Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: IyVVFINFnEprpB0JrsaPaat6KA8zHKXZj0DSc3XYoW0=
Subject key identifier: 85:3C:F0:9F:F0:21:10:F0:80:09:22:D4:79:7B:CB:46:C8:52:C1:AE
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 01A187F6FDC1A5080E97524F1EADF6CB7101
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 1ACB
Signing time: Thu 29 Oct 2026 14:01:13 +0000
Manifest this update: Thu 29 Oct 2026 14:01:13 +0000
Manifest next update: Fri 30 Oct 2026 14:01:13 +0000
Files and hashes: 1: bWD35slaNU4G8WoJ3kljEx_CXmQ.roa (hash: CiE8YvQDdxY0SzfoYEi10FyebaWkuSk6ub1WO85b5Q8=)
2: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: ngcOFHDCiDAexhVRBel36pY0qSo4C2gjzy84sVQmc2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:f6:fd:c1:a5:08:0e:97:52:4f:1e:ad:f6:cb:71:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Oct 29 14:01:13 2026 GMT
Not After : Oct 30 14:01:13 2026 GMT
Subject: CN=853cf09ff02110f0800922d4797bcb46c852c1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:c9:60:e8:b6:9b:b7:94:4f:48:c9:9e:5e:39:
29:a7:ad:4d:90:f0:26:1b:f5:c9:35:c6:56:1d:d5:
92:34:bf:79:26:e3:2e:ae:72:2e:a5:bf:dc:7d:4b:
0a:34:d7:ac:65:ab:3b:2f:2b:80:c3:dc:ba:f3:32:
86:84:06:1d:a8:05:83:35:b8:53:d4:bf:ea:86:37:
93:94:94:45:03:46:45:cc:81:8c:b2:98:64:0a:53:
32:48:b9:cb:05:86:94:f4:35:f3:d4:ce:62:78:cb:
5a:aa:93:2d:b7:90:22:6b:3b:44:39:90:58:1d:0f:
fa:91:92:d1:94:47:df:62:3e:6c:c3:51:cb:d3:18:
af:e9:96:0e:54:72:b7:81:0d:85:18:3f:9c:08:36:
80:83:64:8c:c2:da:95:54:7f:67:bc:a2:01:a2:f6:
72:b9:b2:40:82:30:10:ae:3d:12:cd:9e:30:a5:e8:
47:f8:06:10:6d:d0:0e:73:ac:fd:98:02:45:c0:14:
3b:05:44:a6:48:e4:82:c4:5f:f8:10:61:01:21:cc:
44:7f:18:36:87:62:15:f4:7a:4e:dc:9a:3e:9d:0a:
07:1e:ba:f0:f9:3c:8a:94:dd:af:07:e9:4f:52:fc:
76:a5:33:05:91:da:6a:89:2e:81:a9:4e:48:cb:c9:
45:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3C:F0:9F:F0:21:10:F0:80:09:22:D4:79:7B:CB:46:C8:52:C1:AE
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b5:88:3e:e0:be:fb:e1:b2:15:55:c8:fc:58:94:12:98:8f:
34:fc:f1:8d:9f:a7:9c:11:35:0f:96:95:3c:aa:14:19:00:66:
42:1b:0e:82:aa:82:ce:b8:cd:98:2f:d1:52:71:40:50:0b:e9:
28:9e:e6:c3:30:9d:7e:ec:d9:49:49:07:d7:1b:e4:93:75:ad:
92:c7:32:aa:db:a0:cb:23:d9:4b:d4:7d:39:92:0e:dd:ca:bf:
6c:0c:25:fa:c2:85:5b:9e:d0:41:b2:4c:fa:cf:ca:ef:c1:ef:
84:35:5e:32:91:9c:2f:26:da:05:b1:2e:73:a5:c2:b9:15:96:
98:9e:40:77:14:51:40:0d:5c:34:19:c6:b6:ff:ab:d0:80:4d:
d3:af:47:ae:c7:e9:0a:8d:79:f6:48:58:90:06:a6:ed:61:92:
3b:3c:a2:9a:b0:61:f4:d4:19:44:20:2e:b3:c7:37:52:51:f6:
d9:7b:3e:31:1c:22:e8:88:f4:da:18:c6:e5:cf:5e:7d:b6:76:
f8:2e:e8:4e:23:70:9e:12:11:2d:88:1b:c0:1f:3d:9c:c9:28:
86:07:98:9a:65:9c:b3:f5:fb:b0:65:09:3a:91:b1:bb:29:fb:
c8:41:bd:f8:0f:1b:a4:f1:eb:c4:d9:04:16:79:4a:96:a1:45:
1e:f0:57:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 17:05:41 2026 by rpki-client