Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: Ix2+lb240SQomqrobabNNOTFgfukOM3YALlIDhMwUQM=
Subject key identifier: 21:1A:B4:5F:2D:C2:F0:01:46:2C:ED:61:AE:F1:FC:36:59:53:CC:44
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 019D9BBF0AFBAD28E97163EBC36E0D85D72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 14:01:21 +0000
Manifest this update: Fri 17 Apr 2026 14:01:21 +0000
Manifest next update: Sat 18 Apr 2026 14:01:21 +0000
Files and hashes: 1: bWD35slaNU4G8WoJ3kljEx_CXmQ.roa (hash: CiE8YvQDdxY0SzfoYEi10FyebaWkuSk6ub1WO85b5Q8=)
2: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: EVAPewjW5vGjUTLRxm2n+KJ2dEsF7zxnob81P/19HGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:0a:fb:ad:28:e9:71:63:eb:c3:6e:0d:85:d7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Apr 17 14:01:21 2026 GMT
Not After : Apr 18 14:01:21 2026 GMT
Subject: CN=211ab45f2dc2f001462ced61aef1fc365953cc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:cf:1b:6b:ce:b4:fb:df:ef:13:98:36:ac:
47:f2:8d:d0:87:66:7a:23:d9:ef:df:8e:0e:16:44:
16:81:17:b8:cc:68:04:00:9b:2c:c9:83:c2:12:c7:
15:19:20:10:bb:71:1d:90:92:4e:4a:b0:ca:54:1c:
ca:d1:00:93:cc:42:08:af:ad:24:e9:4f:f8:95:6b:
cd:1b:cf:98:7c:ac:59:e7:60:8b:4e:3e:42:06:9a:
0f:38:cd:51:45:6b:d9:ce:f2:73:3e:95:7c:77:4c:
a9:f1:99:bb:ef:54:eb:a0:58:b5:26:b9:05:25:7d:
2b:49:97:d6:17:19:59:0a:62:e7:9b:ab:f1:9e:f2:
69:7c:fc:5a:2d:0d:bd:08:b3:8e:02:eb:80:11:ae:
1b:53:25:b5:93:da:61:7a:f2:f4:a4:97:94:e2:8d:
b0:ec:32:ac:a8:1f:92:db:2f:4e:d3:64:bb:06:70:
88:1a:8d:16:56:b5:dc:18:f7:20:70:c5:f0:86:83:
40:69:c5:40:bf:97:d3:0b:7e:d2:28:0a:6d:5c:51:
8d:a1:c1:9c:46:dd:0f:1a:a6:33:17:b8:23:1d:ef:
04:d4:e1:cf:76:8c:ba:c6:83:0d:09:e6:6b:c8:9e:
1c:e4:8d:1d:06:5b:9b:af:f8:04:85:7e:30:5b:15:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1A:B4:5F:2D:C2:F0:01:46:2C:ED:61:AE:F1:FC:36:59:53:CC:44
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5c:3f:8b:75:4f:6c:b8:d7:2a:e3:4c:71:64:b1:bb:1c:f7:
83:92:b0:06:4a:7f:ec:1a:b5:6a:6b:70:14:0f:b4:88:9e:5f:
e8:d5:86:a6:a8:df:92:1c:aa:19:61:6f:cd:7d:1d:18:85:b5:
38:de:82:2a:55:72:d0:ef:eb:4f:64:1d:f2:8e:e0:97:bf:ed:
c1:d7:c5:c1:95:d6:3e:7f:5b:c5:b1:81:f8:c3:4f:06:cb:4e:
58:c4:a8:d9:70:97:f6:22:f1:99:95:d9:ce:b0:0c:76:ee:e8:
ec:45:00:5d:4f:07:19:d5:cb:79:cf:0d:0e:df:4d:70:f1:38:
31:79:2b:82:78:43:07:39:31:bd:6d:2a:3d:7f:e1:ab:6f:02:
5d:e7:f4:97:b4:b1:8b:93:2b:6c:3c:0f:c9:35:09:c6:21:a3:
6c:4e:f4:89:67:e0:34:df:12:1b:b6:9f:c9:ef:18:3a:23:db:
a5:eb:4b:60:81:c3:65:85:0a:59:0d:ac:ef:93:21:0e:2a:52:
1f:a8:fb:c6:54:a7:e5:92:24:92:be:c5:d3:54:a2:b1:06:27:
41:8d:c0:f0:2d:54:cf:8a:96:9a:14:8c:4d:86:0d:85:4e:7f:
e6:34:7d:76:34:26:9c:1a:a8:50:65:f3:f4:d3:ab:9b:2e:09:
72:9d:fc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:46 2026 by rpki-client