Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
File: GrcONIjcgx1Fp1dE4vi7omf9MdY.mft (raw, json)
Hash identifier: PCtEkDJ3kX8fjytPQMBZYMP+sgBE6Oy4Ix+QXNepy1k=
Subject key identifier: A2:84:D6:C3:8F:23:B3:70:05:EC:9E:3F:E1:AD:AF:9B:F0:98:8F:16
Authority key identifier: 1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
Certificate issuer: /CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Certificate serial: 019CAAFD17CE8A9F7466A7696AFFC7993A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:39 +0000
Manifest this update: Sun 01 Mar 2026 20:00:39 +0000
Manifest next update: Mon 02 Mar 2026 20:00:39 +0000
Files and hashes: 1: EK-BO9njT8D0PUd03822T1Wcn_Y.roa (hash: IVt2nvgD6bQiKsQebz3stonbNyplhQ3WbabmnplyKUM=)
2: GrcONIjcgx1Fp1dE4vi7omf9MdY.crl (hash: RbGmeQd1GVlB+69UNvHfD9o7tsT4sPfmgBXeF3EmNL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:17:ce:8a:9f:74:66:a7:69:6a:ff:c7:99:3a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ab70e3488dc831d45a75744e2f8bba267fd31d6
Validity
Not Before: Mar 1 20:00:39 2026 GMT
Not After : Mar 2 20:00:39 2026 GMT
Subject: CN=a284d6c38f23b37005ec9e3fe1adaf9bf0988f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:58:72:08:84:e5:86:72:19:e3:6e:ef:02:
1d:db:95:3e:4a:3e:29:78:5f:98:ff:15:d2:e6:5f:
c0:35:da:22:13:68:46:dc:ef:a8:66:40:6d:90:7e:
1c:16:4d:7c:b1:4e:aa:3e:2f:b3:ce:78:fa:01:60:
53:93:15:a1:78:09:51:a3:71:90:2f:7c:d7:7c:bd:
e0:55:07:da:1a:db:74:88:39:40:0e:e8:ab:eb:85:
db:70:c0:b2:49:73:b7:76:ef:8c:54:c7:3b:11:d3:
55:a3:7d:fb:41:b8:67:85:5e:45:35:55:f0:6b:f2:
49:3e:4b:78:fb:0e:d7:e3:14:f8:a1:6d:20:26:cb:
98:4f:b8:74:9b:9d:42:ca:bb:82:40:c3:5e:29:f9:
bd:a4:a1:67:a6:2a:bc:ce:76:a6:56:81:90:8e:6a:
8e:cd:13:21:a2:4b:60:20:a7:ca:70:ca:0b:73:5b:
c6:e6:ff:ee:fe:d7:a9:1b:8d:7d:0b:f1:fe:68:cb:
e1:de:1f:0d:2c:9d:a8:02:ce:4f:89:69:f6:ae:53:
e6:5f:1e:10:24:7b:dd:eb:0c:bd:f2:6b:2b:f1:f3:
a0:f9:2c:01:c6:47:6f:bd:21:1c:6e:33:5b:80:4b:
90:9b:da:48:7f:7d:ca:52:fc:e4:e1:8d:60:26:61:
d0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:84:D6:C3:8F:23:B3:70:05:EC:9E:3F:E1:AD:AF:9B:F0:98:8F:16
X509v3 Authority Key Identifier:
keyid:1A:B7:0E:34:88:DC:83:1D:45:A7:57:44:E2:F8:BB:A2:67:FD:31:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GrcONIjcgx1Fp1dE4vi7omf9MdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ab9012-bfae-4729-b993-09733cb0269e/1/GrcONIjcgx1Fp1dE4vi7omf9MdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ae:5e:ba:8f:86:81:d0:a1:ca:4c:9e:f0:cb:ca:40:0e:fd:
ea:9d:f1:60:14:2f:64:0d:a7:24:9f:d4:ad:3a:32:af:84:ca:
e1:ff:96:2c:2b:b3:74:49:ad:f4:c9:ec:a7:12:1f:d1:67:55:
2f:5b:64:16:ba:72:ba:f2:0d:a6:7c:15:93:4b:d5:d9:26:2a:
41:d1:6d:86:d9:a8:cf:5f:12:34:63:da:7b:d9:44:a9:c0:3c:
8a:f0:15:b5:bb:54:8b:cc:cc:0f:d8:f5:46:f1:ab:9b:57:91:
85:f5:31:b5:0d:55:81:b2:05:51:f6:96:7e:2f:ac:20:4a:25:
cf:a8:61:38:de:ee:d5:cc:2f:19:28:7c:eb:9c:7d:04:a4:f7:
df:55:ba:22:24:54:ce:74:04:1f:ab:ba:69:fd:9d:c1:8d:e2:
5e:27:13:de:86:b1:16:5b:b9:f0:88:f8:1e:c3:e4:1b:d4:2c:
29:27:2d:9c:17:29:36:5b:f3:55:c6:cb:89:1f:aa:03:ae:8b:
09:10:48:aa:71:22:9b:8b:4b:3d:4f:0e:ef:03:1f:77:9e:b7:
a3:8a:f0:ef:7a:d5:48:58:d8:11:04:45:99:ec:84:0b:b1:80:
dc:57:ba:35:3b:94:80:84:bc:1a:8c:62:96:65:3d:b0:d0:3e:
16:6f:e8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:44:09 2026 by rpki-client