Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: pn2ODuDLWssaBP/AQquTcK6PcPzzPiUUSYwgcEIab1s=
Subject key identifier: 64:C7:88:D8:78:D7:A1:15:91:D7:A6:40:5C:B0:FB:F1:29:29:BC:FF
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 019CAA58F73890DE47A1A7E855F567AA6C7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:23 +0000
Manifest this update: Sun 01 Mar 2026 17:01:23 +0000
Manifest next update: Mon 02 Mar 2026 17:01:23 +0000
Files and hashes: 1: bWD35slaNU4G8WoJ3kljEx_CXmQ.roa (hash: CiE8YvQDdxY0SzfoYEi10FyebaWkuSk6ub1WO85b5Q8=)
2: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: VnReDSBeKV+PKYRMe9EFIOZBg5rcAZfeexWYibZLCd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:f7:38:90:de:47:a1:a7:e8:55:f5:67:aa:6c:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Mar 1 17:01:23 2026 GMT
Not After : Mar 2 17:01:23 2026 GMT
Subject: CN=64c788d878d7a11591d7a6405cb0fbf12929bcff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f1:d3:cb:a3:23:ff:d7:49:a4:e7:d3:cc:29:
5a:66:68:6e:e0:8d:8e:c6:82:89:06:76:9a:a4:2c:
03:c5:07:3d:fe:65:d2:3e:0e:19:a5:c6:55:52:22:
45:b5:6c:58:2f:f3:70:7e:f7:5a:0c:70:73:b8:64:
59:01:9c:9f:b1:db:a2:c9:47:89:c7:5e:ef:4a:0d:
47:8a:02:cb:f9:30:93:18:e8:6f:fa:f4:8c:fd:0c:
7b:8e:66:0d:09:17:55:e9:78:9a:c0:aa:05:ed:93:
90:c2:bc:55:21:4a:31:28:fc:8d:64:a9:a4:d2:29:
4b:3b:8c:0e:11:4c:13:60:12:4b:c8:6b:ea:e0:6d:
b8:e2:01:15:01:a1:77:ec:10:b2:72:0a:1a:95:fe:
4f:96:fa:a4:a5:26:61:f8:84:d5:a4:77:68:c2:fe:
62:40:7a:42:fd:1d:33:f7:26:5e:31:52:3b:bc:f7:
41:27:44:c9:b9:4c:37:11:65:ab:43:e7:1f:d1:4d:
aa:03:30:e8:af:38:1b:95:d2:67:eb:de:e5:5b:64:
b0:ef:0e:b5:39:6f:14:92:b2:93:41:9a:79:d1:10:
87:98:9d:0b:33:21:a9:e3:6a:6e:fb:3c:68:96:d6:
1d:da:36:58:84:82:7c:7d:55:0e:06:46:f7:a4:8e:
ad:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C7:88:D8:78:D7:A1:15:91:D7:A6:40:5C:B0:FB:F1:29:29:BC:FF
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:13:e1:cc:0d:6b:ff:cc:bf:45:9b:bb:f4:b1:51:a2:ac:06:
75:8b:45:25:58:8f:46:2b:86:ee:24:4d:e3:0b:a5:b8:fe:b1:
b5:76:2f:62:ef:92:28:7b:84:02:16:24:ce:96:16:77:16:44:
5f:68:f0:f7:c9:74:9c:7d:41:88:db:39:d4:87:a2:e5:3d:8d:
2b:6a:48:67:c9:16:f5:8c:e3:9b:0e:b0:d0:bd:f9:7d:2d:55:
f3:5d:fc:ca:06:e9:8b:22:b7:b4:41:56:4e:e6:50:ce:37:da:
06:63:37:38:62:3e:82:65:af:64:ae:ef:1a:e4:e4:11:6a:fa:
88:15:97:cc:cf:31:f8:38:97:64:be:3a:ca:04:ae:39:4a:96:
bb:1e:10:99:69:56:c3:53:47:e1:c6:7e:3e:d3:49:95:61:02:
f7:35:0d:9b:af:7f:e1:2a:74:d6:2e:f7:b9:29:37:42:78:12:
d1:64:8c:8b:0b:90:80:6b:5b:c1:29:aa:12:bf:78:fd:f3:e1:
ea:50:b8:b0:bc:2b:60:4a:70:93:4e:27:a1:d2:b5:33:0c:20:
41:47:cd:12:25:8e:e8:37:ce:31:c6:71:71:84:c6:63:cc:21:
ff:e3:3a:e1:e9:fd:24:99:a0:ad:9c:e2:8a:5a:fc:e0:7f:3d:
d3:93:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:47 2026 by rpki-client