Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: L3KMLYjAFZSsDi6dMWD3ZiqW4MWBhqgV0ikOrd/Ub/k=
Subject key identifier: 5A:DE:E4:7E:B7:EA:89:5D:F0:E7:FE:B8:C6:67:5C:FD:20:95:D9:4E
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 019D9A74DD2AA6F27AC3B1348321289F6FB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:00:43 +0000
Manifest this update: Fri 17 Apr 2026 08:00:43 +0000
Manifest next update: Sat 18 Apr 2026 08:00:43 +0000
Files and hashes: 1: EK-BO9njT8D0PUd03822T1Wcn_Y.roa (hash: IVt2nvgD6bQiKsQebz3stonbNyplhQ3WbabmnplyKUM=)
2: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: bHq5TvZ1C7xafBVsT7xaAwlouoVa3sAJCchyOQgFc6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:dd:2a:a6:f2:7a:c3:b1:34:83:21:28:9f:6f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Apr 17 08:00:43 2026 GMT
Not After : Apr 18 08:00:43 2026 GMT
Subject: CN=5adee47eb7ea895df0e7feb8c6675cfd2095d94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d3:d6:82:80:09:41:d6:e9:5f:f5:4a:48:fd:
8c:98:43:f8:43:c4:8d:4a:51:5d:02:5b:9a:d5:13:
37:d5:cf:fb:50:eb:8e:84:37:fc:61:ec:86:64:ad:
6a:ab:42:0d:cc:c7:70:14:f9:ff:6d:78:1d:d8:df:
be:ee:94:d0:5c:80:4c:ae:5d:84:bf:ba:af:c4:c2:
fd:df:3e:ff:df:0c:f7:4c:f0:b6:63:3a:40:8e:0a:
27:58:a5:dd:cc:20:a0:37:f1:5a:82:d9:b7:64:5e:
1f:08:79:9d:bb:44:90:d4:70:81:c5:00:d0:f5:d8:
03:8e:aa:55:a1:d9:f1:e8:04:02:89:21:55:f5:9d:
6e:a7:7e:81:61:38:6f:ab:91:33:11:ba:b2:a1:c3:
71:5f:fd:bd:fa:6c:2a:89:8a:a2:76:2d:82:9b:76:
21:1a:57:20:c7:7b:d6:6a:69:f9:bc:81:cb:70:5a:
67:d7:63:40:b6:3f:d8:be:98:35:88:d0:38:17:7c:
89:2b:7b:b9:98:d0:88:3a:43:ae:a2:b2:41:68:43:
9f:e3:6e:5d:6b:5f:08:ae:b8:03:88:84:6e:0d:03:
cb:7d:28:7f:1f:b0:d5:2b:31:7c:ec:ba:09:f7:7b:
ba:e0:45:64:a9:4c:a6:1e:b0:1c:85:9d:49:92:b9:
4e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DE:E4:7E:B7:EA:89:5D:F0:E7:FE:B8:C6:67:5C:FD:20:95:D9:4E
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:ee:d4:8f:7f:1b:73:bb:35:76:0c:fc:81:21:1e:9d:22:7d:
07:48:88:be:91:c6:90:a9:d9:77:08:0b:f3:f2:0b:be:13:48:
20:f9:f6:23:15:3d:25:26:63:19:54:10:7a:e6:83:47:2c:f6:
31:aa:ff:ce:c7:cc:d2:45:af:ca:8e:b2:9b:67:7d:fd:0c:1e:
b2:ba:16:d0:0c:d3:ec:88:0e:66:3e:31:04:7e:b7:06:d3:cb:
5c:14:9b:10:84:97:03:03:83:b7:b5:4d:68:7c:7e:4c:82:46:
04:70:fb:dd:d6:57:23:79:7e:7c:ad:24:5e:a0:52:47:12:54:
85:0d:af:2f:24:c0:de:2b:44:16:87:6e:67:13:93:9c:54:73:
ba:d3:f1:a4:b0:23:2c:ce:d5:3a:b1:26:48:c0:cd:5a:1c:45:
8b:32:43:50:a4:b1:0a:a6:0c:46:f9:66:25:06:4a:f8:63:90:
8a:d9:eb:a7:af:34:db:6c:0e:9e:63:e3:10:63:2d:90:0a:45:
b9:f7:47:04:56:90:1a:16:07:41:40:89:37:56:19:ca:c0:6e:
1f:60:90:58:77:2a:d0:a4:ff:49:58:49:77:a9:64:b1:05:df:
5a:ff:15:a0:bd:c2:0e:35:e3:13:47:05:47:d2:e3:c7:7d:3d:
e0:b7:c1:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2adN0qpvJ6w7E0gyEon2+2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYjcwZTM0ODhkYzgzMWQ0NWE3NTc0NGUyZjhiYmEyNjdm
ZDMxZDYwHhcNMjYwNDE3MDgwMDQzWhcNMjYwNDE4MDgwMDQzWjAzMTEwLwYDVQQD
Eyg1YWRlZTQ3ZWI3ZWE4OTVkZjBlN2ZlYjhjNjY3NWNmZDIwOTVkOTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9PWgoAJQdbpX/VKSP2MmEP4Q8SN
SlFdAlua1RM31c/7UOuOhDf8YeyGZK1qq0INzMdwFPn/bXgd2N++7pTQXIBMrl2E
v7qvxML93z7/3wz3TPC2YzpAjgonWKXdzCCgN/Fagtm3ZF4fCHmdu0SQ1HCBxQDQ
9dgDjqpVodnx6AQCiSFV9Z1up36BYThvq5EzEbqyocNxX/29+mwqiYqidi2Cm3Yh
Glcgx3vWamn5vIHLcFpn12NAtj/Yvpg1iNA4F3yJK3u5mNCIOkOuorJBaEOf425d
a18IrrgDiIRuDQPLfSh/H7DVKzF87LoJ93u64EVkqUymHrAchZ1JkrlOgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFre5H636old8Of+uMZnXP0gldlOMB8GA1UdIwQY
MBaAFBq3DjSI3IMdRadXROL4u6Jn/THWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMt
MDk3MzNjYjAyNjllLzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hYjkwMTItYmZhZS00NzI5LWI5OTMtMDk3MzNjYjAyNjll
LzEvR3JjT05JamNneDFGcDFkRTR2aTdvbWY5TWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzu7Uj38b
c7s1dgz8gSEenSJ9B0iIvpHGkKnZdwgL8/ILvhNIIPn2IxU9JSZjGVQQeuaDRyz2
Mar/zsfM0kWvyo6ym2d9/QwesroW0AzT7IgOZj4xBH63BtPLXBSbEISXAwODt7VN
aHx+TIJGBHD73dZXI3l+fK0kXqBSRxJUhQ2vLyTA3itEFoduZxOTnFRzutPxpLAj
LM7VOrEmSMDNWhxFizJDUKSxCqYMRvlmJQZK+GOQitnrp68022wOnmPjEGMtkApF
ufdHBFaQGhYHQUCJN1YZysBuH2CQWHcq0KT/SVhJd6lksQXfWv8VoL3CDjXjE0cF
R9Ljx3094LfBkQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:05:54 2026 by rpki-client