Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: hJQd2QTva2vKU7jcuLWXhn8oPheaXIeyIpuP0BezY7E=
Subject key identifier: E4:85:2C:E4:D1:92:90:33:FD:05:25:C7:36:AD:DF:EC:5C:CA:9E:54
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 019D25F1A63370EE40208C4F0520E741F740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:01:26 +0000
Manifest this update: Wed 25 Mar 2026 17:01:26 +0000
Manifest next update: Thu 26 Mar 2026 17:01:26 +0000
Files and hashes: 1: bWD35slaNU4G8WoJ3kljEx_CXmQ.roa (hash: CiE8YvQDdxY0SzfoYEi10FyebaWkuSk6ub1WO85b5Q8=)
2: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: bbD8JvJniQvAxqXAz0OtsZ2KRlcfmN2yrXwr0UwL/+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a6:33:70:ee:40:20:8c:4f:05:20:e7:41:f7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Mar 25 17:01:26 2026 GMT
Not After : Mar 26 17:01:26 2026 GMT
Subject: CN=e4852ce4d1929033fd0525c736addfec5cca9e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ca:c6:30:76:73:9d:d3:02:80:6f:ff:33:d5:
a3:57:62:72:6f:7f:18:73:ac:76:bb:00:75:aa:68:
58:f3:20:3e:fd:05:79:ce:b3:91:d7:02:ef:f3:9c:
92:b6:89:34:c8:6f:af:ec:dd:6e:de:8f:70:36:89:
eb:b4:8a:d4:7a:26:80:33:f7:af:0c:99:93:15:4a:
41:83:fb:d7:a4:18:72:00:c1:b4:7b:fc:77:88:04:
7e:bc:95:fe:07:14:c8:b8:bd:9c:87:7b:df:aa:d2:
03:78:3c:c5:cb:3f:5d:37:f2:f5:51:b8:e7:06:e5:
f7:1b:60:fe:d8:3b:9a:ba:52:b8:d6:6d:84:8e:38:
7d:b8:2f:c0:64:31:67:0d:c2:9c:6a:36:f0:3c:c5:
ee:2b:09:0e:24:34:12:77:4c:0a:13:08:a2:0b:a8:
70:6d:af:8d:d7:c3:c4:bc:96:33:f6:bb:b4:d9:fd:
3c:43:6c:ef:c6:26:0c:c5:24:57:db:c4:de:4e:ec:
95:d4:aa:2d:cb:4c:bd:7a:d7:21:02:4a:f7:91:30:
7b:44:7e:8a:32:a1:34:12:ea:c0:34:ff:a7:f6:63:
a5:ef:ed:0b:2c:21:2e:bf:bb:2d:fd:c7:e0:c9:65:
00:40:b2:4f:e4:11:8c:1b:d7:0f:3f:8b:b2:fb:fb:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:85:2C:E4:D1:92:90:33:FD:05:25:C7:36:AD:DF:EC:5C:CA:9E:54
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cb:33:4b:a1:48:1f:e1:b0:82:3d:dd:d0:01:aa:e3:56:5b:
fd:e0:0a:ab:92:fd:17:08:f6:e7:f2:af:08:d5:c6:b0:b1:81:
3c:af:5a:8c:1c:e0:a9:8d:ee:a1:3a:3d:ae:fc:74:0d:2e:fa:
46:5a:fa:00:df:fb:f1:8e:63:bd:54:87:bf:75:f4:d1:31:99:
2f:7e:43:5a:e2:f3:8f:80:d5:df:65:0c:b8:b1:05:0a:10:ef:
56:5e:8e:f2:e5:79:50:a2:7e:81:da:83:f9:a9:4b:9b:6a:75:
49:6f:23:d1:97:65:9b:20:59:f1:65:a1:35:c2:98:ad:cc:96:
24:07:2c:40:20:5c:29:21:e0:97:89:52:cb:85:90:a5:0a:b8:
0e:1f:70:19:61:81:b3:f9:eb:02:a8:da:57:e3:90:17:47:49:
05:02:e5:b9:dc:91:2c:c1:c5:bc:c0:d5:e3:41:e6:40:82:25:
45:48:c3:72:80:5d:9b:4a:3a:5e:a5:b3:00:5f:9c:23:01:3f:
86:e6:83:b8:df:4b:56:7d:24:3f:25:de:4d:a6:8d:d7:3f:f5:
79:9c:89:a9:02:62:64:8a:a2:cc:2c:a1:e2:56:bd:f0:3e:ec:
fc:10:e0:aa:13:fd:b6:5a:60:29:77:34:5f:e8:30:84:4b:e0:
5f:6a:c4:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0l8aYzcO5AIIxPBSDnQfdAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzgyZGFlM2Q0MGNhZjIyMjMyNjI1NDFjNDA1NGU2Mjk0
NWQ5MzMwHhcNMjYwMzI1MTcwMTI2WhcNMjYwMzI2MTcwMTI2WjAzMTEwLwYDVQQD
EyhlNDg1MmNlNGQxOTI5MDMzZmQwNTI1YzczNmFkZGZlYzVjY2E5ZTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsrGMHZzndMCgG//M9WjV2Jyb38Y
c6x2uwB1qmhY8yA+/QV5zrOR1wLv85yStok0yG+v7N1u3o9wNonrtIrUeiaAM/ev
DJmTFUpBg/vXpBhyAMG0e/x3iAR+vJX+BxTIuL2ch3vfqtIDeDzFyz9dN/L1Ubjn
BuX3G2D+2DuaulK41m2Ejjh9uC/AZDFnDcKcajbwPMXuKwkOJDQSd0wKEwiiC6hw
ba+N18PEvJYz9ru02f08Q2zvxiYMxSRX28TeTuyV1Koty0y9etchAkr3kTB7RH6K
MqE0EurANP+n9mOl7+0LLCEuv7st/cfgyWUAQLJP5BGMG9cPP4uy+/vZJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOSFLOTRkpAz/QUlxzat3+xcyp5UMB8GA1UdIwQY
MBaAFK94La49QMryIjJiVBxAVOYpRdkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kZWU4MzMtZmU1Yi00YzEwLWJiZWMt
ZjAxMjVkMDJlMjYyLzEvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kZWU4MzMtZmU1Yi00YzEwLWJiZWMtZjAxMjVkMDJlMjYy
LzEvcjNndHJqMUF5dklpTW1KVUhFQlU1aWxGMlRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcszS6FI
H+Gwgj3d0AGq41Zb/eAKq5L9Fwj25/KvCNXGsLGBPK9ajBzgqY3uoTo9rvx0DS76
Rlr6AN/78Y5jvVSHv3X00TGZL35DWuLzj4DV32UMuLEFChDvVl6O8uV5UKJ+gdqD
+alLm2p1SW8j0ZdlmyBZ8WWhNcKYrcyWJAcsQCBcKSHgl4lSy4WQpQq4Dh9wGWGB
s/nrAqjaV+OQF0dJBQLludyRLMHFvMDV40HmQIIlRUjDcoBdm0o6XqWzAF+cIwE/
huaDuN9LVn0kPyXeTaaN1z/1eZyJqQJiZIqizCyh4la98D7s/BDgqhP9tlpgKXc0
X+gwhEvgX2rEcw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:10 2026 by rpki-client