Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: P+aYoXLIoOrEO9y9o9DbYGBICqdEFPKQ3LP2AKj+AlY=
Subject key identifier: 34:92:A8:FF:28:8B:D7:10:13:9C:89:3D:52:78:12:B6:EB:EE:0B:E8
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 01A08CE96D05B8FD9660BF18E21F56767A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 20:01:42 +0000
Manifest this update: Thu 10 Sep 2026 20:01:42 +0000
Manifest next update: Fri 11 Sep 2026 20:01:42 +0000
Files and hashes: 1: bWD35slaNU4G8WoJ3kljEx_CXmQ.roa (hash: CiE8YvQDdxY0SzfoYEi10FyebaWkuSk6ub1WO85b5Q8=)
2: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: 2QwwXyTrxbNRDOJWFlZqI6BEx6RfyyqJWa4PdQf6yQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:6d:05:b8:fd:96:60:bf:18:e2:1f:56:76:7a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Sep 10 20:01:42 2026 GMT
Not After : Sep 11 20:01:42 2026 GMT
Subject: CN=3492a8ff288bd710139c893d527812b6ebee0be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:cb:b4:b2:b0:d5:e9:b4:e8:fe:40:8f:ca:
a4:69:2b:02:72:69:be:d7:81:c1:9e:73:c0:da:58:
35:49:b2:3d:0d:9b:07:9e:eb:6a:64:f2:94:80:a2:
98:cd:76:0f:a2:91:ba:73:cc:cc:9f:2c:21:54:27:
2f:40:bf:a3:69:fd:6e:a5:2a:86:35:a6:af:e7:18:
b2:76:42:7f:b5:bd:c4:a8:ae:e1:0c:2d:d2:bd:e7:
38:65:d1:5f:ca:1b:dd:ca:7d:9f:e9:09:02:2e:49:
cd:03:27:f1:0b:d8:bd:fa:13:55:a7:42:76:ad:2b:
04:7c:3d:ad:8e:4a:a5:09:d6:4d:ee:a4:f3:25:e4:
86:65:2e:6b:08:24:3d:b2:f5:6b:dd:fc:d3:3f:5b:
57:82:1e:a6:85:e4:5b:39:9e:49:2e:73:14:27:28:
cf:f0:17:17:ed:3c:d4:e6:57:c1:a1:0c:3b:c6:a7:
a7:75:c9:f1:17:19:0b:1f:41:b3:2d:15:7f:f8:fe:
70:49:0b:39:2e:75:31:39:58:9c:7f:76:bc:67:0c:
2d:1c:98:cb:d8:71:ab:f4:a8:7b:ed:09:32:07:0c:
03:d6:91:51:ea:27:24:03:db:38:b6:a0:54:f2:30:
54:65:18:d8:e9:39:6c:c4:ca:8c:f1:9f:62:3e:ff:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:92:A8:FF:28:8B:D7:10:13:9C:89:3D:52:78:12:B6:EB:EE:0B:E8
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ec:29:c0:7d:03:76:8c:e0:f6:25:43:59:b2:8f:3d:af:66:
6c:c0:5a:66:36:da:56:74:bf:57:90:12:24:70:16:35:92:9e:
9b:34:9f:1e:3f:60:3a:75:5d:be:9b:8d:dd:91:e8:c9:4f:14:
5d:ce:ab:c4:ac:8a:f5:eb:b4:f1:cc:fd:c1:d3:7b:48:fa:05:
01:15:19:d9:ca:08:19:2b:2e:f5:f2:bd:cf:f0:16:fb:c4:cf:
58:90:f1:f8:3c:31:58:b9:68:61:88:a1:e5:c6:5c:75:78:3a:
c4:b3:df:48:53:e1:01:14:cf:1b:fb:31:68:37:e7:ea:a4:9a:
40:db:46:89:57:3f:44:8f:60:43:ad:cf:ac:44:75:48:03:38:
d2:2b:8e:ef:5a:96:ad:4c:53:56:b8:50:6d:0f:03:c7:69:0c:
4e:d7:27:04:ca:d8:16:f8:d0:a4:5d:50:a8:ac:28:4b:e4:1d:
c4:c1:16:82:85:5e:16:74:c4:33:71:c8:52:9f:ce:e8:0a:4e:
b2:83:b9:d8:ea:45:7d:69:fd:ed:0d:fe:a8:96:82:d9:08:f7:
d6:62:35:40:dd:93:5e:86:c1:75:ee:c2:f1:98:11:00:03:a8:
15:8a:1e:2d:95:4c:2b:c1:e2:dc:bc:d0:bc:37:65:29:cf:ab:
ba:5f:c6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:23:21 2026 by rpki-client