
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
File: rtyPMnpGGWTAqHqceAlAHFfIbUE.mft (raw, json)
Hash identifier: Zp+qflX4r6GrOBURhrT2Fye6yFQSLdme7hzy0azcpDs=
Subject key identifier: BE:0A:8B:A4:D3:91:5B:46:6E:FF:68:2C:0D:0A:C0:67:9A:C2:56:49
Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Certificate issuer: /CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Certificate serial: 01A026572F5C971D472B568D3CF4702C2D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
Manifest number: 1A13
Signing time: Fri 21 Aug 2026 22:00:42 +0000
Manifest this update: Fri 21 Aug 2026 22:00:42 +0000
Manifest next update: Sat 22 Aug 2026 22:00:42 +0000
Files and hashes: 1: r9eaNKOzK8PPUei6RdKb9LkqhTI.roa (hash: +R7LC8z04wYSjkyWe1Pk5HhKfodwp2zyyiW39xvrzog=)
2: rtyPMnpGGWTAqHqceAlAHFfIbUE.crl (hash: pRSI9t2j9vyrBnEbgUhP2QlZpxP4QdtMsSkd9ItRZKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:57:2f:5c:97:1d:47:2b:56:8d:3c:f4:70:2c:2d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Validity
Not Before: Aug 21 22:00:42 2026 GMT
Not After : Aug 22 22:00:42 2026 GMT
Subject: CN=be0a8ba4d3915b466eff682c0d0ac0679ac25649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:16:d0:f1:b8:51:51:eb:32:db:33:6c:6c:b4:
b8:9e:b5:ff:02:80:b1:7f:a9:f4:2c:14:c3:73:15:
8d:f2:3f:79:8a:55:d0:67:02:dd:29:57:52:43:7a:
5f:4f:f5:e1:66:91:d9:77:ff:f4:e6:17:15:b0:ae:
92:22:e6:5b:1b:84:10:6e:be:a2:e7:e1:94:78:19:
16:42:e9:ae:e3:19:3e:b1:87:5a:04:a9:61:53:11:
9b:a6:50:3c:c3:e1:a8:16:93:99:30:b2:5b:6d:71:
7f:d1:da:52:73:9b:26:6f:15:7d:2c:54:f2:6e:65:
1b:de:31:c9:31:fd:27:1c:af:b7:d3:39:61:04:1b:
27:c9:59:6e:37:ce:9c:13:99:41:93:8f:55:d3:4f:
22:cb:51:07:0d:1c:44:cd:71:74:e4:9c:1a:71:7d:
37:fa:d0:bc:7c:12:cd:cc:ed:e4:e4:29:75:6b:85:
df:39:6f:b9:bf:72:7e:ec:fb:b8:8d:75:03:b1:12:
19:51:e0:54:0a:41:d7:28:7e:2a:78:6d:27:7b:b0:
b1:7c:aa:ef:3e:8b:09:06:0d:7e:d5:b1:e5:10:11:
0f:22:1c:4a:5e:ae:0b:60:d3:df:8a:51:8b:5d:41:
05:9c:5f:72:35:bd:63:5e:4e:02:ce:1a:20:d7:71:
0b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0A:8B:A4:D3:91:5B:46:6E:FF:68:2C:0D:0A:C0:67:9A:C2:56:49
X509v3 Authority Key Identifier:
keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:3b:35:4e:c4:a5:b0:41:c5:20:6b:98:5f:be:16:56:2e:09:
5d:64:db:5d:eb:3d:15:bd:cd:8a:aa:cd:1b:46:cf:70:07:8c:
36:87:a2:46:bb:f1:14:24:d0:fb:94:85:3e:0e:5d:f1:89:2a:
12:dd:7e:35:c4:34:6c:9f:5c:72:1f:84:c9:31:4b:43:49:ae:
96:d1:58:ce:50:2a:17:9f:20:93:3c:f4:5c:21:c9:72:64:62:
66:20:76:98:dc:17:60:44:10:d9:23:e7:1a:3b:00:e9:70:00:
43:12:ee:0b:0f:22:16:df:0c:d6:1c:0b:9f:9e:e0:61:20:7c:
d8:4f:74:bb:69:d9:4b:d8:9b:99:69:20:e4:af:09:35:53:78:
b2:ab:74:1c:8f:e1:6d:ba:c9:96:20:26:4f:92:6f:41:ce:63:
3e:68:22:91:94:19:f0:34:c7:4f:75:ae:17:75:10:e2:f5:21:
77:da:92:01:88:fb:24:ae:4e:78:c9:b2:e7:bd:92:6f:df:48:
26:47:4f:41:94:00:fb:b2:1a:95:c3:29:c4:28:ee:59:c0:7e:
96:25:6e:1a:4c:4f:48:df:a0:21:bc:67:45:c9:c3:8e:d4:96:
89:6b:32:77:65:6d:19:f7:c7:6e:6b:53:7b:e3:7b:06:33:c3:
b6:e7:0e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 07:08:25 2026 by rpki-client