Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
File: r3gchFM5kA9-ayAz5jiItTrleHU.mft (raw, json)
Hash identifier: IgRTWYJk0WhY4hzdnzoW+dZpr8sGYvFwsSZvi8V034Y=
Subject key identifier: 8E:DA:66:7E:03:0F:90:F2:3C:63:05:5B:A9:3E:29:9E:9F:EB:F3:E1
Authority key identifier: AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75
Certificate issuer: /CN=af781c845339900f7e6b2033e63888b53ae57875
Certificate serial: 019F94DB8509F7389E9F0E3A0CE29ED49838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 16:00:42 +0000
Manifest this update: Fri 24 Jul 2026 16:00:42 +0000
Manifest next update: Sat 25 Jul 2026 16:00:42 +0000
Files and hashes: 1: r3gchFM5kA9-ayAz5jiItTrleHU.crl (hash: 6H/mCcOyHKSU3f2ERpofaNnK/kymqjvZclV7KeG52z0=)
2: ygzwdt05FZY5UgU4PNRonpu2D5Q.roa (hash: iuwiLZg36gzzO6D5OpB0qDgYjkp9/xl1ZMAuUek9+EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:db:85:09:f7:38:9e:9f:0e:3a:0c:e2:9e:d4:98:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af781c845339900f7e6b2033e63888b53ae57875
Validity
Not Before: Jul 24 16:00:42 2026 GMT
Not After : Jul 25 16:00:42 2026 GMT
Subject: CN=8eda667e030f90f23c63055ba93e299e9febf3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:88:81:16:2f:dd:b0:f6:36:e2:7a:c7:f0:3d:
a3:7a:bf:33:b3:ab:3f:bf:5f:08:68:3f:d3:c4:91:
69:b3:3b:60:f7:8e:d3:04:9d:5e:69:7f:7f:97:d9:
dc:40:4a:98:cd:27:12:6a:8b:4e:fb:0f:09:8e:6d:
ee:d7:08:68:0f:92:73:65:8f:eb:ab:7e:a6:fc:32:
fc:b7:73:72:96:6e:f3:f1:40:88:8e:f4:0e:9d:2f:
b6:d9:04:99:88:37:2c:b6:5d:0d:57:b9:eb:21:0a:
92:6a:83:ec:96:9a:07:2b:07:22:7e:5f:c0:7d:2b:
51:d2:f1:72:24:10:81:16:6a:fb:4b:f7:60:d0:2e:
8d:33:e5:b4:ec:ab:7e:8b:49:f0:eb:a3:f1:f2:78:
1d:d2:d6:13:ee:84:33:be:d1:e1:e0:e4:ff:59:d2:
57:db:b3:0c:52:00:c4:a9:de:f6:f6:ae:95:1c:f1:
8d:a2:cb:df:8b:1d:a8:f9:64:26:29:cc:07:c9:79:
b0:ef:50:d8:04:12:a6:c8:8b:15:57:36:ba:47:b4:
0b:d7:9d:c7:75:ab:a2:03:ca:c9:4f:67:c4:7b:92:
28:95:36:79:97:3a:7f:b8:42:53:43:98:dd:f2:73:
2a:09:7f:1a:a7:70:c2:4e:a9:c3:9a:6c:bb:45:5a:
0d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:DA:66:7E:03:0F:90:F2:3C:63:05:5B:A9:3E:29:9E:9F:EB:F3:E1
X509v3 Authority Key Identifier:
keyid:AF:78:1C:84:53:39:90:0F:7E:6B:20:33:E6:38:88:B5:3A:E5:78:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r3gchFM5kA9-ayAz5jiItTrleHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/d1c71d-aa50-4d78-8e52-5cf37a34830d/1/r3gchFM5kA9-ayAz5jiItTrleHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:54:df:a8:cf:b8:20:a1:e6:fb:c7:8c:c4:99:46:7a:a4:b3:
42:ce:c6:01:67:dc:9c:37:cc:05:17:6b:cc:7e:a3:e9:0e:15:
d4:86:34:42:4a:1a:5f:dc:ec:d7:be:fb:3c:37:28:f5:28:75:
96:59:38:ff:18:84:ec:b3:63:cb:e0:ff:3c:45:32:bd:c2:9d:
aa:16:63:f3:62:92:63:36:dc:9a:64:a4:a7:9b:e9:78:7b:a7:
8e:95:60:40:0d:31:07:57:97:94:24:f8:93:93:76:c1:ac:c2:
e3:77:13:35:43:91:b1:20:a4:35:75:6f:33:d9:22:a4:48:05:
64:1c:4a:c4:c8:56:fe:78:70:b1:fa:7c:c4:aa:77:3b:66:10:
13:ec:2d:d1:24:45:c7:70:e5:33:cc:24:a7:1a:41:d0:59:40:
d4:09:04:bf:e3:18:8f:4b:39:9b:e6:e3:84:09:13:dd:af:a7:
b0:4c:36:da:9b:8b:af:62:d2:ed:78:e7:d9:24:ef:ed:19:a1:
7b:4f:06:42:6f:e8:56:cb:94:48:0f:7f:1e:60:18:11:25:83:
b9:b8:77:b2:c9:ad:52:df:04:70:9e:a2:dd:bb:d3:ab:25:3b:
9f:54:19:7a:30:f0:c8:fa:fb:b6:38:b0:9d:a5:78:71:f7:a5:
24:65:c5:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+U24UJ9zienw46DOKe1Jg4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNzgxYzg0NTMzOTkwMGY3ZTZiMjAzM2U2Mzg4OGI1M2Fl
NTc4NzUwHhcNMjYwNzI0MTYwMDQyWhcNMjYwNzI1MTYwMDQyWjAzMTEwLwYDVQQD
Eyg4ZWRhNjY3ZTAzMGY5MGYyM2M2MzA1NWJhOTNlMjk5ZTlmZWJmM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YiBFi/dsPY24nrH8D2jer8zs6s/
v18IaD/TxJFpsztg947TBJ1eaX9/l9ncQEqYzScSaotO+w8Jjm3u1whoD5JzZY/r
q36m/DL8t3Nylm7z8UCIjvQOnS+22QSZiDcstl0NV7nrIQqSaoPslpoHKwcifl/A
fStR0vFyJBCBFmr7S/dg0C6NM+W07Kt+i0nw66Px8ngd0tYT7oQzvtHh4OT/WdJX
27MMUgDEqd729q6VHPGNosvfix2o+WQmKcwHyXmw71DYBBKmyIsVVza6R7QL153H
dauiA8rJT2fEe5IolTZ5lzp/uEJTQ5jd8nMqCX8ap3DCTqnDmmy7RVoNfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7aZn4DD5DyPGMFW6k+KZ6f6/PhMB8GA1UdIwQY
MBaAFK94HIRTOZAPfmsgM+Y4iLU65Xh1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjNnY2hGTTVrQTktYXlBejVqaUl0VHJsZUhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9kMWM3MWQtYWE1MC00ZDc4LThlNTIt
NWNmMzdhMzQ4MzBkLzEvcjNnY2hGTTVrQTktYXlBejVqaUl0VHJsZUhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9kMWM3MWQtYWE1MC00ZDc4LThlNTItNWNmMzdhMzQ4MzBk
LzEvcjNnY2hGTTVrQTktYXlBejVqaUl0VHJsZUhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1TfqM+4
IKHm+8eMxJlGeqSzQs7GAWfcnDfMBRdrzH6j6Q4V1IY0QkoaX9zs1777PDco9Sh1
llk4/xiE7LNjy+D/PEUyvcKdqhZj82KSYzbcmmSkp5vpeHunjpVgQA0xB1eXlCT4
k5N2wazC43cTNUORsSCkNXVvM9kipEgFZBxKxMhW/nhwsfp8xKp3O2YQE+wt0SRF
x3DlM8wkpxpB0FlA1AkEv+MYj0s5m+bjhAkT3a+nsEw22puLr2LS7Xjn2STv7Rmh
e08GQm/oVsuUSA9/HmAYESWDubh3ssmtUt8EcJ6i3bvTqyU7n1QZejDwyPr7tjiw
naV4cfelJGXFyg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:04:06 2026 by rpki-client