Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: /Q6ZgbGYiMVckrNQfuek713RGLAjUKk26j338dMzJuM=
Subject key identifier: B4:84:AB:2A:8B:C5:9D:87:5D:FD:C5:D9:E3:02:40:6B:97:B3:C3:C7
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 01A0B5E4C6844568CBED62F720527C331489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 19B2
Signing time: Fri 18 Sep 2026 19:01:04 +0000
Manifest this update: Fri 18 Sep 2026 19:01:04 +0000
Manifest next update: Sat 19 Sep 2026 19:01:04 +0000
Files and hashes: 1: MYb8VAECnaCGoqYg036Ww2frkMM.roa (hash: JPX2kf+QL+uvDn6HBV8cAFTbeXUIBEUW2fYqImCC42M=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: X2ZLB2f1fi5+5OF7DO6PgolmjEOWX3xeedIG1STUqcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:e4:c6:84:45:68:cb:ed:62:f7:20:52:7c:33:14:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Sep 18 19:01:04 2026 GMT
Not After : Sep 19 19:01:04 2026 GMT
Subject: CN=b484ab2a8bc59d875dfdc5d9e302406b97b3c3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:11:89:3f:fa:57:0c:2b:f6:3f:2d:b7:85:
25:a5:86:80:f4:00:d0:35:e4:82:7a:ae:f7:25:9b:
0c:7d:aa:12:c3:68:42:d5:55:8a:12:af:75:c6:06:
44:7c:0a:ef:ae:83:39:4f:93:93:17:52:b3:a9:ef:
69:ca:50:76:75:43:76:3c:da:17:e0:7d:4e:1f:b8:
93:b5:c4:a6:7b:df:21:d6:e5:ff:18:66:1f:2e:9d:
e1:4f:c2:a9:61:cf:b2:01:9a:b7:db:16:a7:63:60:
c5:09:df:db:df:0e:77:3c:73:fa:da:d7:72:6f:6f:
2e:9c:fd:e7:dd:d4:18:06:c4:9c:09:42:e3:e1:8a:
d4:19:53:9e:cb:04:ce:17:79:ec:24:6a:b1:61:c8:
a7:c9:39:ed:1f:ce:b1:01:c8:9e:97:db:24:9f:53:
82:ad:61:f6:1e:ee:8e:b4:b2:39:18:b1:37:3e:b9:
81:bd:2e:43:68:86:65:29:8e:76:9e:bc:24:68:b6:
d9:cc:d6:ac:aa:f7:f5:9a:83:3b:06:3c:57:1a:1b:
66:1d:b5:a6:88:aa:9d:b2:70:6e:ea:8b:9f:66:38:
23:e9:38:82:bb:f8:fc:0a:87:57:df:ee:be:65:f5:
d2:96:61:d4:55:d2:0e:23:d0:eb:a3:7e:5a:ff:6c:
4f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:84:AB:2A:8B:C5:9D:87:5D:FD:C5:D9:E3:02:40:6B:97:B3:C3:C7
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:98:4f:d5:48:c9:e5:72:7e:f9:18:c9:b5:fc:b2:92:9e:a4:
0d:7f:2f:63:d2:fb:43:36:b2:ad:16:82:e2:21:f0:9d:cb:c7:
41:bb:40:ff:1f:22:83:d1:1b:1e:1d:e3:da:1a:6d:2d:d4:61:
fc:5f:7d:66:4f:96:df:c2:0f:a9:5c:be:8c:a6:6f:4d:50:1c:
69:56:f0:00:be:73:0c:95:24:b4:3b:31:87:b9:99:d8:5f:20:
ff:6c:c8:aa:78:39:28:f4:1a:90:27:33:5a:2b:56:78:10:14:
6f:09:9b:3b:82:9b:d8:99:df:4f:5d:a3:af:a1:05:80:57:1e:
45:c6:25:28:05:d9:db:bb:8b:94:20:f2:9f:f4:12:e9:f5:51:
8e:97:26:da:85:ce:42:84:0c:a2:68:1a:3c:65:9a:7f:8f:df:
4f:07:db:59:6d:52:53:f9:33:48:24:84:87:34:4d:42:ac:4a:
bd:6c:41:e6:4e:f4:2a:ea:7f:12:0e:b7:36:32:6b:3d:6c:89:
81:3a:47:17:ad:d7:a5:c6:15:d0:55:e8:5b:b4:02:e9:a7:78:
23:83:6f:0a:ea:a4:39:6a:25:2d:12:65:91:9e:82:84:51:50:
84:72:ff:bf:4d:de:0f:2b:93:bc:98:86:09:04:aa:e1:79:a7:
56:96:3c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 05:09:33 2026 by rpki-client