Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
File: r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft (raw, json)
Hash identifier: lu1itoUY1MY7hhjkJco+feBEDPqPxi0D6AhrT6ushlI=
Subject key identifier: F6:7D:8C:AC:8B:06:02:AF:40:6E:E0:0D:C1:8C:1A:9B:47:04:56:3E
Authority key identifier: AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
Certificate issuer: /CN=af782dae3d40caf2223262541c4054e62945d933
Certificate serial: 019E20FF9FB49C3DD6F31FFC1B81DE37320E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 11:01:23 +0000
Manifest this update: Wed 13 May 2026 11:01:23 +0000
Manifest next update: Thu 14 May 2026 11:01:23 +0000
Files and hashes: 1: bWD35slaNU4G8WoJ3kljEx_CXmQ.roa (hash: CiE8YvQDdxY0SzfoYEi10FyebaWkuSk6ub1WO85b5Q8=)
2: r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl (hash: jx2ibmL12DXCbxFcMlMGqm8O73/7Uba0XtgSuqp8UfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:9f:b4:9c:3d:d6:f3:1f:fc:1b:81:de:37:32:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af782dae3d40caf2223262541c4054e62945d933
Validity
Not Before: May 13 11:01:23 2026 GMT
Not After : May 14 11:01:23 2026 GMT
Subject: CN=f67d8cac8b0602af406ee00dc18c1a9b4704563e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:82:97:af:80:ff:d3:11:5c:4e:02:94:ac:d2:
08:29:cb:e0:d9:c9:fc:13:0e:84:91:21:e9:95:9b:
82:5d:0c:ce:59:1a:40:8b:58:07:3b:33:a9:a1:e5:
b5:b6:4e:a5:bc:8c:37:a7:fb:0c:00:c4:72:bd:0f:
1a:ac:93:e7:94:cb:d4:ec:bc:cc:90:cc:8e:6b:14:
06:b0:e8:81:36:38:46:12:39:d0:6d:d5:3d:a4:c1:
1e:6f:0d:42:fa:14:42:fe:f7:a0:5c:10:09:a8:55:
41:2a:1e:30:82:5a:0d:e0:79:56:5b:0d:5a:04:23:
fb:05:94:a8:21:9b:3a:6c:ec:71:e8:4c:a6:f8:b7:
30:bb:b1:cc:30:30:72:d9:66:3c:e2:17:a3:6e:24:
1f:11:6f:55:8b:6d:b7:6f:10:bb:b6:a4:9b:40:56:
e2:d9:5b:42:3a:f6:bd:e1:bb:21:99:67:5c:a5:bc:
2e:00:2b:39:8f:3e:1a:a6:81:aa:06:fc:66:04:bb:
ca:13:da:0e:c2:15:9d:76:29:27:74:82:eb:94:8c:
73:77:eb:d7:d7:40:2d:78:5c:b7:35:c8:5c:07:51:
cc:6b:a8:84:40:19:47:a0:ba:9e:7c:a8:03:73:2a:
a5:76:6d:e4:2e:d9:b1:95:a0:5e:9a:f7:5d:a1:99:
50:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7D:8C:AC:8B:06:02:AF:40:6E:E0:0D:C1:8C:1A:9B:47:04:56:3E
X509v3 Authority Key Identifier:
keyid:AF:78:2D:AE:3D:40:CA:F2:22:32:62:54:1C:40:54:E6:29:45:D9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gtrj1AyvIiMmJUHEBU5ilF2TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dee833-fe5b-4c10-bbec-f0125d02e262/1/r3gtrj1AyvIiMmJUHEBU5ilF2TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:7a:4f:5d:55:aa:bc:83:c5:d4:34:c6:cc:8d:a6:f6:1c:95:
64:5e:e9:e9:0f:d4:65:45:f8:09:b4:6f:73:2b:65:76:f0:76:
6b:e9:10:a0:5d:76:d1:b0:08:2d:3c:ca:93:7c:af:23:56:98:
ee:15:af:87:e1:5a:94:b9:a4:59:da:c3:df:9a:38:e4:93:6c:
a7:4c:f5:39:ec:f0:71:4c:e6:ac:a9:02:3d:c2:98:f2:7c:57:
8c:48:fa:5b:f9:b1:b3:51:20:5d:b8:1f:63:03:03:ed:fe:73:
27:fc:36:78:70:bb:a1:44:b4:7e:68:3a:7d:21:9e:a2:79:d2:
33:b4:17:d7:82:4d:32:3c:a0:b7:be:fd:f5:67:b1:2c:59:a7:
30:a3:c4:b7:f5:4b:3a:83:bf:ef:e4:16:d7:d8:6a:58:7b:98:
13:9c:68:2d:3e:1e:c6:9c:4e:3f:d3:8d:8a:f9:77:75:29:a6:
ea:5d:59:a8:88:0f:48:1c:5c:42:92:93:96:97:83:52:67:fe:
98:99:66:c6:c5:1b:f3:14:ab:6d:74:29:db:19:0a:1e:34:b1:
85:a5:45:58:80:7d:ad:d0:cd:f2:be:7c:b9:83:a6:71:16:a8:
27:d4:f3:d3:9a:83:7e:cd:0d:2e:70:dd:84:d9:11:66:07:53:
ef:7c:26:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:47 2026 by rpki-client