Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: RAVmQi2dKjrRqef1WVTkdZGM8FuUBkaCg24YdSB9tbY=
Subject key identifier: A3:80:B0:7E:E7:39:62:CC:4C:21:B1:A1:1F:48:E2:36:92:C9:8F:63
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 01A134EC03CFE3336EBCB0C76DA6B7399E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 1AA0
Signing time: Tue 13 Oct 2026 11:00:44 +0000
Manifest this update: Tue 13 Oct 2026 11:00:44 +0000
Manifest next update: Wed 14 Oct 2026 11:00:44 +0000
Files and hashes: 1: bWD35slaNU4G8WoJ3kljEx_CXmQ.roa (hash: CiE8YvQDdxY0SzfoYEi10FyebaWkuSk6ub1WO85b5Q8=)
2: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: KscmR94NtrqcLOC2B1E/MEVORDUBZPWtkTbGxPPII1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:ec:03:cf:e3:33:6e:bc:b0:c7:6d:a6:b7:39:9e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Oct 13 11:00:44 2026 GMT
Not After : Oct 14 11:00:44 2026 GMT
Subject: CN=a380b07ee73962cc4c21b1a11f48e23692c98f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8a:98:a8:1b:b0:cd:5c:48:23:64:df:b9:e9:
4c:11:ea:8c:2f:8b:a9:a7:31:0f:49:32:21:b8:92:
24:8f:31:6e:f7:ba:fb:52:ba:a0:fa:1b:74:67:d1:
30:02:a8:51:e8:ec:26:71:0c:85:fb:ea:dc:52:32:
96:60:50:99:a9:d7:4a:1f:ff:5e:17:9c:ce:4e:c8:
7a:c1:52:24:67:d9:1e:c0:7f:61:30:fa:97:58:06:
cc:57:ac:ba:aa:be:2c:0d:fb:6a:23:43:74:f3:cc:
04:90:a0:10:92:17:5c:e8:84:4d:20:4b:b8:c7:8c:
08:9d:de:52:40:6e:b0:18:a4:2d:4a:91:ae:80:5a:
78:91:20:e8:c3:1d:12:f6:ae:d3:b3:6a:e1:56:41:
58:40:a2:8e:ad:5b:09:7c:b5:cd:f3:0e:92:cb:2f:
26:0c:7e:b5:d7:e0:3e:0d:94:40:4e:78:45:98:58:
7e:b5:c2:cf:ee:c6:5a:eb:a8:d7:9d:5e:33:79:ea:
b9:d9:29:9b:86:fb:f1:2f:ae:d8:88:b6:34:71:cb:
29:7f:54:36:83:12:9e:50:2e:e5:44:49:fd:03:b8:
4f:ea:51:83:d6:8a:5f:71:83:4b:e1:f8:d4:97:b8:
7a:53:06:f2:5f:2c:f3:de:b8:d8:3c:7f:dc:bf:77:
ac:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:80:B0:7E:E7:39:62:CC:4C:21:B1:A1:1F:48:E2:36:92:C9:8F:63
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3a:db:75:7b:4d:1f:9b:3e:7f:c5:c9:ca:fc:cc:29:1f:18:
ce:b8:ec:4f:05:32:1f:c3:b3:90:ef:5f:3f:3b:76:58:3a:6e:
3a:33:09:d7:87:1e:c9:ed:d8:a6:fc:99:2a:14:c4:9a:93:f3:
fa:92:f3:a9:aa:b0:19:62:a6:8f:9a:86:c7:6c:26:4a:68:95:
24:d2:80:3c:88:ba:b6:9d:21:7e:fb:e8:c6:b9:32:e3:dc:94:
63:7b:89:fd:2e:32:a4:37:15:6a:ab:f0:49:da:99:b2:86:55:
17:34:32:d1:83:3a:c3:e7:3c:39:9c:be:91:ea:7d:79:6f:61:
b6:ce:56:24:7d:6f:7e:6f:44:2a:e2:2b:73:24:6f:eb:b0:b4:
7e:d8:91:8a:fe:81:3e:54:68:da:41:c1:eb:28:25:c9:88:7a:
37:a8:6e:e6:44:62:e6:98:08:ab:11:c7:ff:21:04:6d:03:e2:
a7:e3:89:04:32:a9:10:78:36:51:00:58:03:7a:a4:c5:4f:87:
54:9e:0b:69:5a:b4:8e:be:d7:5a:5f:83:0a:1d:20:71:14:6c:
39:e8:76:5f:b0:46:28:0b:57:c0:4f:71:c8:26:e9:d0:d4:41:
8b:d7:d7:ea:03:e6:39:9f:56:1c:38:6d:92:45:d7:ef:9f:42:
e6:04:f5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:09:01 2026 by rpki-client