Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: v7BwfkH6TnHOgYZvAnG+VxOThg2uwUoTV+cjiHnZuko=
Subject key identifier: 47:14:07:47:12:E1:C7:95:8B:8B:EE:4E:AE:A8:0B:BB:4C:22:10:F6
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 019D37C0F0D28EC134C81F0142D48AE00623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 17E3
Signing time: Sun 29 Mar 2026 04:01:24 +0000
Manifest this update: Sun 29 Mar 2026 04:01:24 +0000
Manifest next update: Mon 30 Mar 2026 04:01:24 +0000
Files and hashes: 1: MYb8VAECnaCGoqYg036Ww2frkMM.roa (hash: JPX2kf+QL+uvDn6HBV8cAFTbeXUIBEUW2fYqImCC42M=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: 5dis4Kn8OpmI9ChfRi5wH2dsOn6IMGx2QH6n1RvIUWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:f0:d2:8e:c1:34:c8:1f:01:42:d4:8a:e0:06:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Mar 29 04:01:24 2026 GMT
Not After : Mar 30 04:01:24 2026 GMT
Subject: CN=4714074712e1c7958b8bee4eaea80bbb4c2210f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:08:5b:39:17:58:89:e5:17:39:9b:07:0a:ae:
0f:71:ae:84:e0:fd:3b:58:65:db:40:92:0c:e4:fd:
f3:2b:4f:1f:ae:91:c6:d4:f3:66:cb:f3:45:db:a8:
7f:59:6d:60:9d:99:7b:03:87:ca:32:25:45:30:57:
15:f4:fe:42:20:9e:c1:57:c4:dc:b5:91:42:b6:c9:
03:d0:da:a8:8d:91:7c:c9:a8:a5:de:f6:7e:f4:f1:
b3:73:71:03:42:09:8e:77:1e:fc:7d:19:95:b2:49:
ee:fd:de:b8:40:15:70:98:aa:62:6c:fc:2f:01:85:
03:36:ac:fa:dc:7f:df:6d:bb:96:61:c0:07:65:8c:
0d:da:99:fe:b5:bd:78:82:85:b1:8b:00:7f:c2:73:
ab:9c:a0:c0:98:2e:a0:f2:20:e3:ec:b5:76:1a:31:
9c:a5:d9:96:77:10:19:6f:81:2a:ad:83:e9:f0:b4:
5a:7e:a1:54:12:9b:35:de:1a:af:8c:00:8f:21:14:
e4:43:41:3f:1b:92:ec:97:a0:cd:bf:59:80:5f:23:
c7:ec:de:a6:c3:f5:3d:7e:65:90:93:9a:de:0d:92:
eb:67:3d:12:34:ae:bc:e6:49:9d:39:14:ba:13:31:
d1:99:c1:c6:4a:14:8b:59:e7:32:c7:22:c3:8f:81:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:14:07:47:12:E1:C7:95:8B:8B:EE:4E:AE:A8:0B:BB:4C:22:10:F6
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b1:c3:02:e6:d5:b6:c1:d1:d5:c3:2c:9d:8c:6d:46:3c:04:
be:fd:f6:59:53:6c:9f:06:2e:9e:3c:bc:c7:4e:94:91:46:d3:
e2:b0:51:ae:81:61:a5:78:24:69:7a:05:08:e7:2a:fa:16:36:
b0:b5:e4:a5:08:a5:bc:fa:fc:1b:ef:de:17:7d:08:00:bf:26:
16:a0:ba:a8:64:8d:18:a1:6a:2e:29:1d:f9:49:3b:f8:ee:24:
b1:b0:32:81:9d:5f:67:fe:52:86:25:db:62:a5:82:86:47:d5:
3f:00:1b:78:db:2c:11:16:65:d7:fb:04:d2:1c:a7:54:7d:1e:
df:7e:d1:17:1f:f6:1c:cc:12:e1:19:02:4f:76:d9:09:f1:7c:
0c:62:fc:08:18:a7:06:1f:67:af:09:a9:e3:bc:c7:48:16:42:
ed:db:6a:89:d1:84:3e:6c:da:51:9d:12:a7:08:c7:24:0a:4d:
22:3f:1d:94:55:12:50:03:08:29:d7:10:3e:96:9b:15:82:9c:
a3:8a:07:16:27:f7:9c:82:59:f8:16:b4:63:24:ba:3d:36:c6:
1b:57:53:ee:33:f3:00:75:39:91:83:f1:20:91:f8:c4:8a:d4:
ec:3b:04:80:20:1d:d5:c6:09:8d:45:ae:44:5b:a7:d5:d2:03:
c2:5e:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:48:29 2026 by rpki-client