Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
File: GryfszEqSr8d3ChRjnYI4Owydd8.mft (raw, json)
Hash identifier: wJIEzZ2W1GAnfiEhEe0tkry906FtntgUBu/A8kRS02s=
Subject key identifier: 17:AF:16:3B:BE:97:1A:27:0C:49:BD:EC:F3:5E:0C:FD:64:F0:5B:7D
Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Certificate serial: 019D99D091D70BD6AEA71F59FB0B02CCB19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
Manifest number: 0173
Signing time: Fri 17 Apr 2026 05:01:16 +0000
Manifest this update: Fri 17 Apr 2026 05:01:16 +0000
Manifest next update: Sat 18 Apr 2026 05:01:16 +0000
Files and hashes: 1: DJdi3T9GBdXyWlmkF-1AfJu00z4.roa (hash: 9uSdWnZMdUgF7nF1Y5Ayng87XmAG51T65tQ1ewgeEQc=)
2: GryfszEqSr8d3ChRjnYI4Owydd8.crl (hash: cVWv076y62OjKGlTsi/MartVP6onU081vuHo0JRiEfA=)
3: RA0zayGPGSwaJHtlDtsJ8Xbgj5c.roa (hash: dZRiXeLTPEt1Z5RpO/wZBxbAns2Cy2hBCslnEmu5jIw=)
4: Xvu0C67-BWy0g8WYONkS-2tc_BM.roa (hash: 5IIvu8y7oObXXHmvGLjhkK8E3RwHEJbfJJNw4p6yHig=)
5: schmDmE2CKJCpiAehrjpSNlTDGg.roa (hash: +x21cIiTbRvA+l5+kVYBAJIbR8+s45Qj0TzBMrcAZH4=)
6: ta7hQSc7ARZjjGzwCStEeYhJ0BE.roa (hash: Py8T1t5CIRrQnYUBu52tDBLLob8RSsHoARPvObfZdB0=)
7: vdxk280EZJdsjHh7wsXDY4EoHlo.roa (hash: +1LA/Ivx7z3Vxl1WaI94b4YLVsQkfux8YU6LuCoqZyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:91:d7:0b:d6:ae:a7:1f:59:fb:0b:02:cc:b1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Validity
Not Before: Apr 17 05:01:16 2026 GMT
Not After : Apr 18 05:01:16 2026 GMT
Subject: CN=17af163bbe971a270c49bdecf35e0cfd64f05b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d4:fd:58:be:87:1a:7a:da:5d:2f:b3:d3:a6:
b6:f5:08:b7:09:bc:23:f3:ba:e1:64:68:90:9a:7a:
fc:68:71:fc:e3:0a:25:f1:9e:c6:74:44:26:eb:d9:
4b:9d:11:41:90:81:bd:d5:f1:d0:2a:f7:3d:1d:10:
2f:12:ed:27:69:60:1b:9e:62:a3:92:71:56:a2:4c:
8a:fe:36:71:5d:a1:d5:59:02:a2:77:39:35:c1:83:
a5:ea:04:b3:3d:1e:0d:89:32:ae:14:fd:d0:9f:1c:
2b:db:51:8b:67:78:80:75:9e:0b:0d:ef:ea:0d:d0:
f4:33:73:e6:44:70:98:77:e4:72:16:72:3c:6c:74:
2d:e5:be:5a:85:33:da:fb:8a:d8:35:15:c2:6c:71:
6b:ad:f6:2d:94:f3:d4:e5:3f:2c:06:f8:92:d9:12:
89:c3:d9:a6:36:83:15:bc:b8:bb:7c:e4:71:a0:d4:
72:a3:4c:f7:18:36:4a:12:a1:8f:96:12:73:aa:94:
89:7b:fb:10:f9:92:a5:3e:f3:dc:1a:9b:db:48:d9:
7d:6d:02:42:f4:e3:9f:13:ba:ed:83:fb:32:1e:b8:
06:b8:7b:0d:ba:39:7f:77:91:1e:34:80:44:9e:2a:
d9:e8:b7:62:4e:29:98:25:1d:62:df:9b:e2:1d:53:
a0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AF:16:3B:BE:97:1A:27:0C:49:BD:EC:F3:5E:0C:FD:64:F0:5B:7D
X509v3 Authority Key Identifier:
keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:58:9a:8d:6e:33:0e:82:65:ef:c5:27:70:ec:89:db:ab:e0:
d9:38:52:4f:b6:2b:2f:67:da:9d:e2:c3:8f:57:62:04:5b:20:
2a:e4:f1:a1:9a:ee:98:39:32:16:a4:46:e9:fc:1a:4e:6c:f8:
0c:f5:5d:46:03:08:05:fd:a9:5f:fb:de:df:ad:f8:0a:0c:a7:
56:7c:a5:8b:18:68:7e:e5:14:59:3b:66:04:8b:bc:ec:e0:1a:
c3:56:ab:7d:95:b2:31:02:61:09:9c:50:ca:f0:77:a8:f7:3d:
54:dd:39:62:ea:64:f5:46:97:a6:e0:c9:bf:cb:c7:7a:e9:e1:
28:5f:c2:20:bd:32:50:68:09:7f:28:27:29:99:23:69:64:b7:
37:f8:55:13:01:4a:9e:77:ca:c4:33:50:87:fe:bc:e9:01:a4:
d3:f5:e8:86:cf:ff:25:bd:2b:1c:18:86:e2:52:e8:83:76:60:
4e:9e:1b:a5:85:e0:47:74:2d:20:0e:7c:45:85:06:78:45:7b:
29:2d:e7:42:06:e4:06:0a:45:b6:de:ea:ed:aa:b3:aa:71:19:
3b:ce:0b:c1:b3:1c:60:c1:86:b1:80:42:03:58:a8:23:95:e4:
78:81:8b:92:95:7d:20:d0:6d:38:5e:ef:10:dd:18:23:e9:77:
42:c5:e0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:57 2026 by rpki-client