fa:f6:08:11:ac:4b:fe:4f:1b:48:c6:90:8e:64:41:d2:8e:
15:2d:84:34:f0:79:5b:2f:90:8e:b1:37:14:a3:c3:0a:89:85:
db:5d:cd:71:55:13:c3:fd:52:76:82:5b:c0:c9:c2:d9:b8:f1:
45:3c:09:86:fa:c8:6d:3a:ce:87:08:e6:cf:8d:31:89:30:4f:
64:48:7c:23:74:19:39:0b:2b:d3:43:91:db:ac:93:b1:ba:95:
d0:d6:75:60:16:3b:74:aa:23:e8:ab:cf:50:49:54:bc:9e:14:
41:90:69:23:48:eb:f0:ad:3c:04:ce:e2:0f:a2:1d:17:04:e1:
fa:65:36:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDz5/S+UMR/zkaP47NHy8onMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjcwZTM0ODhkYzgzMWQ0NWE3NTc0NGUyZjhiYmEyNjdm
ZDMxZDYwHhcNMjYwOTMwMjAwMDU5WhcNMjYxMDAxMjAwMDU5WjAzMTEwLwYDVQQD
EyhlZDIxMWY2ZTllNDA4OWU5ZTFjYzRjNjk5YjUxNzdhYzk5NGExYTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62iawdiUydGBYT7/DsRNgbyRQVX7
nVSRQyWQrYY8k7Dk9C0ARP8E5fdL9jKWrkXohqmk7ZUiCMdnXJnRfr/V1pz2F/8z
ZuzmethnFB99sKdRJ89Btl/nBtXLUGmX3Sa8SovZwgl1DDw+o8lXv01+P7GVpiAK
TC+gj9Zz7s3UOctPHJZesOZicmk7PYX8BY0NeiCj1d5/OAYLyWd1Uza8rGRHtSzb
AaX5GjVOwX+eH/Xcq8PxpCR+zS21EtogwkXGgOIJ1NtCYwENpxcPKBpaGTkA2Dny
yEXu7aKawxO72GdkoB5Hy8Fox8bVWYFhBI9YHNkr5nvS9n7R+8fnJUViHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0hH26eQInp4cxMaZtRd6yZShpOMB8GA1UdIwQY
MBaAFBq3DjSI3IMdRadXROL4u6Jn/THWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMt
MDk3MzNjYjAyNjllLzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMtMDk3MzNjYjAyNjll
LzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwHavb8U0
Vf7q8uJ+SNUtqIEBIR8dyWinBiQsTfA0sQRcjyw6qI2Hm9suSIdrlGyl69+3f/t7
D8cv17xmvY4zT+hu/O7ZF6cXLDHO3P4Jj3+xdfUGLxoS4DJg5xbxCn00pt3ITY2B
C6oqjeoKk+U4Ee3PsFzKUx1xcblcGrKO1fr2CBGsS/5PG0jGkI5kQdKOFS2ENPB5
Wy+QjrE3FKPDComF213NcVUTw/1SdoJbwMnC2bjxRTwJhvrIbTrOhwjmz40xiTBP
ZEh8I3QZOQsr00OR26yTsbqV0NZ1YBY7dKoj6KvPUElUvJ4UQZBpI0jr8K08BM7i
D6IdFwTh+mU2kw==
-----END CERTIFICATE-----
Generated at Thu Oct 1 02:48:56 2026 by rpki-client