Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
File: GryfszEqSr8d3ChRjnYI4Owydd8.mft (raw, json)
Hash identifier: Ad8c355tBlEXZcuAwJ/wRQLIRw9W584kzDodBbui6mU=
Subject key identifier: 65:C6:BF:3F:20:12:3C:0F:C0:7E:C8:31:81:70:F4:6B:A8:82:FF:50
Authority key identifier: 1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
Certificate issuer: /CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Certificate serial: 019CAAFD2143F6FBD35097ED57202C3E585D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
Manifest number: F5
Signing time: Sun 01 Mar 2026 20:00:41 +0000
Manifest this update: Sun 01 Mar 2026 20:00:41 +0000
Manifest next update: Mon 02 Mar 2026 20:00:41 +0000
Files and hashes: 1: 6bjSbhqwKfCJyzuoHErLZFiQKFE.roa (hash: fv9LqISQEhkBU4rB+B0VGbDuz4p90Et8y3hrdyyRFaA=)
2: DJdi3T9GBdXyWlmkF-1AfJu00z4.roa (hash: 9uSdWnZMdUgF7nF1Y5Ayng87XmAG51T65tQ1ewgeEQc=)
3: GryfszEqSr8d3ChRjnYI4Owydd8.crl (hash: TI373sTuN5b/eP022pF70XuwYwe6KGc1x0GuqToGof8=)
4: Xvu0C67-BWy0g8WYONkS-2tc_BM.roa (hash: 5IIvu8y7oObXXHmvGLjhkK8E3RwHEJbfJJNw4p6yHig=)
5: oBSIemnga5g3zbM0MhQPYpUQkXk.roa (hash: vUqBxjZNdA/2K4hIUfgJGI6rYfhtyuZbedTN6yjPJdk=)
6: schmDmE2CKJCpiAehrjpSNlTDGg.roa (hash: +x21cIiTbRvA+l5+kVYBAJIbR8+s45Qj0TzBMrcAZH4=)
7: ta7hQSc7ARZjjGzwCStEeYhJ0BE.roa (hash: Py8T1t5CIRrQnYUBu52tDBLLob8RSsHoARPvObfZdB0=)
8: vdxk280EZJdsjHh7wsXDY4EoHlo.roa (hash: +1LA/Ivx7z3Vxl1WaI94b4YLVsQkfux8YU6LuCoqZyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:21:43:f6:fb:d3:50:97:ed:57:20:2c:3e:58:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1abc9fb3312a4abf1ddc28518e7608e0ec3275df
Validity
Not Before: Mar 1 20:00:41 2026 GMT
Not After : Mar 2 20:00:41 2026 GMT
Subject: CN=65c6bf3f20123c0fc07ec8318170f46ba882ff50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e3:30:fe:5b:a4:9c:38:51:f1:eb:f6:9c:11:
36:06:ed:56:7d:99:7e:ee:e0:38:b7:18:ca:d1:f9:
15:04:f5:71:45:22:ce:e8:50:c4:2e:76:6f:d4:4e:
9d:04:49:c7:60:85:73:81:76:52:4c:33:fb:0f:ee:
27:a0:cc:fa:79:1c:fd:0b:bd:4e:55:e2:2a:15:21:
d4:4e:ef:ea:ae:f7:1b:09:02:1a:8b:c1:9f:f5:54:
86:9a:96:cd:73:9a:c9:5e:f1:7e:d5:ef:67:3a:ce:
75:f2:3f:89:ee:5b:e2:d8:9e:d7:51:66:d3:c7:22:
cd:1a:67:25:8d:77:ea:73:12:b4:58:7e:b7:c1:73:
ae:63:a0:84:bc:e4:ba:f7:0f:bc:e6:00:fc:ef:ef:
75:f3:ad:da:4c:d0:fb:fa:21:59:0d:5d:4d:81:a4:
32:bd:7d:95:5c:28:e0:84:94:ee:96:68:3a:4a:33:
df:54:25:93:d8:42:a6:28:f3:bb:fd:48:9e:4c:a0:
f5:ac:cd:ed:01:4d:7f:0a:66:85:83:b2:de:f2:fd:
cf:f2:93:a2:56:91:50:5c:c4:bf:42:5a:e8:eb:32:
aa:e5:53:24:e2:85:44:fa:9c:4d:aa:76:89:db:68:
38:bf:46:1c:33:75:46:60:4c:51:2b:b6:d9:a6:49:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C6:BF:3F:20:12:3C:0F:C0:7E:C8:31:81:70:F4:6B:A8:82:FF:50
X509v3 Authority Key Identifier:
keyid:1A:BC:9F:B3:31:2A:4A:BF:1D:DC:28:51:8E:76:08:E0:EC:32:75:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GryfszEqSr8d3ChRjnYI4Owydd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/26e77f-fa37-4900-a33d-d1d6dea98790/1/GryfszEqSr8d3ChRjnYI4Owydd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7b:5c:7d:c3:ab:28:75:ea:23:b8:71:60:9b:7a:c1:f5:f6:
84:8d:23:82:c6:e6:6b:40:8f:4a:73:00:d2:e3:6a:b1:12:d0:
c1:3d:c3:4a:18:1b:5b:04:20:03:0a:f2:dc:e1:df:a5:3f:dd:
f6:ea:53:28:42:e4:e0:67:60:5b:bb:04:af:42:f2:fc:9d:32:
9d:b8:ce:ac:1d:62:e7:0b:f5:96:a2:1a:c9:e3:31:06:60:05:
8f:39:c5:82:e4:49:24:ac:df:6c:c3:75:0a:17:19:83:6c:32:
2e:a6:13:2e:33:c4:93:43:f0:7c:cb:4d:fc:ba:28:25:bc:46:
8d:30:bb:81:cf:c1:c5:19:fe:9f:da:b1:60:ea:42:dc:d4:b9:
99:eb:14:6b:86:95:0f:a6:2c:cb:1e:4f:f1:82:37:b1:1c:cf:
5e:5e:2f:3c:29:ce:41:c9:90:7c:e2:79:8f:66:4f:65:16:2c:
3c:2e:6b:72:7b:8f:38:48:ea:4e:8a:bf:e7:7e:60:0b:fe:9f:
4a:74:be:97:fd:70:4a:21:98:50:b4:b9:ef:d4:5e:99:9e:a2:
e8:57:60:7a:94:60:e3:c7:dd:7b:5a:c1:48:a5:66:01:9f:34:
70:1a:ab:0c:94:2e:e8:19:6a:11:bf:01:6d:06:ad:9f:8f:61:
bf:eb:29:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/SFD9vvTUJftVyAsPlhdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYmM5ZmIzMzEyYTRhYmYxZGRjMjg1MThlNzYwOGUwZWMz
Mjc1ZGYwHhcNMjYwMzAxMjAwMDQxWhcNMjYwMzAyMjAwMDQxWjAzMTEwLwYDVQQD
Eyg2NWM2YmYzZjIwMTIzYzBmYzA3ZWM4MzE4MTcwZjQ2YmE4ODJmZjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OMw/luknDhR8ev2nBE2Bu1WfZl+
7uA4txjK0fkVBPVxRSLO6FDELnZv1E6dBEnHYIVzgXZSTDP7D+4noMz6eRz9C71O
VeIqFSHUTu/qrvcbCQIai8Gf9VSGmpbNc5rJXvF+1e9nOs518j+J7lvi2J7XUWbT
xyLNGmcljXfqcxK0WH63wXOuY6CEvOS69w+85gD87+91863aTND7+iFZDV1NgaQy
vX2VXCjghJTulmg6SjPfVCWT2EKmKPO7/UieTKD1rM3tAU1/CmaFg7Le8v3P8pOi
VpFQXMS/Qlro6zKq5VMk4oVE+pxNqnaJ22g4v0YcM3VGYExRK7bZpknjxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXGvz8gEjwPwH7IMYFw9Guogv9QMB8GA1UdIwQY
MBaAFBq8n7MxKkq/HdwoUY52CODsMnXfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2Qt
ZDFkNmRlYTk4NzkwLzEvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy8yNmU3N2YtZmEzNy00OTAwLWEzM2QtZDFkNmRlYTk4Nzkw
LzEvR3J5ZnN6RXFTcjhkM0NoUmpuWUk0T3d5ZGQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHtcfcOr
KHXqI7hxYJt6wfX2hI0jgsbma0CPSnMA0uNqsRLQwT3DShgbWwQgAwry3OHfpT/d
9upTKELk4GdgW7sEr0Ly/J0ynbjOrB1i5wv1lqIayeMxBmAFjznFguRJJKzfbMN1
ChcZg2wyLqYTLjPEk0PwfMtN/LooJbxGjTC7gc/BxRn+n9qxYOpC3NS5mesUa4aV
D6Ysyx5P8YI3sRzPXl4vPCnOQcmQfOJ5j2ZPZRYsPC5rcnuPOEjqToq/535gC/6f
SnS+l/1wSiGYULS579RemZ6i6FdgepRg48fde1rBSKVmAZ80cBqrDJQu6BlqEb8B
bQatn49hv+spUg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:32 2026 by rpki-client