Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
File: grLg0A3Xcank1gu_S-UhFOp32wM.mft (raw, json)
Hash identifier: HrM1rWIgJtLTSPNCxGcKrRtDW+M2kqTIQAzlYhQfIsU=
Subject key identifier: FE:04:E1:30:EC:65:D0:CD:19:6B:24:29:80:5D:BE:15:31:1C:E0:4C
Authority key identifier: 82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
Certificate issuer: /CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Certificate serial: 019D9A3E1FD72B6C3ADF4A3F25E8F3131D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
Manifest number: 0E3E
Signing time: Fri 17 Apr 2026 07:00:55 +0000
Manifest this update: Fri 17 Apr 2026 07:00:55 +0000
Manifest next update: Sat 18 Apr 2026 07:00:55 +0000
Files and hashes: 1: grLg0A3Xcank1gu_S-UhFOp32wM.crl (hash: P+LoM+kQBdBUX7ikCTkf4MsgdvCMOfZKFWfJrqUqHU4=)
2: sdh8pmOJsGStF0am0yT5pkIHwtc.roa (hash: xa/Kb953bRWnupDskAs22J1Rh+G0Xh3NKxVztnMScFI=)
3: yzKXO4jXIcQhvYNB-AXjR_e7tXo.roa (hash: HbKWlAXeMlwQXI/oWRqyG/+YEkJ30n/PudG/ZFxPjv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:1f:d7:2b:6c:3a:df:4a:3f:25:e8:f3:13:1d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b2e0d00dd771a9e4d60bbf4be52114ea77db03
Validity
Not Before: Apr 17 07:00:55 2026 GMT
Not After : Apr 18 07:00:55 2026 GMT
Subject: CN=fe04e130ec65d0cd196b2429805dbe15311ce04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:98:db:e2:82:c2:01:cb:1c:e7:a3:09:e7:d8:
6a:b0:ee:17:69:12:85:73:29:bc:d1:95:82:c7:e5:
bd:11:f5:8c:49:20:6c:42:f5:cc:8e:7b:44:07:62:
c5:e8:e6:99:be:09:d8:c6:ce:d9:e7:83:f9:48:e3:
53:2f:7f:a0:b3:66:5f:21:a9:aa:6f:ae:5a:00:51:
38:99:28:51:47:bc:09:2c:e1:dd:ed:f7:e4:7f:21:
2f:f2:1c:33:2b:06:50:8a:44:39:5c:2d:3c:07:b6:
ff:a7:ac:d7:a3:06:e7:ed:a5:e3:33:37:d9:56:a9:
42:9c:f9:39:3c:2e:32:34:f5:28:53:79:03:67:7b:
65:97:e3:49:4f:cd:d8:c1:e0:46:7e:c3:03:19:bc:
58:a6:fa:84:55:20:48:b2:eb:00:e9:2f:8c:02:8f:
1d:1a:ca:5f:97:91:eb:c5:0c:a9:28:43:1e:c1:9a:
76:fe:ff:13:d6:8c:a2:f8:52:b2:20:b9:31:c6:2d:
7f:76:d1:80:54:65:e7:66:99:83:58:fd:8c:41:d0:
55:dc:17:56:4d:8b:18:cf:5b:3e:1b:6b:37:03:b1:
6c:d7:01:f8:ab:6e:6f:07:60:cb:50:72:1f:9f:00:
7f:a1:bd:7c:4f:72:12:bf:27:04:63:46:88:f7:4a:
4c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:04:E1:30:EC:65:D0:CD:19:6B:24:29:80:5D:BE:15:31:1C:E0:4C
X509v3 Authority Key Identifier:
keyid:82:B2:E0:D0:0D:D7:71:A9:E4:D6:0B:BF:4B:E5:21:14:EA:77:DB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grLg0A3Xcank1gu_S-UhFOp32wM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/3794b1-ca7f-4a57-8b7b-06d3c4e63c20/1/grLg0A3Xcank1gu_S-UhFOp32wM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b5:b8:73:11:a2:25:4f:68:fe:9d:59:74:99:e0:46:9d:74:
63:80:3c:a0:9b:da:5d:19:15:ea:1f:80:bc:23:63:19:3d:dc:
22:3b:e9:19:58:2d:cd:0c:bf:48:ca:8a:8c:91:bb:db:b7:37:
27:63:30:28:4f:c3:1a:e3:ff:c2:c4:e0:13:7f:f5:99:41:cb:
21:46:70:fe:42:69:ce:e3:1e:a6:d1:ce:29:50:0d:1d:5f:4a:
99:9e:f1:a2:51:75:e8:ef:dc:1d:26:5f:44:60:4f:96:48:32:
27:de:61:60:cb:dd:3b:48:1c:cc:f8:0f:d9:fd:96:3f:c3:f0:
7b:1d:a7:7e:8e:d5:81:2d:05:bb:da:d3:8c:c2:fd:c0:b8:2a:
a2:02:b6:06:d4:95:dd:58:0a:14:a3:9c:e5:30:62:45:4d:cb:
85:40:05:bd:26:76:57:b3:5b:8b:f8:2e:62:de:cd:21:92:19:
e5:58:87:5f:d4:d9:e0:f1:66:58:6b:5f:cb:81:70:6d:3d:92:
09:63:03:c9:45:f8:20:18:10:e9:da:82:9e:c7:1d:6c:72:92:
12:b5:65:00:23:2b:48:17:39:c3:81:03:da:dc:89:78:a6:e7:
28:6c:08:72:bc:6a:05:a4:dc:88:81:77:50:69:d8:8f:bb:15:
17:53:c3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:21 2026 by rpki-client