Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: AeoP9ZRYbKyHNoNfpVcRlYpvtaAFuYDEdPZKBEk8yIM=
Subject key identifier: 30:9C:97:1D:6A:3B:3D:45:68:5D:E8:02:67:C7:50:75:2E:3C:A8:A8
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 019F91DB18D088707728FFFCA846AF4F9FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 02:01:22 +0000
Manifest this update: Fri 24 Jul 2026 02:01:22 +0000
Manifest next update: Sat 25 Jul 2026 02:01:22 +0000
Files and hashes: 1: bWD35slaNU4G8WoJ3kljEx_CXmQ.roa (hash: CiE8YvQDdxY0SzfoYEi10FyebaWkuSk6ub1WO85b5Q8=)
2: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: r+8lQ/8AfK/+1FiVrjuHzCa2hinOxkIRZchIpu2tzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:18:d0:88:70:77:28:ff:fc:a8:46:af:4f:9f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Jul 24 02:01:22 2026 GMT
Not After : Jul 25 02:01:22 2026 GMT
Subject: CN=309c971d6a3b3d45685de80267c750752e3ca8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f6:89:cf:bb:13:84:43:08:5c:84:bd:e3:5e:
5a:20:4d:49:3d:e6:c8:96:f3:54:d7:1f:37:c2:cf:
81:e0:8d:a3:72:7a:f5:84:f1:f0:68:89:b7:ea:ca:
a7:5e:ca:91:6b:0d:5b:a6:88:33:cf:9b:1f:8a:81:
61:c0:d8:bc:4e:5a:fb:33:1d:6c:18:9b:92:05:68:
98:85:2b:18:84:5a:dd:1b:b0:86:83:ce:d6:44:2a:
3e:80:ef:9c:b9:bb:60:3d:60:94:34:38:98:db:e1:
6b:7e:a6:2b:d9:85:8c:56:a9:f4:be:d2:ce:94:5c:
5e:01:6a:bc:42:db:07:4f:02:76:d1:6f:84:2d:71:
12:0e:8b:ef:c9:dd:4c:d6:58:44:ee:37:33:1a:57:
af:eb:18:9f:58:18:4c:bc:18:e8:f2:c3:bb:56:21:
6f:0c:b2:e3:58:2d:47:36:9f:f3:a1:e0:f4:37:33:
8e:4e:15:1d:9f:79:33:7b:4a:ad:51:8d:9b:ea:84:
bb:22:8b:a2:48:78:bb:9a:d5:93:96:af:13:c8:80:
a4:47:b4:61:0d:00:b9:6f:fd:1e:f6:7e:4c:80:e6:
2d:78:1e:10:3e:9a:cc:cd:e5:b5:4d:32:35:58:d5:
d7:28:8d:29:6d:fd:72:c2:5f:7e:54:b0:0c:4c:37:
59:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9C:97:1D:6A:3B:3D:45:68:5D:E8:02:67:C7:50:75:2E:3C:A8:A8
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:44:ef:84:1b:08:d7:c7:cb:88:4c:58:4b:05:1b:70:47:48:
5b:13:83:22:76:8a:3d:8c:6a:09:a2:f1:51:f1:90:28:38:cc:
fe:6f:6b:69:33:1e:11:01:c7:2c:0c:cf:48:cf:38:64:5f:15:
b5:f3:a6:05:cb:37:86:25:24:8a:2e:67:6d:7d:46:c2:81:8b:
1f:75:94:ad:39:eb:15:71:36:50:f4:6b:ab:c8:e0:88:d4:44:
34:38:cc:54:35:18:4a:11:47:ce:99:c0:74:d6:a0:2a:99:02:
fd:a2:0d:c7:33:4c:a3:8b:b1:60:80:5d:9d:6b:4e:a6:15:4a:
e4:ae:85:9e:ec:55:65:57:6b:2c:71:cf:0b:61:f9:52:e5:ce:
87:93:ea:ba:dd:9a:f0:fa:d8:ef:d1:d9:38:ec:c7:11:fa:78:
9f:a6:96:4f:f9:d7:76:c7:da:91:be:fe:14:40:93:2e:2d:ec:
74:e2:b4:47:09:07:9f:92:a3:0f:ce:f1:4a:41:8f:67:47:7c:
be:cb:d0:1c:02:f0:a9:28:11:c7:33:df:21:e1:99:1c:b8:5b:
54:a7:f9:e6:0e:58:ba:14:5d:0a:69:ea:2d:2e:f1:5b:2c:3e:
be:3e:38:bf:fa:93:05:a6:54:05:ec:43:26:dd:5a:c4:46:37:
bd:49:d3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:08 2026 by rpki-client