Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: X6Ow7q/viSkDvu1OEQg/I3TVO4zKS+5E0GP3OyKyT78=
Subject key identifier: A6:96:BC:25:B8:A0:B6:55:A5:05:94:90:D1:2B:1D:0A:58:87:53:2C
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 019DCED08C5C02E7CD9357AEA169D0605956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 0D1A
Signing time: Mon 27 Apr 2026 12:01:06 +0000
Manifest this update: Mon 27 Apr 2026 12:01:06 +0000
Manifest next update: Tue 28 Apr 2026 12:01:06 +0000
Files and hashes: 1: 1JtyFjGHKOjB6E5ymFRYHo0Cjno.roa (hash: makKU1K/a9OvfPTgKGZKj9kwQNZtoAlnHOJ1Bnu95GE=)
2: jmBPCb9DTm9fzSzAZ1_mQpVIr-k.roa (hash: FekyEXt0eMF+S2nBvz+51hHLK6v+L5cr1WGH2ZOcpgs=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: E3UowLeYICsBZ4osjDZ5Uk7akXVCSqfxyXe9Tc5ljas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:8c:5c:02:e7:cd:93:57:ae:a1:69:d0:60:59:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Apr 27 12:01:06 2026 GMT
Not After : Apr 28 12:01:06 2026 GMT
Subject: CN=a696bc25b8a0b655a5059490d12b1d0a5887532c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:52:15:f7:f6:bc:30:29:ae:c8:aa:89:df:
93:98:e2:67:4e:b2:81:0f:ab:e3:37:56:d2:2f:b4:
fe:d7:61:18:f7:d0:dc:2e:c6:45:38:a5:34:31:b1:
ad:70:f5:1d:42:28:b5:6c:82:ec:38:b7:ae:5f:7e:
af:56:8d:68:d0:a8:1a:fe:55:ef:fb:36:8a:82:5e:
39:4a:b2:44:41:e4:ba:93:1a:40:a0:3d:94:bf:b4:
6f:1b:fb:ac:ce:c0:8c:b5:23:be:b3:31:d8:93:b0:
f8:c0:73:6d:e8:5d:59:9c:0f:f9:00:97:9c:fb:99:
3f:95:14:59:a7:07:42:9a:fd:da:d8:95:7b:df:f7:
08:af:eb:0e:08:39:3e:10:ae:d2:04:0d:b9:54:23:
c9:a3:5f:6b:9e:72:c0:9a:71:da:9b:d4:81:c5:63:
45:b6:83:26:30:86:1f:3e:e2:50:fe:b2:cf:69:b4:
ba:a2:43:0a:02:59:7e:0d:79:30:ff:99:8d:6d:a5:
36:81:1f:a5:b6:a1:ad:5a:f5:a7:33:12:c8:fe:db:
83:6f:a5:1a:97:7b:ba:8c:0e:f6:e1:e2:18:5f:fb:
09:5b:19:8f:b0:d1:d9:39:df:c4:0d:1e:c8:e8:a2:
84:2b:f6:30:d9:36:5c:b4:6a:f1:bd:be:a8:91:e0:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:96:BC:25:B8:A0:B6:55:A5:05:94:90:D1:2B:1D:0A:58:87:53:2C
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d4:c9:ce:70:1c:7a:7e:57:16:40:9a:07:a3:d6:e1:9f:64:
2e:68:21:dc:49:e1:d9:15:1f:1d:00:e4:63:57:55:8a:cb:93:
e1:bb:65:63:f4:c9:8c:3a:b4:0d:42:c4:25:2b:3d:78:d4:f3:
ea:2d:ef:35:e5:82:26:1b:d2:65:08:4a:6c:78:b2:57:cb:dd:
26:ec:3f:08:a3:ee:e1:95:b1:1b:c3:ee:71:43:0f:fe:72:6e:
24:51:3f:63:11:69:46:24:e9:da:09:e2:60:ed:67:11:35:3f:
e8:7f:c3:a4:fd:4e:ba:94:cf:72:e4:eb:c2:ac:4f:ef:6a:58:
f4:ef:b9:b5:7a:25:b8:88:19:ee:54:14:fc:d4:2a:fb:64:53:
75:76:13:e1:86:16:b9:e3:cc:35:ca:2c:ec:cb:2d:2f:62:7f:
f2:f6:38:16:8c:7e:38:a2:1d:4f:4e:cb:83:41:6e:2c:35:9f:
10:4d:81:91:f0:44:e8:e9:00:58:77:79:05:c9:cd:3c:c9:55:
ec:c4:48:3c:d5:1c:36:17:6c:39:e3:b8:8b:1b:d9:41:c5:e8:
e5:1e:50:6a:f5:46:42:1a:2b:12:0a:1c:97:39:53:c6:1c:83:
6b:48:68:1e:e2:69:93:7c:79:cf:46:15:7f:c4:18:aa:c7:c1:
6c:7c:48:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:30:20 2026 by rpki-client