Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: PRLoB/1ZiSmOCEJPRocyfmFinzKgVn4NyNYfAoILARI=
Subject key identifier: F2:59:42:2B:F0:E1:78:60:05:D3:33:88:9C:8E:B1:63:A9:A2:EF:34
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 019FA33C973AC4D24FEBDFB52F58F968F301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 11:01:24 +0000
Manifest this update: Mon 27 Jul 2026 11:01:24 +0000
Manifest next update: Tue 28 Jul 2026 11:01:24 +0000
Files and hashes: 1: bWD35slaNU4G8WoJ3kljEx_CXmQ.roa (hash: CiE8YvQDdxY0SzfoYEi10FyebaWkuSk6ub1WO85b5Q8=)
2: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: R0lRrt2B8Yx1j7fLl9ykUELMs14r9dvr8lgBhkbNUpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:97:3a:c4:d2:4f:eb:df:b5:2f:58:f9:68:f3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Jul 27 11:01:24 2026 GMT
Not After : Jul 28 11:01:24 2026 GMT
Subject: CN=f259422bf0e1786005d333889c8eb163a9a2ef34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:04:48:d2:0b:55:ce:4b:e1:0f:d5:4d:50:
26:13:7d:7b:b3:52:d5:b9:c6:8b:be:01:52:97:26:
47:9f:b4:0d:70:d2:75:d5:0f:cc:64:d4:d5:2c:65:
9f:34:b0:f7:2d:5c:1c:46:2c:8d:4a:57:b0:f8:e5:
31:e2:b5:fa:fd:43:89:4f:99:e5:37:45:2c:81:da:
46:1a:63:89:71:ba:5d:0c:67:3d:ff:b0:4f:97:f8:
17:b1:30:dc:54:c2:e4:6a:6b:92:24:eb:fb:07:77:
a6:8b:e5:91:98:39:2f:33:08:c8:fa:fb:70:95:b6:
97:18:6a:e5:e3:46:58:a8:36:fb:41:e8:9c:d4:1c:
02:28:e3:b8:d3:c2:22:52:2a:8e:f9:8d:93:af:35:
72:a3:2c:a2:c8:b1:51:b7:27:5e:d1:a4:d1:c3:72:
dd:6c:5c:71:10:e5:88:2c:e7:95:50:18:09:e6:34:
8d:9e:5d:c0:ed:c2:b8:4a:f0:c5:be:f3:71:dc:b1:
fa:46:e8:b8:90:7b:0f:47:72:6d:c3:71:25:8c:19:
da:5c:55:81:9c:4a:17:61:fa:f6:47:e4:b2:6e:f1:
e0:64:98:8b:b6:10:5e:0d:86:24:10:83:a5:e0:76:
bf:2c:ac:c1:39:1f:46:fd:23:5d:e7:81:f8:38:8f:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:59:42:2B:F0:E1:78:60:05:D3:33:88:9C:8E:B1:63:A9:A2:EF:34
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:8a:87:88:55:75:04:9b:85:71:9f:9f:3b:5f:5b:c9:5e:e5:
44:48:03:c6:1a:3d:95:35:ac:96:77:ca:74:ae:67:e0:08:89:
76:b5:0b:6a:59:a8:22:fc:41:20:46:09:db:7d:8e:69:33:c9:
0b:64:74:6b:05:c0:36:35:9f:8c:2b:46:59:87:f2:6c:be:7f:
f1:85:5d:31:93:b8:dd:b1:fc:7c:c8:be:30:5f:f7:b4:e1:21:
98:83:ae:20:4d:a0:0f:61:2b:54:d7:10:49:37:01:9a:51:63:
22:4e:b5:4a:c7:d2:7a:88:15:57:04:d0:c2:7d:fc:84:e5:36:
01:c6:7f:ab:11:57:5b:1a:50:a2:97:03:2c:21:26:dd:dc:fe:
fa:a1:20:01:b1:2c:da:ab:b3:dc:41:97:db:5d:6d:6b:34:de:
93:1b:bd:a4:fd:7e:a8:d3:d4:6b:a4:d7:b2:ee:82:80:85:28:
7c:73:b0:8c:3e:db:f8:e7:d4:c4:ed:82:98:0e:7b:46:e0:88:
1e:51:28:c3:50:3a:1a:3f:08:89:0e:73:00:9c:b6:8e:f1:46:
fe:d1:d9:a9:77:c4:2b:56:a2:72:cf:ed:c0:bb:8d:5f:b7:b7:
ea:ff:5e:59:91:1f:56:bf:07:3d:83:fa:98:f7:0d:d5:68:c8:
17:a6:3d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:04:15 2026 by rpki-client