Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: Dq/f5Cc9egEvEUisZLJuZUTxCLwEkzMNqRoWxFIwH58=
Subject key identifier: EC:EE:88:3F:B8:70:FB:90:59:91:33:8D:F7:79:6D:03:BE:8F:8E:47
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 019DCCE19A44EC1E0605ECF7EFFE13A310A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 13DF
Signing time: Mon 27 Apr 2026 03:00:30 +0000
Manifest this update: Mon 27 Apr 2026 03:00:30 +0000
Manifest next update: Tue 28 Apr 2026 03:00:30 +0000
Files and hashes: 1: 2SIXUZTGLSsuNmHnmH_XZgRCYVY.roa (hash: kuoWaUJI+dAA7ih84KRN5TqDkuF9bUAxQjQzkKOCjIc=)
2: 3xhOROtsWU6kcbRg-0eVsWv_Cf4.roa (hash: 5LTgCgWwER8eaf33nSzOpEaP32v0UF0hdAvBDa8TC70=)
3: KRctRzsS6WkYFQeNR_1yTG9YjP0.roa (hash: oB1FvlbACGWEHyhDswCez14XuSiwC0mCrxW2Q45DLmU=)
4: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: MpU89pfZJqfoU0Qov+dIpsC7npELygyLmyQfo5v4/j0=)
5: nayB3_rE3RntOJEk4e7i16Y7R3M.roa (hash: YijDZOJxEI25MjJmJqVvk74PVNuOr37g49vUulKscOg=)
6: oI0gNsAnUZaiiR1_JxvhZXrdyvc.roa (hash: PZhUlF96CrIiZt17nWZPHRO35kGXkmt9vTJKXgGorHc=)
7: qT0dlLpzpHG-UMlryrlwiaMMxcY.roa (hash: 9waKgS4/9SGo8HvqSDRZz0wIFy4U+cc/1Ys4XOOzmjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:e1:9a:44:ec:1e:06:05:ec:f7:ef:fe:13:a3:10:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Apr 27 03:00:30 2026 GMT
Not After : Apr 28 03:00:30 2026 GMT
Subject: CN=ecee883fb870fb905991338df7796d03be8f8e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f6:f2:0a:40:8b:32:cf:b5:d3:19:aa:73:88:
38:1f:d9:3f:27:a7:8d:89:03:0e:a8:8c:c2:75:4d:
5e:9e:5e:0a:18:db:91:cc:55:cd:e8:a3:08:e5:82:
fc:de:06:ca:f7:bc:44:e7:cf:3a:25:67:13:20:73:
65:e7:d1:4c:93:c3:64:45:2c:43:22:22:b1:6f:8c:
52:ba:84:68:7f:0c:36:15:af:27:15:03:de:5b:04:
6b:7f:56:52:b8:cc:9b:95:92:0d:f2:3d:ab:48:44:
d5:8b:d9:cc:95:26:0f:c2:a6:33:65:30:e4:ab:54:
e8:a3:c9:98:38:10:93:90:95:df:cd:69:50:21:8e:
27:bf:7b:b9:21:fa:d0:12:19:b2:e0:ac:11:60:87:
5c:2e:73:8e:dc:12:e2:cd:c5:13:a9:00:ba:9c:37:
86:09:b5:8f:2c:46:b9:84:11:ea:7f:df:54:76:79:
75:a6:69:9b:7e:e2:2b:dc:ee:95:32:fa:01:7a:13:
e3:c7:27:f0:36:9c:f8:18:8c:3d:db:d2:61:b0:94:
b7:0a:26:e2:64:2f:29:0b:e8:f3:ed:fc:bf:96:51:
fd:19:17:a2:3d:c7:08:69:a0:ef:37:47:3c:0f:04:
ba:2b:6b:4a:5c:3a:29:07:63:3f:ba:70:b7:d4:8d:
a3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:EE:88:3F:B8:70:FB:90:59:91:33:8D:F7:79:6D:03:BE:8F:8E:47
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cc:28:0a:cd:59:30:1c:0c:b2:c3:2f:0e:1c:95:d7:fd:aa:
98:0a:69:b9:be:79:9b:37:e8:c6:38:8c:c3:bf:0c:10:94:bd:
f2:a2:ab:1a:37:67:c3:9e:4b:52:d7:c6:76:57:2f:1e:f9:8f:
85:27:88:31:69:a7:3f:03:4c:37:ca:76:9f:50:3c:4e:5d:e6:
a4:58:9a:ed:f5:8d:11:40:55:11:3e:96:72:d0:55:35:5c:57:
f2:70:87:e0:3d:ed:2a:d1:e0:3a:f7:fe:cb:a9:91:cb:9f:0d:
84:7e:c1:9f:28:78:79:49:77:b0:13:d5:8a:48:3f:ca:6b:f9:
22:47:90:03:76:f7:9b:01:ed:49:b0:ba:1b:a7:5f:84:1f:11:
2d:f8:0b:14:e4:fc:14:99:63:3b:de:d5:3e:0a:a8:5f:ee:ae:
08:e0:98:f1:ea:44:0a:61:54:01:75:17:b2:00:03:a2:db:88:
ff:70:25:8c:d9:c1:3a:68:ed:75:69:6d:c4:f1:8a:9b:97:8d:
29:81:69:ab:4c:21:5e:a3:11:06:1b:4d:93:0b:08:26:79:b8:
85:c0:7a:99:63:ae:eb:17:52:46:9f:1c:8f:9a:c1:94:3c:b2:
8a:06:0d:58:ef:4e:69:7d:9e:c9:23:3a:af:56:06:39:db:d4:
c8:ae:0e:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3M4ZpE7B4GBez37/4ToxClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl
ZTA4ZTAwHhcNMjYwNDI3MDMwMDMwWhcNMjYwNDI4MDMwMDMwWjAzMTEwLwYDVQQD
EyhlY2VlODgzZmI4NzBmYjkwNTk5MTMzOGRmNzc5NmQwM2JlOGY4ZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvbyCkCLMs+10xmqc4g4H9k/J6eN
iQMOqIzCdU1enl4KGNuRzFXN6KMI5YL83gbK97xE5886JWcTIHNl59FMk8NkRSxD
IiKxb4xSuoRofww2Fa8nFQPeWwRrf1ZSuMyblZIN8j2rSETVi9nMlSYPwqYzZTDk
q1Too8mYOBCTkJXfzWlQIY4nv3u5IfrQEhmy4KwRYIdcLnOO3BLizcUTqQC6nDeG
CbWPLEa5hBHqf99Udnl1pmmbfuIr3O6VMvoBehPjxyfwNpz4GIw929JhsJS3Cibi
ZC8pC+jz7fy/llH9GReiPccIaaDvN0c8DwS6K2tKXDopB2M/unC31I2jEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOzuiD+4cPuQWZEzjfd5bQO+j45HMB8GA1UdIwQY
MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt
ODYzYzliM2QzMmIwLzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw
LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApswoCs1Z
MBwMssMvDhyV1/2qmAppub55mzfoxjiMw78MEJS98qKrGjdnw55LUtfGdlcvHvmP
hSeIMWmnPwNMN8p2n1A8Tl3mpFia7fWNEUBVET6WctBVNVxX8nCH4D3tKtHgOvf+
y6mRy58NhH7Bnyh4eUl3sBPVikg/ymv5IkeQA3b3mwHtSbC6G6dfhB8RLfgLFOT8
FJljO97VPgqoX+6uCOCY8epECmFUAXUXsgADotuI/3AljNnBOmjtdWltxPGKm5eN
KYFpq0whXqMRBhtNkwsIJnm4hcB6mWOu6xdSRp8cj5rBlDyyigYNWO9OaX2eySM6
r1YGOdvUyK4Opg==
-----END CERTIFICATE-----
Generated at Mon Apr 27 11:58:16 2026 by rpki-client