Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
File: GR4nsp9lok2flCFXFc02cYJanq4.mft (raw, json)
Hash identifier: wCzcTxLOM+HtX1PI5yOSd5ri172j67wLPR//98gcMBw=
Subject key identifier: C9:F6:06:35:B1:38:5F:97:4E:66:93:2A:F5:01:FF:B9:D5:26:AA:B9
Authority key identifier: 19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
Certificate issuer: /CN=191e27b29f65a24d9f94215715cd3671825a9eae
Certificate serial: 01A0C368BBB2423298C337D007DAF7EB1025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 10:00:15 +0000
Manifest this update: Mon 21 Sep 2026 10:00:15 +0000
Manifest next update: Tue 22 Sep 2026 10:00:15 +0000
Files and hashes: 1: GR4nsp9lok2flCFXFc02cYJanq4.crl (hash: jZLPd6X6Et5D/6XSgVG3ODSaCSe+JX3U/ufctScFYIM=)
2: J5Qtt873sF3C37LKAWbfzw4yFDc.roa (hash: JFU1LgYxS8jjniEo7tgFwuxgms5qkAm/du3uO0+Rez0=)
3: ffutk4AzDWbO49BVdt4T-zTCdys.roa (hash: 0WTelKBs5m8Bof1HVTgMBViFv6aqh4aKrjX9Je73vRk=)
4: i-SzxpjYSl_SJZf9Xw7iXKkYIOQ.roa (hash: 0pIJsCnFNnNGfcQdssGDfxgQRG8K8uUqTLzzq6uJaEA=)
5: x1mJQHrOX0aX1G3vkC2kyLyI2c4.roa (hash: +6t9XOehZRcRSvRzHT/6Ko6r/wNy+lvfdCUF86I4Zhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:68:bb:b2:42:32:98:c3:37:d0:07:da:f7:eb:10:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191e27b29f65a24d9f94215715cd3671825a9eae
Validity
Not Before: Sep 21 10:00:15 2026 GMT
Not After : Sep 22 10:00:15 2026 GMT
Subject: CN=c9f60635b1385f974e66932af501ffb9d526aab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:39:cd:10:6d:1b:73:b1:da:e8:61:19:fd:93:
92:86:ea:c6:34:c4:f9:24:34:fc:69:78:c0:d6:e1:
ac:7e:66:f6:df:ac:80:1f:e5:4e:8d:5b:0e:4a:6d:
b8:82:84:66:ae:06:97:7e:61:61:6b:6b:74:16:e7:
04:52:80:84:fd:91:b1:f3:cc:47:5e:f3:f3:73:c2:
71:1a:79:19:bd:e1:fd:1e:20:d8:53:d7:3d:bb:19:
a5:9b:50:65:ea:dc:36:4c:74:b7:98:72:7a:36:8e:
3d:a8:db:9e:08:a9:22:16:ed:be:99:1b:ab:b0:51:
0e:90:df:60:49:58:65:ff:be:de:37:e0:03:03:2b:
d0:2d:f8:96:27:e5:d1:23:2b:dd:b7:7d:75:eb:13:
b9:ed:2b:3d:e6:71:1f:ff:72:c2:ed:5d:42:01:d3:
b4:0e:02:dc:d5:57:0d:4a:32:bd:fc:30:42:74:a6:
2c:91:ea:f8:cd:d3:8c:7b:38:c7:42:77:b3:d8:a6:
fd:65:c8:c8:9f:fd:c7:d4:d6:38:59:7f:90:1f:72:
79:8f:b6:34:0b:88:72:82:44:e5:fc:16:65:4d:16:
a3:22:e5:82:30:a9:ac:cd:52:85:a2:49:91:e5:3a:
e1:7a:02:c6:ee:dd:a6:79:70:6a:3b:ea:ca:43:fd:
1e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F6:06:35:B1:38:5F:97:4E:66:93:2A:F5:01:FF:B9:D5:26:AA:B9
X509v3 Authority Key Identifier:
keyid:19:1E:27:B2:9F:65:A2:4D:9F:94:21:57:15:CD:36:71:82:5A:9E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GR4nsp9lok2flCFXFc02cYJanq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a89801-c721-41bb-b517-b8c666e6d351/1/GR4nsp9lok2flCFXFc02cYJanq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:be:91:bb:fb:ad:46:ad:7e:8a:49:52:93:8b:cc:da:6d:b3:
ac:97:67:46:fc:68:07:ca:15:04:19:df:57:37:3b:b4:d9:ac:
04:b0:73:05:a7:0c:76:2f:dd:e8:83:12:ef:0b:2a:b9:e1:db:
3a:d5:61:2f:99:bc:8a:17:6d:63:df:af:08:5c:d3:ae:5d:e5:
73:e3:8a:e7:c6:4f:cd:c9:18:a9:f0:35:95:1e:04:f6:f8:11:
99:7a:37:e9:10:80:85:9e:c6:11:34:c0:a4:d7:e8:6d:5c:aa:
29:2b:76:3e:0a:45:b4:14:dd:98:41:b3:a9:17:9b:67:12:1b:
0a:f3:9d:0b:34:be:4e:da:89:ec:51:df:fd:ac:68:dd:54:f6:
bd:23:b3:42:44:65:cd:b0:d0:64:d0:16:43:5a:ea:36:df:ef:
20:df:c5:cb:18:07:5f:1e:19:fc:04:a4:d8:57:55:49:95:20:
17:a3:cb:1c:ef:f8:42:cc:e5:57:e8:f7:46:4c:c0:b9:45:06:
11:a2:a4:a0:6a:e9:29:6d:53:e2:1f:41:ea:3f:38:64:e5:3b:
07:d0:27:7f:c1:f8:25:71:8c:7a:97:c2:1d:cb:30:1f:b9:77:
d2:2c:2b:58:07:be:b2:a4:4b:3e:ed:92:81:81:64:7a:4e:d8:
ca:09:76:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:27:35 2026 by rpki-client