Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft
File: Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft (raw, json)
Hash identifier: KO6sXkoWIn+N6jKBZIlzPMwpviNlSu7+xq5Rt3/GwE8=
Subject key identifier: 06:3C:E1:B4:64:DB:C8:16:03:74:AE:D7:BE:0B:16:37:EC:B2:29:69
Authority key identifier: 46:DC:9B:82:8A:AC:EC:97:11:4D:DB:A6:81:9E:30:24:65:2C:18:67
Certificate issuer: /CN=46dc9b828aacec97114ddba6819e3024652c1867
Certificate serial: 01A181BD9BCB79D664BA9066EC5A14D2A170
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rtybgoqs7JcRTdumgZ4wJGUsGGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:00:49 +0000
Manifest this update: Wed 28 Oct 2026 09:00:49 +0000
Manifest next update: Thu 29 Oct 2026 09:00:49 +0000
Files and hashes: 1: 4XiXh8_wXxHMXryb21gQu-Vo2ak.roa (hash: ZhzTAMyy8UUREXRxteZi8kS1/dlvGAHQtBtzgyRuz1Y=)
2: R2rXfyd0OXaVnfiV3CA9oe0qoxg.roa (hash: vVj2qBO4foAyQkAfmXKW438nMYRkk8Pl9+S1RCDweeM=)
3: Rtybgoqs7JcRTdumgZ4wJGUsGGc.crl (hash: 1j7fbauzeft109igY/a8XXUeNGrwNKEu4gyCGNEdpoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rtybgoqs7JcRTdumgZ4wJGUsGGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:9b:cb:79:d6:64:ba:90:66:ec:5a:14:d2:a1:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46dc9b828aacec97114ddba6819e3024652c1867
Validity
Not Before: Oct 28 09:00:49 2026 GMT
Not After : Oct 29 09:00:49 2026 GMT
Subject: CN=063ce1b464dbc8160374aed7be0b1637ecb22969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:7a:57:35:ed:8b:40:ef:fe:72:51:a1:2b:
ca:4b:c4:31:cf:78:90:91:64:18:6c:3b:aa:17:de:
2d:fd:c8:3b:65:33:41:f8:7e:f3:d3:8b:19:b5:5b:
aa:d7:72:d9:d1:8f:e6:31:1d:69:df:8b:03:b9:56:
88:ae:f5:f4:42:0e:fc:05:0d:c3:f3:d5:f8:d4:f9:
a5:4d:62:7d:15:5e:a9:35:9f:4d:08:b2:6a:96:5e:
48:cf:86:6b:c8:7d:83:5f:45:7e:f1:ea:84:2e:01:
f9:5f:ad:7d:45:32:6a:82:2a:b6:ca:e6:32:d0:19:
a1:60:d7:a2:cd:d0:c6:6c:c4:52:d7:11:d0:60:49:
42:18:eb:34:ce:14:25:4d:96:59:bd:04:e9:03:55:
8b:1f:70:90:27:c4:50:67:ef:da:f1:c0:af:01:6e:
87:cb:6d:fa:4e:26:51:05:34:36:7f:b4:96:62:09:
1e:26:8c:28:70:0d:ef:62:5b:2c:f2:cf:15:df:3a:
20:cc:a1:c8:60:8f:01:75:71:df:ff:90:30:9c:63:
84:fb:a7:76:41:07:54:e4:3c:19:41:69:06:8c:c1:
23:da:21:52:62:69:35:ec:4f:17:92:fd:5a:3d:ed:
d2:1f:46:dd:b7:65:d6:ab:de:f2:a9:4b:54:1f:7b:
88:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3C:E1:B4:64:DB:C8:16:03:74:AE:D7:BE:0B:16:37:EC:B2:29:69
X509v3 Authority Key Identifier:
keyid:46:DC:9B:82:8A:AC:EC:97:11:4D:DB:A6:81:9E:30:24:65:2C:18:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rtybgoqs7JcRTdumgZ4wJGUsGGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ea:50:40:8b:53:a1:7c:2e:a1:cb:95:34:64:fa:81:a9:2a:
cc:24:bf:08:63:c7:ae:8d:32:4f:9f:68:b0:d4:99:84:72:17:
34:0f:cb:4a:fa:9c:0b:f6:20:a1:0a:52:12:a4:6c:20:c7:5c:
6f:64:a1:69:a0:e9:c5:bb:4c:11:8d:e5:3e:18:78:86:4c:b1:
c5:c5:4c:44:ff:69:99:17:8a:8a:ea:55:eb:ba:ea:4c:9f:b0:
44:66:26:e1:e4:68:19:97:4d:fc:81:b4:14:f4:b3:67:ab:3b:
14:9a:0d:51:f9:8a:e2:e9:3f:67:b2:6e:69:03:57:50:55:78:
5f:0e:d7:1b:53:59:08:c8:87:77:cf:54:df:3f:82:58:1e:ee:
dc:47:3b:4c:fe:7e:12:c0:06:88:5c:09:48:10:b8:5c:df:e7:
29:d8:9f:20:2b:03:67:86:a7:cf:3a:93:49:74:5b:0c:f6:9c:
14:85:96:8a:64:df:a3:d1:90:f9:e9:01:74:fb:ca:7e:c7:22:
f6:79:d0:16:a9:48:7e:e9:94:00:11:b5:3e:d3:0d:64:2b:d8:
e6:ed:3e:0d:47:f8:ad:82:ce:29:12:0f:46:41:b5:45:a3:e6:
5c:56:30:f1:e5:15:fc:27:4e:43:4a:3e:c3:80:45:a8:7b:52:
25:39:97:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:06:37 2026 by rpki-client