Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
File: r3gchFM5kA9-ayAz5jiItTrleHU.mft (raw, json)
Hash identifier: A3rVV9Bg0cpPmWjd9W+6lIhsukJvnfesYMMxKnj7oKw=
Subject key identifier: E1:15:96:BE:1A:C5:0F:95:D7:D4:F6:EA:1F:5E:7F:0C:59:D1:23:74
Authority key identifier: AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75
Certificate issuer: /CN=af781c845339900f7e6b2033e63888b53ae57875
Certificate serial: 01A0DF17BA4049E8838D2F0348A5E1FCF020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 19:01:09 +0000
Manifest this update: Sat 26 Sep 2026 19:01:09 +0000
Manifest next update: Sun 27 Sep 2026 19:01:09 +0000
Files and hashes: 1: r3gchFM5kA9-ayAz5jiItTrleHU.crl (hash: dGPsg2CegVuselUTQ3RpttVajJNQPW9dkSFUYSHGjUQ=)
2: ygzwdt05FZY5UgU4PNRonpu2D5Q.roa (hash: iuwiLZg36gzzO6D5OpB0qDgYjkp9/xl1ZMAuUek9+EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:17:ba:40:49:e8:83:8d:2f:03:48:a5:e1:fc:f0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af781c845339900f7e6b2033e63888b53ae57875
Validity
Not Before: Sep 26 19:01:09 2026 GMT
Not After : Sep 27 19:01:09 2026 GMT
Subject: CN=e11596be1ac50f95d7d4f6ea1f5e7f0c59d12374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:4a:25:f5:8a:50:ed:03:ed:00:84:5b:4c:
58:07:7f:46:f2:2c:ab:6a:df:b4:c5:cc:b3:05:1e:
1e:55:b4:2a:6f:b8:66:20:ad:10:20:04:f9:6d:fb:
07:ea:07:01:bf:69:73:26:63:fd:76:11:58:54:59:
b8:88:2b:4e:85:cf:a0:a2:a0:41:05:c2:dc:c3:5d:
61:ce:36:ac:12:80:33:68:bf:f3:ed:ca:f1:69:3f:
0d:04:06:f9:27:73:92:ec:b0:03:6f:ad:6f:4a:b0:
39:0c:87:ea:b2:41:fa:34:9e:e6:ef:75:de:d7:9a:
f1:25:70:36:3f:0c:57:c0:3f:56:08:22:de:0a:46:
47:23:56:d7:e4:83:d4:fa:0c:e1:cb:df:41:fd:be:
84:1e:83:b2:5c:75:6c:33:5f:91:13:58:03:b0:0f:
4a:64:99:ed:9c:34:6d:69:b9:9d:ea:c8:64:46:19:
c5:ee:7d:68:67:3a:61:c9:b8:60:ce:3e:df:6b:97:
cf:48:73:95:cb:7e:c3:a3:01:72:9e:de:38:c4:a1:
20:7b:64:da:bb:95:5b:67:3b:b9:5f:88:42:dc:f5:
0b:9c:5f:05:c8:8d:b8:ed:0d:bb:c7:0e:99:b4:ea:
fb:43:32:d2:13:76:77:90:6e:3d:cc:97:71:da:68:
b5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:15:96:BE:1A:C5:0F:95:D7:D4:F6:EA:1F:5E:7F:0C:59:D1:23:74
X509v3 Authority Key Identifier:
keyid:AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ac:3b:58:ce:d5:0b:32:cf:23:97:a0:8a:f7:02:d5:a8:06:
e2:1b:16:c9:0a:bd:5a:b3:e1:60:7d:b6:27:8e:2b:29:94:2b:
7e:3c:1b:23:ab:07:4b:86:3b:3c:55:19:b9:75:2d:a1:fd:50:
7b:27:13:e1:9a:1c:73:8b:a4:1d:70:3c:73:de:c9:01:3e:2b:
ac:19:7b:53:e3:f7:08:b2:1d:f6:1f:ef:24:b9:ec:46:29:87:
b7:0d:42:96:02:86:d6:02:0a:8d:7f:a1:ca:ff:40:07:a6:95:
0d:1d:6b:f6:ca:d6:2e:21:97:87:15:d7:29:04:b0:c8:9a:73:
d2:53:b0:cb:4b:ea:e1:67:af:22:b9:73:97:68:1b:33:cd:d9:
74:61:9d:5a:03:09:96:ef:e5:75:8a:ba:93:a1:42:80:45:19:
cd:81:1f:d5:99:33:b6:c8:21:54:3f:56:2e:26:ad:1b:98:61:
53:9d:a9:92:96:35:98:02:1d:7d:ec:08:f6:a9:c1:d1:7a:6c:
08:55:7a:37:c6:3e:7c:03:3f:dc:e0:ba:b9:fe:b3:53:20:7c:
32:62:dd:fa:2b:a9:c0:60:28:b6:9a:37:e2:5b:c9:b8:93:4a:
88:86:50:7b:26:29:33:75:cd:73:93:9f:d6:38:a1:c1:77:27:
44:10:45:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:53:23 2026 by rpki-client