Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
File: r3gchFM5kA9-ayAz5jiItTrleHU.mft (raw, json)
Hash identifier: erjhXGNtqPkulv/lWkMcHB5jD4+YVgDg4g2uZVIKuJg=
Subject key identifier: 64:50:0B:BB:97:B9:06:E1:C1:B0:EC:37:CA:04:E2:28:23:5E:8E:EA
Authority key identifier: AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75
Certificate issuer: /CN=af781c845339900f7e6b2033e63888b53ae57875
Certificate serial: 01A141960739ED53E7ED2CD1B4724B4EFEB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 22:01:53 +0000
Manifest this update: Thu 15 Oct 2026 22:01:53 +0000
Manifest next update: Fri 16 Oct 2026 22:01:53 +0000
Files and hashes: 1: r3gchFM5kA9-ayAz5jiItTrleHU.crl (hash: 6ium/SD4Y0RTf/dojMO9jtGQqUs5Gh33E8qjzajE0Cg=)
2: ygzwdt05FZY5UgU4PNRonpu2D5Q.roa (hash: iuwiLZg36gzzO6D5OpB0qDgYjkp9/xl1ZMAuUek9+EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:96:07:39:ed:53:e7:ed:2c:d1:b4:72:4b:4e:fe:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af781c845339900f7e6b2033e63888b53ae57875
Validity
Not Before: Oct 15 22:01:53 2026 GMT
Not After : Oct 16 22:01:53 2026 GMT
Subject: CN=64500bbb97b906e1c1b0ec37ca04e228235e8eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:05:2d:fe:ae:70:93:5e:53:51:c7:6d:5f:6f:
b5:b8:9f:d4:ce:3a:de:fe:cc:5b:4d:ae:0b:d6:2f:
79:52:df:f0:e8:87:27:c4:3e:fe:09:9c:ee:be:d1:
68:bd:a0:01:1f:98:a2:a8:32:1e:82:b0:7f:9f:c1:
a4:39:b4:1c:4e:15:06:be:79:0e:2d:15:11:d9:91:
61:ba:13:b1:1f:76:6a:18:7e:2c:af:a8:de:fd:ed:
b5:8d:aa:d4:ef:f5:b3:6b:ea:14:30:ae:6c:e3:ea:
e0:34:6c:dd:9c:07:3c:03:3e:4e:56:98:80:d3:45:
67:c6:d8:60:8e:3e:45:23:92:e8:7a:91:1f:ef:9a:
53:76:a2:65:1d:ea:2a:e9:c4:cf:16:fb:50:fc:6b:
67:2c:9e:1d:54:18:c1:ce:35:eb:9a:95:46:41:0e:
5e:f4:31:c8:76:d5:df:9a:99:a6:8d:1a:f9:85:a5:
bb:ff:3c:e3:99:47:f9:63:9c:94:ba:3f:7d:ca:88:
d0:e9:fd:7b:9e:f3:7c:f5:c1:2a:35:87:2b:72:c0:
68:d2:4c:7e:87:16:c2:c2:8c:57:24:cf:22:a3:5c:
76:52:28:3d:46:c6:3a:3e:08:8e:c9:29:bd:dc:71:
ed:e9:63:97:57:41:2e:a3:e1:19:c8:ca:bf:ed:c3:
99:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:50:0B:BB:97:B9:06:E1:C1:B0:EC:37:CA:04:E2:28:23:5E:8E:EA
X509v3 Authority Key Identifier:
keyid:AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fa:3a:b6:c3:ba:c8:be:d3:45:06:18:f2:54:ed:a5:9e:e3:
3e:4a:75:17:3a:05:cf:2b:a3:35:d3:8d:c3:09:11:e1:c5:0c:
40:7d:6f:d8:cf:aa:d1:7b:8b:77:f5:ee:65:ac:c0:26:4a:28:
6f:0c:4f:34:33:f4:32:ac:17:99:17:63:3d:12:57:eb:cd:84:
cf:18:5a:43:d9:7f:3f:52:7c:6e:e9:5e:9a:7d:4b:83:f8:c7:
27:3b:87:10:86:ef:21:af:26:e1:b4:12:ad:d9:42:39:db:42:
45:cb:d9:ec:8f:d1:3f:d9:16:cd:95:22:c5:57:df:e0:a3:5c:
3c:c0:39:48:95:6e:cc:71:e5:b8:b0:9d:20:6c:f3:6e:af:09:
fe:7c:24:de:72:83:84:1b:83:3d:7b:dd:05:ba:60:fd:a7:e8:
d1:93:e5:cc:4f:16:52:fa:76:81:6e:b9:a4:55:f0:91:a9:84:
0c:64:1d:1e:78:c8:f2:93:f8:bf:d0:69:57:61:86:9a:6e:dc:
84:0e:20:3e:7b:27:47:8d:b3:4d:9d:9c:5e:4d:5d:8b:38:eb:
ad:db:62:dd:94:d8:d1:3e:f4:20:66:69:10:53:bd:33:00:c7:
63:c4:f6:92:c4:6d:48:d3:80:27:af:dd:71:47:78:cc:38:97:
da:1d:a4:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFBlgc57VPn7SzRtHJLTv60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzgxYzg0NTMzOTkwMGY3ZTZiMjAzM2U2Mzg4OGI1M2Fl
NTc4NzUwHhcNMjYxMDE1MjIwMTUzWhcNMjYxMDE2MjIwMTUzWjAzMTEwLwYDVQQD
Eyg2NDUwMGJiYjk3YjkwNmUxYzFiMGVjMzdjYTA0ZTIyODIzNWU4ZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AUt/q5wk15TUcdtX2+1uJ/Uzjre
/sxbTa4L1i95Ut/w6IcnxD7+CZzuvtFovaABH5iiqDIegrB/n8GkObQcThUGvnkO
LRUR2ZFhuhOxH3ZqGH4sr6je/e21jarU7/Wza+oUMK5s4+rgNGzdnAc8Az5OVpiA
00Vnxthgjj5FI5LoepEf75pTdqJlHeoq6cTPFvtQ/GtnLJ4dVBjBzjXrmpVGQQ5e
9DHIdtXfmpmmjRr5haW7/zzjmUf5Y5yUuj99yojQ6f17nvN89cEqNYcrcsBo0kx+
hxbCwoxXJM8io1x2Uig9RsY6PgiOySm93HHt6WOXV0Euo+EZyMq/7cOZzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRQC7uXuQbhwbDsN8oE4igjXo7qMB8GA1UdIwQY
MBaAFK94HIRTOZAPfmsgM+Y4iLU65Xh1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNnY2hGTTVrQTktYXlBejVqaUl0VHJsZUhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kMWM3MWQtYWE1MC00ZDc4LThlNTIt
NWNmMzdhMzQ4MzBkLzEvcjNnY2hGTTVrQTktYXlBejVqaUl0VHJsZUhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kMWM3MWQtYWE1MC00ZDc4LThlNTItNWNmMzdhMzQ4MzBk
LzEvcjNnY2hGTTVrQTktYXlBejVqaUl0VHJsZUhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvo6tsO6
yL7TRQYY8lTtpZ7jPkp1FzoFzyujNdONwwkR4cUMQH1v2M+q0XuLd/XuZazAJkoo
bwxPNDP0MqwXmRdjPRJX682EzxhaQ9l/P1J8bulemn1Lg/jHJzuHEIbvIa8m4bQS
rdlCOdtCRcvZ7I/RP9kWzZUixVff4KNcPMA5SJVuzHHluLCdIGzzbq8J/nwk3nKD
hBuDPXvdBbpg/afo0ZPlzE8WUvp2gW65pFXwkamEDGQdHnjI8pP4v9BpV2GGmm7c
hA4gPnsnR42zTZ2cXk1dizjrrdti3ZTY0T70IGZpEFO9MwDHY8T2ksRtSNOAJ6/d
cUd4zDiX2h2kFQ==
-----END CERTIFICATE-----
Generated at Fri Oct 16 03:59:54 2026 by rpki-client