Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
File: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft (raw, json)
Hash identifier: 2YaaRQWZHTWt/KEVdhqWItsWrk19OppG94kfimrXJeQ=
Subject key identifier: F8:75:EF:A4:4C:2B:E5:83:27:FE:2E:CC:2D:36:F7:C3:75:12:7D:8B
Authority key identifier: 45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24
Certificate issuer: /CN=4534cab4450404862b201fe733f2c70a6bf52924
Certificate serial: 019D382E4668BDC33CE0CC85B2313805D75A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:49 +0000
Manifest this update: Sun 29 Mar 2026 06:00:49 +0000
Manifest next update: Mon 30 Mar 2026 06:00:49 +0000
Files and hashes: 1: QimJZyg_5Yfg1zb4CAZqCQiArVo.roa (hash: Z7/KTdUBdl9nRIlHCoXi0enigEky+0AXzlP7afwwRuk=)
2: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl (hash: g1wuOgP7CsavHg5Du9SoLBOTPCs8GRlpWrELvegoJOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:46:68:bd:c3:3c:e0:cc:85:b2:31:38:05:d7:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4534cab4450404862b201fe733f2c70a6bf52924
Validity
Not Before: Mar 29 06:00:49 2026 GMT
Not After : Mar 30 06:00:49 2026 GMT
Subject: CN=f875efa44c2be58327fe2ecc2d36f7c375127d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:43:62:84:5a:1c:39:46:a7:c3:89:f1:d5:2c:
b6:cb:89:c8:7b:06:28:ce:a9:08:4c:b1:b8:3b:95:
d6:2e:65:4b:56:7d:a3:41:1b:97:db:dd:06:d4:9f:
da:ec:a1:f3:88:8a:f9:8a:8b:4a:29:15:8d:e5:81:
fd:e1:c8:80:b3:7b:92:22:38:f2:ea:1b:9c:78:af:
da:6b:ab:0b:8a:a7:24:9d:a9:75:e2:b7:1d:60:76:
16:9e:5f:54:3b:85:b2:6c:6e:6f:c7:51:d8:fd:c4:
61:fb:dd:e7:be:e0:4a:23:f9:42:5a:b6:1e:fc:f5:
49:6e:2e:25:04:e4:4d:e5:e9:cd:36:0d:e6:22:a8:
e5:ca:e7:57:af:41:22:fb:ca:b5:b7:3e:db:52:31:
1f:82:27:9e:8c:a9:49:37:ba:2b:a7:6c:a0:9a:bf:
94:4f:a6:8d:87:ba:e2:02:44:bf:33:26:85:24:f8:
71:a3:5e:77:b3:61:2a:51:2d:69:43:0f:85:3d:1e:
45:e6:8e:4d:4d:59:aa:f5:cb:5c:ec:91:8b:4c:5e:
23:1c:39:8d:76:25:10:46:e1:f2:e0:88:16:e4:ab:
b4:29:80:5e:2f:82:40:44:d4:c8:20:9a:72:7a:eb:
26:93:36:dd:e3:b2:88:38:5f:27:d7:ea:8d:4a:6c:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:75:EF:A4:4C:2B:E5:83:27:FE:2E:CC:2D:36:F7:C3:75:12:7D:8B
X509v3 Authority Key Identifier:
keyid:45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:d8:bb:cc:3f:9b:fd:82:67:bf:74:b4:a2:65:69:94:45:10:
4a:ba:ef:c2:e0:b9:d0:78:bc:f4:0b:b5:9c:e7:4c:95:ce:c7:
e6:50:2a:4d:1d:44:a8:70:c7:a5:6b:50:e9:f8:95:8e:93:12:
64:6d:23:84:2c:6c:0c:56:d2:cd:33:a7:90:10:b2:b8:ae:58:
9f:3d:e6:3d:1b:43:72:08:0d:78:c6:4d:19:de:54:48:c4:a1:
9c:07:76:8a:19:98:9f:a4:d9:ca:0a:1c:a0:e4:a8:84:a7:f5:
c3:d9:8d:57:56:96:cf:0a:69:5e:f6:b2:71:42:d3:d3:26:e7:
2f:ca:e5:87:6a:34:b1:32:37:df:46:49:d1:35:a8:74:61:69:
90:7d:1c:38:1e:fa:94:a8:6e:d0:b8:34:61:02:5b:4c:97:90:
62:f8:4d:02:d8:e0:c9:97:3f:21:53:0a:4c:73:51:cd:8a:cc:
fc:e1:a4:5d:1c:2a:ac:c7:c6:6c:5c:ee:fa:11:41:86:17:95:
9c:02:0b:f3:aa:40:5e:ce:c7:3d:2c:e9:0c:9c:ec:62:b7:9e:
46:90:a4:42:ce:6c:93:5f:4d:b7:94:ae:d3:55:05:00:da:2a:
9d:cb:04:43:53:7a:e8:56:81:87:89:0d:23:d6:cb:6c:35:db:
64:4c:44:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:52 2026 by rpki-client