Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
File: grLg0A3Xcank1gu_S-UhFOp32wM.mft (raw, json)
Hash identifier: C4OdpFmr+B/5HKYXFGNwrFxDHdWLhgL9rE82lPnF6KU=
Subject key identifier: A9:30:81:03:9A:39:F9:D7:C0:65:7B:E0:04:64:A6:62:A8:05:B2:1D
Authority key identifier: 82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
Certificate issuer: /CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Certificate serial: 019CACB48500119F12E492785765131E6A5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
Manifest number: 0DC3
Signing time: Mon 02 Mar 2026 04:00:37 +0000
Manifest this update: Mon 02 Mar 2026 04:00:37 +0000
Manifest next update: Tue 03 Mar 2026 04:00:37 +0000
Files and hashes: 1: grLg0A3Xcank1gu_S-UhFOp32wM.crl (hash: Ouq+i3R7/CWT0+v9hThwxsLMUyTpksJTSFN+EkqBagE=)
2: sdh8pmOJsGStF0am0yT5pkIHwtc.roa (hash: xa/Kb953bRWnupDskAs22J1Rh+G0Xh3NKxVztnMScFI=)
3: yzKXO4jXIcQhvYNB-AXjR_e7tXo.roa (hash: HbKWlAXeMlwQXI/oWRqyG/+YEkJ30n/PudG/ZFxPjv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:85:00:11:9f:12:e4:92:78:57:65:13:1e:6a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Validity
Not Before: Mar 2 04:00:37 2026 GMT
Not After : Mar 3 04:00:37 2026 GMT
Subject: CN=a93081039a39f9d7c0657be00464a662a805b21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:98:b2:25:80:c1:7b:cb:82:56:b8:9a:7e:7a:
44:89:3d:ea:95:cf:32:43:44:5b:42:85:bf:fe:80:
1a:31:e4:26:72:f9:e0:13:b8:25:ef:46:dd:b2:e0:
65:73:67:37:ad:06:0e:28:95:1f:d1:f2:b6:a6:ee:
ca:a4:09:2e:2b:69:4a:80:82:05:2a:3d:51:2b:aa:
db:1f:70:dd:62:fb:9d:be:1f:52:ed:fd:16:fc:da:
b3:6f:c2:86:82:51:e0:3f:2b:6c:ce:b4:9c:52:b6:
28:22:bf:59:5c:83:7f:9e:2b:57:5f:95:8e:99:62:
0d:8b:3c:33:22:ff:49:57:99:04:d9:39:96:87:47:
14:93:cc:21:74:10:fd:00:70:70:21:e6:23:6a:ea:
3e:79:cb:5c:a7:f4:ef:aa:ad:d5:a5:59:0a:5b:60:
25:80:05:f0:98:b9:28:69:b3:97:f9:4d:86:a9:57:
86:6f:0c:b5:f7:32:91:c8:4e:8d:3d:46:88:b5:a3:
74:91:7f:4e:6c:66:c2:c3:22:87:38:21:17:2f:cc:
4c:73:a3:2f:ce:b2:c3:f2:9e:e6:70:35:d7:7b:08:
a1:37:1a:51:6d:3a:20:00:09:fa:42:5f:6b:03:5c:
17:6f:6e:9b:58:98:a9:47:b6:35:e2:b8:bd:24:73:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:30:81:03:9A:39:F9:D7:C0:65:7B:E0:04:64:A6:62:A8:05:B2:1D
X509v3 Authority Key Identifier:
keyid:82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:97:09:39:0a:ae:2d:21:f2:e9:88:65:7b:4f:43:0c:ee:3f:
24:62:b7:c1:04:eb:06:fd:a5:5b:86:f7:dc:08:68:41:9a:f3:
5c:06:89:43:08:8b:52:fa:bf:a1:36:33:39:35:93:d2:ce:c1:
1e:79:ac:8e:e7:b9:61:f1:98:d6:7b:96:22:0f:3d:3b:1f:d0:
5b:3b:77:0a:34:9b:f0:2d:15:bc:f6:bd:9f:de:0a:69:3a:32:
25:8c:c5:9b:e1:6f:69:c7:3f:cc:19:71:f5:64:f0:1d:03:1f:
f0:5d:66:0c:8a:3e:09:27:b1:fd:d7:40:8e:63:0b:ad:c0:7d:
db:4e:5c:c0:31:0d:df:e9:c9:8b:9f:5c:34:a4:ca:b0:b5:b8:
a0:e7:4b:11:d1:eb:97:f5:4a:19:9c:2a:87:e1:3a:e9:6d:b3:
fd:5e:e5:15:68:c4:50:f1:15:b3:bf:b4:af:4c:ce:21:22:91:
a5:44:8f:6e:a8:3a:64:68:28:b5:10:c3:86:5e:e1:7c:bb:b7:
c1:05:e7:8e:79:49:b6:57:9e:95:63:cc:23:46:89:82:46:25:
e5:dc:5c:db:f9:fa:dd:d1:18:68:53:85:6e:6a:69:7c:56:68:
80:eb:11:16:4b:fb:09:ae:3c:e2:b7:3a:08:fe:d6:75:19:d6:
e9:c9:74:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:45 2026 by rpki-client