Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: VByFCpE5PNMUOnQM1rNmVpJIyzuaIc+WKaMum7ABvxo=
Subject key identifier: 2A:41:73:97:07:C2:BE:70:AB:34:04:69:E9:03:F5:B1:7D:E0:6D:66
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 01A0F90EF4A2BD687C54A56555A784754D56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 1A81
Signing time: Thu 01 Oct 2026 20:01:41 +0000
Manifest this update: Thu 01 Oct 2026 20:01:41 +0000
Manifest next update: Fri 02 Oct 2026 20:01:41 +0000
Files and hashes: 1: bWD35slaNU4G8WoJ3kljEx_CXmQ.roa (hash: CiE8YvQDdxY0SzfoYEi10FyebaWkuSk6ub1WO85b5Q8=)
2: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: 3FLbnSLMtmAXmlGEO/Wm9+/5fquBhbatG3eHhqTFC68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f9:0e:f4:a2:bd:68:7c:54:a5:65:55:a7:84:75:4d:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: Oct 1 20:01:41 2026 GMT
Not After : Oct 2 20:01:41 2026 GMT
Subject: CN=2a41739707c2be70ab340469e903f5b17de06d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4d:49:0c:50:71:80:77:7c:f1:a4:27:9a:ef:
9c:14:18:5e:4d:65:10:89:63:6e:47:f8:5c:9d:ab:
64:d6:32:c4:02:de:6d:20:08:a9:61:14:18:d8:2c:
ed:bd:dc:7a:27:4c:f7:4b:07:82:0a:2f:b0:cc:af:
bd:29:f9:1f:5c:90:76:6b:ff:a2:a5:9a:eb:ce:ec:
41:43:28:e3:db:f8:71:23:0c:52:78:7e:11:f1:25:
b3:10:e9:45:76:b1:9c:c1:d5:9c:1e:8c:a3:f0:d6:
dc:ad:ce:20:af:c7:a6:6e:31:73:65:f8:d9:ac:fa:
61:24:7b:79:51:af:b9:44:f3:db:31:45:ff:16:46:
14:ce:0d:76:60:89:3a:ab:68:2d:66:c3:ac:2d:28:
d2:d4:de:4b:fa:ad:30:8a:4f:04:43:09:b8:6d:42:
63:6d:92:40:27:a4:40:70:13:5f:3a:cb:e2:dc:5b:
2d:58:da:f9:d4:66:0f:d3:3a:22:1e:97:bb:d8:bb:
b7:22:85:82:04:a8:5f:4d:42:e9:ef:e6:d0:b0:af:
fe:3c:83:4f:0c:ee:6b:c4:a7:66:2c:3d:05:8c:c3:
0e:1b:9f:51:b5:7b:30:5a:27:34:b2:44:d0:04:f5:
6c:d7:64:f2:7d:35:ad:f0:04:c5:71:e3:71:80:4d:
f4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:41:73:97:07:C2:BE:70:AB:34:04:69:E9:03:F5:B1:7D:E0:6D:66
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8c:a0:9f:d7:07:c8:44:dd:81:e1:45:01:00:6c:5b:7e:f3:
20:2f:d7:03:c3:74:66:fd:21:d2:26:db:07:6b:89:d9:b0:4c:
c3:f3:eb:ce:32:7f:34:30:3e:67:53:8d:ca:f3:21:f5:a0:cd:
71:69:af:88:8a:7f:fa:23:24:ac:04:7f:c1:eb:81:b7:69:09:
4b:cf:0e:90:01:c8:77:86:c1:82:ca:7b:7e:85:48:a3:b4:cb:
e4:64:a2:59:2b:5f:54:0d:a2:e7:24:86:ab:71:92:fa:2f:9b:
af:be:46:55:d7:dd:b8:ea:5e:fd:42:a8:c7:55:e8:be:33:16:
83:f3:e4:7a:e0:ed:46:56:35:79:7a:c3:51:7a:1d:34:f3:96:
ef:87:dd:fa:f1:8c:73:82:f6:e4:b9:2b:c1:77:74:b0:0f:73:
81:dd:5c:91:77:7c:57:75:eb:b4:4c:49:ed:2f:78:8d:65:de:
0a:ee:e2:1e:15:a8:73:b2:c5:e9:38:10:d8:7a:0c:ad:69:ba:
70:51:62:9c:e3:ad:02:27:59:0c:1e:25:7a:16:04:bf:28:aa:
98:d3:23:2a:9f:e5:29:bc:96:9a:25:40:88:5c:3c:c1:5b:57:
5e:37:30:26:6f:89:63:6d:82:a7:d7:7a:3c:82:5b:a7:ee:81:
df:da:25:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 10:07:25 2026 by rpki-client