Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
File: GryfszEqSr8d3ChRjnYI4Owydd8.mft (raw, json)
Hash identifier: sR6JYuG97Y9Nb1sV7G9od3AXIfNsfXkRw5zfG3Dfljs=
Subject key identifier: EA:FA:63:E8:B5:DD:25:97:CD:23:C4:82:2B:33:0A:BD:B5:9E:8E:5E
Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Certificate serial: 019FA8626D710B1C4997782E9DE04AA09154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
Manifest number: 0286
Signing time: Tue 28 Jul 2026 11:00:50 +0000
Manifest this update: Tue 28 Jul 2026 11:00:50 +0000
Manifest next update: Wed 29 Jul 2026 11:00:50 +0000
Files and hashes: 1: DJdi3T9GBdXyWlmkF-1AfJu00z4.roa (hash: 9uSdWnZMdUgF7nF1Y5Ayng87XmAG51T65tQ1ewgeEQc=)
2: GryfszEqSr8d3ChRjnYI4Owydd8.crl (hash: By/DdpQ4xRyTvJfnQ5IN/9yEhDzNcbiYkJED5gKb0pw=)
3: REiaLPFJMgnbb32-B6MU-uTjIlI.roa (hash: nKuK7TPAmuzDf184++qSMR2f3U6nDVTJDG8nEA5Zshs=)
4: Xvu0C67-BWy0g8WYONkS-2tc_BM.roa (hash: 5IIvu8y7oObXXHmvGLjhkK8E3RwHEJbfJJNw4p6yHig=)
5: schmDmE2CKJCpiAehrjpSNlTDGg.roa (hash: +x21cIiTbRvA+l5+kVYBAJIbR8+s45Qj0TzBMrcAZH4=)
6: ta7hQSc7ARZjjGzwCStEeYhJ0BE.roa (hash: Py8T1t5CIRrQnYUBu52tDBLLob8RSsHoARPvObfZdB0=)
7: vdxk280EZJdsjHh7wsXDY4EoHlo.roa (hash: +1LA/Ivx7z3Vxl1WaI94b4YLVsQkfux8YU6LuCoqZyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:6d:71:0b:1c:49:97:78:2e:9d:e0:4a:a0:91:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Validity
Not Before: Jul 28 11:00:50 2026 GMT
Not After : Jul 29 11:00:50 2026 GMT
Subject: CN=eafa63e8b5dd2597cd23c4822b330abdb59e8e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e2:40:29:7e:5c:44:88:1a:b1:90:d7:8c:42:
bf:7e:60:1f:a2:d1:16:9a:ab:eb:4c:b0:ab:2b:4b:
f9:10:9c:52:eb:ca:b0:e9:a7:52:15:b8:88:06:52:
6a:f4:d1:ea:60:19:f1:fb:b6:30:40:52:e5:16:70:
28:c1:ef:88:2d:b8:0a:48:50:80:f2:79:00:d5:a7:
17:be:f0:e8:12:2e:28:75:99:ad:63:51:6a:46:9b:
21:88:e6:af:3e:f5:84:52:76:e1:8c:fe:a6:48:15:
66:14:64:c1:1b:63:69:69:63:4b:5a:6d:6a:e6:5e:
cd:75:8c:71:84:85:17:96:8f:56:ed:81:93:c0:ac:
cf:40:d2:2f:8a:f6:1e:eb:23:75:81:d9:b6:81:6f:
8a:f4:01:14:6f:b4:5c:bd:31:9c:ae:c5:a4:33:26:
de:31:0f:34:97:eb:ce:b2:2e:fc:59:5f:c6:d0:a7:
67:65:04:3f:18:9d:55:07:25:c2:76:33:8a:6a:91:
23:a8:a1:bf:32:93:20:ca:0a:a3:1f:21:ed:45:7f:
d4:02:11:fc:3b:72:a6:f8:7e:0f:57:bb:a5:45:5c:
56:b0:e2:73:80:8a:01:96:08:57:60:fd:31:8e:e6:
a4:cd:f1:56:ae:ec:60:ad:7c:a3:b3:e8:ff:b1:f0:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FA:63:E8:B5:DD:25:97:CD:23:C4:82:2B:33:0A:BD:B5:9E:8E:5E
X509v3 Authority Key Identifier:
keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:84:f1:b7:35:90:7a:fa:73:28:67:8d:4f:c7:93:73:8f:0c:
89:9a:bc:5b:f2:6a:08:69:bf:00:93:60:23:c8:20:a0:22:e3:
1f:34:c3:d7:4b:21:25:c5:59:c0:a4:1c:84:93:d0:a4:fb:2a:
49:52:2e:62:7a:f1:2a:ae:8e:0b:5b:b6:18:6a:be:1b:6e:d0:
71:e0:23:2d:cd:9a:4d:be:bb:14:33:79:1e:81:9c:3a:e5:98:
70:41:5a:9c:49:81:81:1d:15:47:c0:5b:f8:42:d6:1b:d9:31:
06:81:f6:30:67:2d:69:6d:da:a7:3c:53:db:af:4f:c3:8f:e8:
a3:e8:06:c0:82:88:90:fb:f4:08:76:38:6a:4a:09:b0:c9:6b:
cf:8e:30:58:0a:5d:ca:aa:7d:62:d0:cf:82:2f:fc:e1:b1:7a:
ba:6f:1f:df:e4:3f:d4:14:62:a6:52:93:68:58:1e:be:ec:51:
ce:71:3e:f4:9e:52:d3:3b:ed:cf:45:32:c0:20:b0:98:c0:bc:
4d:e6:06:39:4b:74:24:cf:25:ea:85:eb:b1:91:f0:27:09:47:
81:55:1f:a0:ed:f9:57:f8:62:0d:b1:72:83:8b:57:28:b4:e9:
22:1c:04:8b:0e:c7:f7:5a:30:b1:67:17:a6:c6:0d:ad:ef:44:
30:61:bc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:40 2026 by rpki-client