Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
File: r3gchFM5kA9-ayAz5jiItTrleHU.mft (raw, json)
Hash identifier: PvPhdFMzZ0jKBh+4rYiKJPJBUNRqlBBgtoafmJcO1Yc=
Subject key identifier: 50:53:16:B2:61:8D:27:68:89:32:05:6F:9A:EA:CE:FD:39:F0:D9:A1
Authority key identifier: AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75
Certificate issuer: /CN=af781c845339900f7e6b2033e63888b53ae57875
Certificate serial: 01A002F07298647DA23BA33ED6A2049E7821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
Manifest number: 1A02
Signing time: Sat 15 Aug 2026 01:01:47 +0000
Manifest this update: Sat 15 Aug 2026 01:01:47 +0000
Manifest next update: Sun 16 Aug 2026 01:01:47 +0000
Files and hashes: 1: r3gchFM5kA9-ayAz5jiItTrleHU.crl (hash: HR0CUxsQKkT+EpQFp8JB4IzgzqyBD2VQyW9u9/5cBGM=)
2: ygzwdt05FZY5UgU4PNRonpu2D5Q.roa (hash: iuwiLZg36gzzO6D5OpB0qDgYjkp9/xl1ZMAuUek9+EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:f0:72:98:64:7d:a2:3b:a3:3e:d6:a2:04:9e:78:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af781c845339900f7e6b2033e63888b53ae57875
Validity
Not Before: Aug 15 01:01:47 2026 GMT
Not After : Aug 16 01:01:47 2026 GMT
Subject: CN=505316b2618d27688932056f9aeacefd39f0d9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c8:c1:06:f0:05:14:87:12:05:7c:c3:48:d3:
d7:ad:dc:db:37:1e:15:6d:e0:aa:ba:29:c7:cd:bd:
a3:27:e4:c0:0a:94:37:49:2f:72:bd:b3:77:64:7e:
a7:ea:b9:8a:ae:f9:d9:16:15:ee:33:45:99:82:3f:
0a:5a:48:05:e3:09:76:bd:f3:47:ec:91:3a:e5:34:
fc:bb:a7:9b:f1:0c:5b:10:53:21:d5:a3:03:6b:f1:
26:d0:70:4b:ef:fd:74:2c:78:07:05:c2:f0:e3:1c:
c6:24:69:f6:cf:2d:92:f5:31:eb:ba:d2:f1:61:b1:
17:10:c0:7b:72:6e:25:dc:ab:69:e6:89:34:4f:86:
bb:74:fc:e4:ea:65:c9:87:a6:50:bb:49:c5:72:56:
d3:ff:3c:89:41:b0:ff:e5:20:4c:fc:fe:cf:11:bd:
48:15:57:b2:fc:fb:ab:97:37:16:59:a5:01:b7:73:
cc:f5:f2:fb:8e:6d:62:1c:2f:b9:b0:27:94:ff:78:
39:26:a9:9d:ce:ff:b5:b4:e4:72:6d:0e:ba:d0:1f:
7b:ae:e2:97:98:9e:9a:5a:3f:36:dd:02:6f:d3:00:
90:21:26:42:35:4a:7c:8a:11:57:bf:d1:b1:12:3d:
fb:c9:ec:15:f3:96:39:15:4e:bd:26:4f:d3:c9:69:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:53:16:B2:61:8D:27:68:89:32:05:6F:9A:EA:CE:FD:39:F0:D9:A1
X509v3 Authority Key Identifier:
keyid:AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:f3:35:60:d4:45:e8:3a:9e:71:cc:8a:fe:6d:63:6d:c7:41:
97:a9:08:d9:46:df:6a:02:a4:98:ee:ae:86:5e:45:2b:e9:16:
93:61:a1:58:d8:22:bd:76:44:62:02:d1:53:a0:c1:8e:4c:a6:
02:4b:44:87:89:52:f6:1c:e3:a3:5b:26:57:d3:aa:c0:bb:b6:
53:1d:29:52:8c:03:42:78:25:7e:cf:ab:d1:f5:2a:85:b8:52:
7f:5f:bd:67:74:c3:bd:4f:ac:b3:04:40:93:4f:10:0b:13:a1:
93:fd:1c:62:ef:7c:12:b0:40:70:0f:6f:36:6f:28:32:5c:3c:
64:dc:c2:b7:f9:ce:b6:41:67:a2:ef:2c:8b:61:e4:12:40:7a:
e4:1d:3f:01:5e:da:ce:2c:1d:db:95:46:24:ed:0f:0d:aa:78:
47:7b:9b:4d:55:07:c1:e2:58:06:07:ba:05:10:20:91:0c:bb:
e7:1d:a9:bb:33:33:fe:2c:3d:43:b9:24:2e:70:37:a6:0c:30:
70:8c:d4:ef:8f:3d:16:5f:e6:d8:8f:73:43:b1:10:df:47:8c:
29:c7:01:84:29:92:64:2f:75:ed:3c:2d:49:cf:06:bc:ad:6b:
f2:30:c8:84:d9:6f:46:70:d9:19:f8:80:7f:69:34:39:e9:52:
cb:12:61:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:30 2026 by rpki-client