Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
File: RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft (raw, json)
Hash identifier: oKdeQ2bp4+uep/mtsstVp3KZ7/0FybFGODjvXPUXtrs=
Subject key identifier: FF:94:F6:90:8D:29:A7:9D:AA:2C:68:D5:EC:CE:93:87:CE:1F:3C:69
Authority key identifier: 46:D4:3D:A6:AD:E5:F2:D2:33:3D:ED:52:F5:83:1F:BE:D4:8C:FD:47
Certificate issuer: /CN=46d43da6ade5f2d2333ded52f5831fbed48cfd47
Certificate serial: 01A1555337DD3572CBA8785EE6DF394DF24F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
Manifest number: 012A
Signing time: Mon 19 Oct 2026 18:01:19 +0000
Manifest this update: Mon 19 Oct 2026 18:01:19 +0000
Manifest next update: Tue 20 Oct 2026 18:01:19 +0000
Files and hashes: 1: A3vyQNFZmIIiVEvn821V3LPNqkc.roa (hash: 0mBujLmZOmOPTcByzEM0WftntYdLFr6SGaantjpe9Ko=)
2: RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl (hash: zoju+xAwvE+2uzlgGcaDYJVfNfSsOBhN35+KgJM3tZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:43:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:53:37:dd:35:72:cb:a8:78:5e:e6:df:39:4d:f2:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d43da6ade5f2d2333ded52f5831fbed48cfd47
Validity
Not Before: Oct 19 18:01:19 2026 GMT
Not After : Oct 20 18:01:19 2026 GMT
Subject: CN=ff94f6908d29a79daa2c68d5ecce9387ce1f3c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:eb:4e:e0:f1:90:75:bd:eb:79:4a:14:bc:d5:
09:5e:e3:13:67:13:d4:27:2f:cf:51:e8:e9:40:2b:
57:b3:b7:a0:a2:73:1a:f4:ae:34:d2:c6:ba:e6:13:
60:ac:81:ed:a2:07:6c:f8:27:be:d3:5e:bd:72:9d:
55:1a:af:65:2f:e7:7e:f7:ae:70:ca:5d:cc:b4:c8:
6c:16:a8:7d:e1:82:6f:34:34:ab:df:61:c4:59:08:
ce:2f:eb:30:62:de:16:a9:06:e4:20:8e:9d:a2:41:
34:a3:96:a8:9a:97:e7:77:5b:53:10:e0:2d:fe:72:
6a:17:d8:2a:de:63:cd:9d:11:93:f7:fa:58:2d:40:
b0:96:0e:a1:db:5d:7d:81:5f:ab:b7:7d:4f:f8:ac:
62:f6:31:ae:3b:7c:2c:e6:d5:6e:3f:51:2d:e2:26:
47:bc:5f:68:47:1c:c6:79:64:b3:28:3e:9b:7c:ac:
59:02:92:c2:1a:3f:51:94:f3:d1:5b:20:17:f1:b9:
65:4b:02:bd:79:56:96:98:d9:e9:58:26:4c:9a:b1:
97:1b:e5:56:ae:ea:8b:24:e9:86:d5:a9:5a:21:8d:
6f:c5:48:51:f1:64:93:81:23:78:e5:df:78:f5:ca:
93:74:d5:43:bc:8d:6e:0a:7c:be:ad:cc:7a:47:e6:
4a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:94:F6:90:8D:29:A7:9D:AA:2C:68:D5:EC:CE:93:87:CE:1F:3C:69
X509v3 Authority Key Identifier:
keyid:46:D4:3D:A6:AD:E5:F2:D2:33:3D:ED:52:F5:83:1F:BE:D4:8C:FD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:7f:28:2b:77:22:53:e4:fe:57:b9:40:3c:e3:22:ba:65:d8:
34:8f:77:01:78:83:8a:4e:46:b4:a8:f7:e3:07:63:5c:b4:af:
00:ca:b3:8f:4f:1b:34:30:e0:4d:7a:19:2d:01:fb:66:f7:16:
dc:ba:1f:39:2d:12:8a:84:83:64:39:eb:eb:c8:ea:f7:a8:1b:
d7:c8:c4:6a:a8:00:74:32:a6:28:f1:36:32:1b:58:96:cf:03:
4c:48:58:32:4a:f8:b5:e4:b0:7e:aa:90:71:f4:e8:ba:e4:d6:
f9:7b:ff:0c:ce:9a:10:50:3e:3b:f0:10:fa:b0:21:33:a8:b7:
33:cb:68:84:7f:b8:8e:97:e6:e0:f3:54:5c:5d:d7:8c:bb:73:
06:87:0e:c8:a0:0b:1e:6c:88:86:d8:c5:8f:d0:7f:40:ee:6f:
29:f6:ac:8b:5b:52:c2:24:d1:d1:00:6d:b8:3b:e2:f8:00:1e:
4e:ba:e0:7e:67:d6:58:a0:eb:99:81:6c:1c:c1:99:e6:c8:29:
51:a8:d3:07:94:62:79:df:b6:80:67:dc:f7:0f:ed:f3:34:ca:
9f:73:7c:d3:b2:2f:02:96:12:e5:89:81:44:81:78:43:a7:a2:
d6:b6:69:3e:9c:6a:fc:ab:14:c7:7a:f0:5f:94:00:da:02:71:
6b:bc:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:16:57 2026 by rpki-client