Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: ZDbaMEC0hTG1HUfwHiZxjBdVSTjJGSImBzooXT/xWRI=
Subject key identifier: 87:0E:4A:7C:10:AB:89:5E:D2:9D:FE:34:FD:DA:4D:F8:05:85:41:27
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 01A1841A3CD28995E43A5CC277BED0C82564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 1AC9
Signing time: Wed 28 Oct 2026 20:01:14 +0000
Manifest this update: Wed 28 Oct 2026 20:01:14 +0000
Manifest next update: Thu 29 Oct 2026 20:01:14 +0000
Files and hashes: 1: bWD35slaNU4G8WoJ3kljEx_CXmQ.roa (hash: CiE8YvQDdxY0SzfoYEi10FyebaWkuSk6ub1WO85b5Q8=)
2: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: Gl0gqAaW7GaTqS0cA0lmaAjCAgqfo1P0r38JTfPlvR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 20:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:1a:3c:d2:89:95:e4:3a:5c:c2:77:be:d0:c8:25:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Oct 28 20:01:14 2026 GMT
Not After : Oct 29 20:01:14 2026 GMT
Subject: CN=870e4a7c10ab895ed29dfe34fdda4df805854127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:00:7b:86:64:eb:70:a0:77:3b:38:b7:40:45:
9c:e5:af:27:e7:09:f0:a8:46:d0:43:fe:ec:86:b7:
f5:ea:ed:d2:05:0a:7a:f8:90:63:3f:5f:c5:ca:33:
7a:2f:41:4f:e4:12:13:4d:88:bb:08:b6:cb:ba:cf:
68:bd:4f:01:b9:ac:9a:96:2b:80:a5:57:ae:8c:80:
5e:83:cd:16:0b:57:d2:d6:45:6c:fd:af:9a:d3:92:
88:a3:76:76:b3:66:b2:ce:ed:b4:cb:a9:a0:9e:a3:
4a:78:42:de:40:5c:c2:f5:a8:0f:2c:ae:4f:7d:d6:
a0:18:21:8c:49:ba:ce:5b:f1:30:69:af:73:ea:1f:
c7:1c:93:1c:d8:49:d9:e3:d9:3a:55:eb:89:6a:a6:
73:35:de:2d:95:90:e7:85:c1:35:60:20:42:3b:e1:
78:c4:41:f8:3a:61:e7:8f:99:d7:8b:2f:58:63:cd:
5b:a8:30:82:be:97:ad:f6:51:a5:33:32:a2:99:7d:
fc:de:0f:f0:35:8f:e1:24:6c:2e:ce:28:fa:c0:97:
24:5d:26:b8:ba:90:dd:53:c0:3e:e4:ce:34:cf:1c:
7c:f0:f0:c5:c6:50:5e:2a:fd:ef:3f:44:6c:7b:01:
2f:1e:54:50:cb:5b:f4:f6:c6:89:f0:8d:87:17:85:
7e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0E:4A:7C:10:AB:89:5E:D2:9D:FE:34:FD:DA:4D:F8:05:85:41:27
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:72:36:da:ad:32:ad:f3:23:ec:df:39:ba:20:30:54:7d:ff:
b6:50:8c:60:96:e8:25:c2:eb:8d:f8:ef:aa:ac:30:21:f3:87:
cd:10:3c:a1:5f:3a:dd:df:a7:27:87:0c:00:ed:73:db:dc:91:
58:c7:8d:cf:49:6f:eb:3b:d3:c1:53:b7:f5:90:bf:04:4b:39:
23:57:23:5e:eb:ff:20:0a:49:81:66:fc:b2:3c:0f:21:dc:b1:
f5:2e:a3:a2:0a:7b:03:87:e3:16:16:01:41:85:f9:a3:d1:f8:
e7:10:2e:9a:c9:b1:3a:3b:f7:92:39:e3:e5:e5:27:2f:90:53:
1a:8a:ab:68:28:c6:09:14:5c:56:0c:11:2e:d5:7d:46:fd:ff:
e3:68:34:3c:a0:1d:1e:93:e5:0a:55:d5:61:d8:5e:e5:be:12:
86:6a:8b:4d:d8:d0:a0:cc:d6:ae:e6:72:e7:65:de:35:32:d8:
89:34:28:36:f4:b6:85:1d:04:b0:82:66:f8:23:3a:3b:ea:6b:
c7:c3:6d:69:f6:83:b3:4c:92:93:9f:b2:ef:ff:ec:c2:52:2e:
fc:d7:08:6f:16:4e:67:2f:db:d2:28:37:fc:a9:65:65:b5:1d:
55:5d:7e:82:de:b8:54:f9:d3:8b:36:23:de:f3:7e:b2:5c:d7:
e9:8e:34:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 04:53:53 2026 by rpki-client