Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: U2cQ20gYWxvSEwL8Z/Z4JUVXb0Fn/ak7rNVyaf4KLro=
Subject key identifier: 3E:21:CC:99:E9:C1:52:2C:93:4E:EA:26:2F:7B:72:2E:BC:0A:E1:A4
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 01A08DC4BD90F88E5CC1EF4B2B59FAAE187F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 0E86
Signing time: Fri 11 Sep 2026 00:01:15 +0000
Manifest this update: Fri 11 Sep 2026 00:01:15 +0000
Manifest next update: Sat 12 Sep 2026 00:01:15 +0000
Files and hashes: 1: 1JtyFjGHKOjB6E5ymFRYHo0Cjno.roa (hash: makKU1K/a9OvfPTgKGZKj9kwQNZtoAlnHOJ1Bnu95GE=)
2: jmBPCb9DTm9fzSzAZ1_mQpVIr-k.roa (hash: FekyEXt0eMF+S2nBvz+51hHLK6v+L5cr1WGH2ZOcpgs=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: imw4enjLkgCGkBnrrdAWM7RpeotDUzEFr256ieYLhDA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:c4:bd:90:f8:8e:5c:c1:ef:4b:2b:59:fa:ae:18:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Sep 11 00:01:15 2026 GMT
Not After : Sep 12 00:01:15 2026 GMT
Subject: CN=3e21cc99e9c1522c934eea262f7b722ebc0ae1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b7:2f:f1:29:7e:72:ee:19:20:eb:62:8d:ce:
35:ea:2d:78:22:29:a1:d7:8b:b3:48:02:68:44:bb:
2c:38:7c:9b:5b:8a:0d:8d:ac:7f:c6:75:42:9f:6f:
56:2f:9b:8e:11:5c:76:8d:03:eb:61:8c:e6:5e:81:
a8:ad:bf:a2:a8:1f:88:1f:73:9e:9d:35:a7:d1:57:
0c:1d:a0:a8:e3:d0:36:d0:5a:80:95:62:d2:87:4e:
5f:c6:af:35:12:08:b3:4d:bb:66:be:55:4f:a1:0c:
3f:dc:c7:50:bf:fb:67:13:7a:76:cf:b8:fc:25:c8:
27:87:c1:ec:6f:7d:98:6b:e7:00:fd:e9:a2:50:3a:
66:34:e3:1e:6f:6a:77:a4:2f:2d:a8:f3:da:d6:b6:
c9:25:55:cd:87:66:dc:62:32:14:2f:ae:a4:c5:7a:
7c:e7:40:e5:8f:24:96:98:05:0d:8f:3d:1b:39:bd:
14:87:0e:fe:fe:94:00:4c:46:57:16:d2:23:af:0c:
68:2e:db:ff:3a:b1:29:9f:8e:5e:93:5b:d2:1a:99:
41:e9:90:d8:b0:44:3b:a5:12:fb:1c:a8:f1:06:89:
1c:ce:9f:c0:5c:ca:f7:bc:92:88:7d:02:e9:36:8f:
cc:f7:aa:aa:07:d6:46:e8:ce:43:b2:bd:8c:6c:7e:
c5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:21:CC:99:E9:C1:52:2C:93:4E:EA:26:2F:7B:72:2E:BC:0A:E1:A4
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a7:77:06:f7:6f:3b:82:3f:bf:12:2e:90:95:1f:81:31:5d:
22:3a:ef:b6:f0:d9:aa:db:cc:55:d2:59:a3:fa:d9:48:19:c6:
67:8a:6d:b9:62:e7:c2:be:38:dc:ef:96:77:2e:62:58:57:af:
80:fc:f7:df:af:a6:dd:08:31:7e:fe:c4:2a:b2:01:b5:96:e3:
45:d2:4f:86:5f:31:86:29:30:db:3f:c8:6d:3e:de:eb:58:4a:
02:ce:31:17:0d:5a:31:69:a6:d2:bc:ca:5a:41:00:76:cb:f1:
28:c2:14:25:0e:e2:1c:bd:ef:3c:8f:58:80:77:32:e4:99:05:
34:a3:06:ba:70:a1:f8:96:8d:d9:b0:00:31:87:af:bf:57:8d:
21:2f:82:f0:17:a6:c0:5f:90:fc:50:ec:e0:0d:a0:7b:78:83:
92:dc:cf:70:40:83:af:a0:5f:c3:6d:25:77:98:e5:38:28:89:
6c:b4:07:42:f6:ff:fb:d8:4d:5f:88:a1:22:c7:de:95:32:57:
51:0e:5f:28:5f:3a:96:9f:91:e7:ef:c4:bb:1f:df:7b:58:6f:
36:30:aa:e6:1e:e8:d7:9d:89:ba:b6:cb:a0:4e:65:16:f9:83:
2b:4d:2e:d5:5c:61:40:f2:a7:bf:fe:24:1e:3c:1c:18:fa:55:
20:10:2c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:52:00 2026 by rpki-client