Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: 7nd3ks3/sKzue7vZSCf/AwicDjxIfmW4TarGNswwHtg=
Subject key identifier: 17:D6:0B:F5:72:F3:1E:C3:B1:6F:56:5A:30:1C:28:21:67:4B:93:18
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 019EE856DAB64FD050C890C766E18FB8AE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 18C3
Signing time: Sun 21 Jun 2026 04:01:06 +0000
Manifest this update: Sun 21 Jun 2026 04:01:06 +0000
Manifest next update: Mon 22 Jun 2026 04:01:06 +0000
Files and hashes: 1: MYb8VAECnaCGoqYg036Ww2frkMM.roa (hash: JPX2kf+QL+uvDn6HBV8cAFTbeXUIBEUW2fYqImCC42M=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: d7rkNlMMHoynYYWK2LfuWqcxGOIJJoP5WPhHuusnE8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:56:da:b6:4f:d0:50:c8:90:c7:66:e1:8f:b8:ae:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Jun 21 04:01:06 2026 GMT
Not After : Jun 22 04:01:06 2026 GMT
Subject: CN=17d60bf572f31ec3b16f565a301c2821674b9318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ba:45:fb:0c:bc:49:4a:ba:e0:6a:51:24:68:
f6:fe:dd:77:e2:88:19:2e:3b:be:78:82:41:57:52:
fd:37:91:c6:aa:29:1d:c3:a5:3c:c6:e8:f2:67:20:
f7:48:00:14:0f:21:55:ce:18:22:94:c0:58:00:e3:
17:87:0e:23:cb:f2:d3:3f:c6:95:60:0b:f8:c7:4f:
05:a3:7c:72:ad:a1:b9:25:58:f9:39:a4:18:65:4c:
b0:7e:dc:1e:b6:eb:ce:a0:2c:2f:39:20:75:80:13:
df:a4:74:66:14:cd:45:10:c7:df:50:dd:96:85:2a:
21:c6:d8:72:55:4b:e4:30:ad:97:a1:e2:35:5b:48:
89:08:58:7b:18:20:48:81:3d:59:b9:c9:19:89:fa:
97:75:ce:5d:6f:b0:00:cb:c0:2d:51:60:c9:fb:67:
c8:70:48:ef:45:7b:8e:5a:25:aa:d9:5b:40:2f:3c:
b2:a8:69:3c:15:9b:df:61:52:af:ea:0b:30:b6:bc:
ec:4d:83:5f:4c:33:85:bd:99:0a:44:2b:c0:82:7e:
c7:2a:3e:49:13:d3:23:3f:cb:55:df:24:be:fc:88:
d9:7d:fc:96:6b:11:c0:f6:d2:bc:fe:d0:95:38:0e:
b7:a3:42:5d:f6:87:ec:63:fa:63:23:83:ea:f3:00:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D6:0B:F5:72:F3:1E:C3:B1:6F:56:5A:30:1C:28:21:67:4B:93:18
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:4f:5a:06:74:04:58:44:68:e7:f4:ff:52:f9:db:32:6d:9e:
06:43:b7:2a:2b:21:e7:18:0c:59:d9:39:0d:62:07:32:27:11:
1e:14:c2:d0:48:40:69:0c:85:68:67:89:60:b9:36:bf:69:4d:
fc:b9:2c:0f:72:36:76:b2:c8:e1:33:f9:09:3a:4f:60:98:bc:
84:68:20:c9:fc:ce:4e:86:18:f5:f5:bb:e1:5b:18:81:83:1a:
04:20:dd:9d:9d:59:27:31:6c:4c:13:6d:c2:1f:d1:08:ea:71:
06:ac:f5:71:96:5f:d7:cd:c9:29:04:c0:67:42:f7:a8:79:a4:
32:b3:3e:c9:6e:6c:b8:ff:94:65:11:27:e2:9b:02:b5:65:56:
8d:b5:0e:0b:b1:65:ca:ff:3e:51:6e:1b:0a:92:3c:72:47:01:
61:a7:f3:01:04:a8:7e:c0:51:fe:90:5a:5b:e6:0e:f9:59:b4:
83:3d:90:82:64:44:4b:0f:85:f6:ba:33:d8:1d:10:3a:88:29:
09:d9:e8:96:83:a9:38:8c:6b:d4:39:6a:a3:23:15:10:c2:e8:
08:ab:82:54:a0:a3:f8:1e:c6:91:e2:0b:26:f9:36:4c:80:00:
27:0f:06:08:1d:38:8c:e3:34:c8:df:ae:4c:52:66:47:25:d6:
ea:b9:87:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 08:21:46 2026 by rpki-client