Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
File: RtlEd8i1TRLsiz97bZrnjlELI9g.mft (raw, json)
Hash identifier: aB+blp3iKJpYVpy1m3DKN9zkzi+3BB8PhSPPX0LtUZo=
Subject key identifier: 0B:4C:D6:50:80:63:E4:D4:CB:75:0F:11:F0:47:EC:30:86:7D:E2:DF
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 01A1DBDD1E7F343A78E232D5C2441A6F1F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
Manifest number: 1AFF
Signing time: Sat 14 Nov 2026 21:01:03 +0000
Manifest this update: Sat 14 Nov 2026 21:01:03 +0000
Manifest next update: Sun 15 Nov 2026 21:01:03 +0000
Files and hashes: 1: 3CbB-gU8Fkh_ywYdbqAJCeJYWoE.roa (hash: iBZA24ojW5yz7VpoZ8gZBo7ejClO8z0JYYTLlgfEF4Q=)
2: 6YdcLpvAvGqPmORwUs3mXgyru0I.roa (hash: f6+1ag2deIbRbwBvJfki80bdL6WSD0/GZDdKs+5X1zQ=)
3: 6oO-6-1bcA6Z8QJD_0vrHo8wkko.roa (hash: h1cCLwhcJyDdaYQ6GZavGUNAZX6iLc3GmTH9bJpo39Y=)
4: DbBkcBKTLwUVIRYiZoMGLtLABqc.roa (hash: nYJ7uYsvXEIvKqfy6utLXX5lQJgID0iu/HQASNofn+k=)
5: RtlEd8i1TRLsiz97bZrnjlELI9g.crl (hash: 7Gza1TCCS/+rKek150IOWhK80n6MGblFS/66qHlQrpY=)
6: XC8Kc5mTk7fezpKSbjB-kbqsKvo.roa (hash: M3kIgDZZDu2U8kGSDYDggwFey+teEHBCeu/XLvDao3w=)
7: aRjoRHYk96BPNcuGbIrUIzq27HA.roa (hash: KkiP9K2kxxfIp28kXz7yaTm3Coq/66FEfzu8ep61Ons=)
8: xGlaSWAs_nGok3RsMj09mCdZA-c.roa (hash: PlUTSJXO25CuBLHkT82BadK7IIiVT9bby4rlA1xhZlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:dd:1e:7f:34:3a:78:e2:32:d5:c2:44:1a:6f:1f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Nov 14 21:01:03 2026 GMT
Not After : Nov 15 21:01:03 2026 GMT
Subject: CN=0b4cd6508063e4d4cb750f11f047ec30867de2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:41:da:fa:73:cd:99:47:ed:45:fd:e9:2f:
d7:60:c0:9c:91:2c:f7:90:57:42:c9:ab:9f:66:50:
e0:c8:cb:7a:78:0d:cc:b8:90:96:a1:da:49:24:f1:
d2:54:91:d5:d4:76:1d:f3:70:a5:15:90:3a:8a:b6:
22:f6:4f:e3:f7:c1:a7:d2:59:0b:5f:61:9a:8d:d9:
0e:b0:72:ac:01:52:3e:00:d6:21:94:58:2a:5b:15:
69:de:05:77:f4:6b:9c:34:b6:0f:64:da:78:28:e2:
e2:90:b3:3d:85:7f:dd:3f:13:69:de:42:61:50:89:
c0:34:fa:d6:42:12:a4:06:f1:fb:1c:d9:99:eb:eb:
19:8a:52:a4:0b:4c:14:66:00:84:d0:1b:51:f9:3f:
ba:2e:b3:32:c1:a7:e1:c3:92:5a:b7:cc:45:ef:27:
5b:3c:1a:9d:f8:0a:93:22:d9:b1:38:b2:36:8a:1a:
16:f4:01:13:aa:60:a5:17:b5:f2:ba:b6:59:88:3b:
96:d3:7e:22:65:42:64:71:a4:25:8e:bd:cf:8c:fa:
fd:6a:7b:c9:5e:6b:20:3a:2e:29:eb:e4:69:a6:03:
6e:75:cc:eb:24:b3:3a:36:aa:0a:eb:7b:63:9e:08:
6d:8f:de:dc:18:64:b7:4e:40:dc:23:64:8c:fc:73:
bc:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4C:D6:50:80:63:E4:D4:CB:75:0F:11:F0:47:EC:30:86:7D:E2:DF
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:22:4a:37:d9:28:74:e7:5c:8e:ae:5f:4d:b1:5e:e3:25:6b:
de:e9:81:08:49:f8:e8:15:52:ad:7c:73:15:e9:9a:30:0a:c0:
bd:14:b4:18:2e:f3:0f:9c:45:42:c7:82:b1:cc:63:2e:4d:ab:
3a:6b:aa:b5:ee:c8:31:45:72:9a:82:d8:6f:24:61:65:c6:6a:
35:05:28:49:b8:99:5f:c3:29:c3:71:21:84:d9:c1:e4:41:94:
13:bc:39:c6:bc:83:1e:23:e3:39:ab:d0:07:9a:15:5b:c3:eb:
5c:85:1a:7a:c3:7d:f3:a3:8d:47:72:f2:47:4f:83:ef:3a:fc:
8e:a5:2a:1d:58:84:d8:75:74:f8:11:0b:7a:fb:08:45:d2:c3:
8f:70:ab:fe:2d:c1:5d:e8:69:d5:0a:f9:ed:65:4f:f7:1b:5d:
d4:2b:81:35:e3:37:67:c2:3e:d6:10:1b:94:bf:6f:dd:f0:50:
d3:b9:c4:84:eb:35:e2:6d:eb:f2:5e:64:df:c6:79:c9:86:c4:
30:ee:cb:1e:f8:c1:30:94:36:ab:ff:69:5e:2f:b7:c3:59:e1:
d0:40:24:76:a5:32:64:cf:46:ae:38:17:a5:cb:1f:36:74:49:
b0:9e:b9:e7:dd:fa:f1:f3:ac:a0:8d:10:9f:30:89:6a:fd:c6:
14:f8:45:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:41:45 2026 by rpki-client