Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
File: RtlEd8i1TRLsiz97bZrnjlELI9g.mft (raw, json)
Hash identifier: JJ2BIjGLlQsdWDepihFzSI0HLRFhf7XFUoy+OliFip8=
Subject key identifier: 5F:7F:25:B9:81:B2:17:D1:B7:AF:64:1F:BB:15:30:94:59:7F:C8:BF
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 01A0E8F6D1A4CB5DC93ED7043F2DB0DB74F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
Manifest number: 1A7C
Signing time: Mon 28 Sep 2026 17:01:24 +0000
Manifest this update: Mon 28 Sep 2026 17:01:24 +0000
Manifest next update: Tue 29 Sep 2026 17:01:24 +0000
Files and hashes: 1: 3CbB-gU8Fkh_ywYdbqAJCeJYWoE.roa (hash: iBZA24ojW5yz7VpoZ8gZBo7ejClO8z0JYYTLlgfEF4Q=)
2: DbBkcBKTLwUVIRYiZoMGLtLABqc.roa (hash: nYJ7uYsvXEIvKqfy6utLXX5lQJgID0iu/HQASNofn+k=)
3: RtlEd8i1TRLsiz97bZrnjlELI9g.crl (hash: xWwS80ez/hkUpsjbkJAM/+XUqzJYqviv+LOX155mFhs=)
4: az2jY3YN4D6D2MvlhZ-zn-xDmu0.roa (hash: +lGiPrvf5TxpFcxqUZF3SBh23OcMUHcyDOksGRIXF50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:d1:a4:cb:5d:c9:3e:d7:04:3f:2d:b0:db:74:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Sep 28 17:01:24 2026 GMT
Not After : Sep 29 17:01:24 2026 GMT
Subject: CN=5f7f25b981b217d1b7af641fbb153094597fc8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ee:a1:60:83:bf:c4:0f:6c:62:54:2b:9d:ca:
17:8f:69:38:86:bf:66:d5:ba:72:77:8c:d8:02:69:
ab:88:55:ab:5c:ff:7c:53:74:74:69:93:a3:d6:d8:
9b:4a:24:a9:32:02:88:db:5f:6d:91:70:90:c1:df:
43:39:63:44:bd:6c:4f:91:26:b1:95:9f:5d:13:95:
4b:69:f4:a0:20:d6:ed:f5:37:18:c5:47:0e:a4:d8:
cf:0c:ff:55:9b:e7:86:93:8c:aa:2a:93:88:15:42:
82:f6:c6:57:77:5a:3c:16:15:44:2d:58:88:4f:ec:
21:7f:df:03:a7:1f:83:80:b9:5f:36:c2:00:41:25:
f0:b7:70:02:58:a0:ea:c7:5c:84:f3:4b:53:df:2b:
26:42:57:ac:1e:d4:9e:40:6a:62:83:0d:07:a5:b4:
0a:72:7d:80:77:03:37:aa:83:98:2e:d3:4e:ab:0b:
ef:e3:56:70:58:f6:c9:c1:fc:82:35:99:4a:d7:98:
77:0b:3a:5d:a2:3b:5c:18:b8:07:f8:2b:4d:2a:59:
6c:88:eb:05:3f:9c:9e:df:26:eb:0f:70:f9:9f:5d:
5a:91:6e:42:6e:d2:9e:ca:d4:83:c3:06:91:ea:43:
c9:3b:55:23:1b:1b:39:97:d7:ff:4e:2c:59:f6:92:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:7F:25:B9:81:B2:17:D1:B7:AF:64:1F:BB:15:30:94:59:7F:C8:BF
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3e:1b:45:08:a8:0d:10:aa:91:c8:a7:cd:71:36:ed:a5:bf:
c9:39:f7:be:b2:4e:84:c6:57:df:6b:9b:0e:96:9e:d0:e4:50:
70:32:92:09:9e:33:3b:86:ce:2c:79:b7:76:5d:fc:f3:d8:fb:
40:cb:b9:7b:75:1d:30:5d:03:f7:f4:0b:ef:1f:dd:37:be:36:
f5:a0:e8:62:51:2a:3f:61:ea:08:b8:92:50:eb:e7:01:4f:c5:
62:84:d9:0f:b1:f3:a1:3b:91:bd:66:5d:dd:bd:94:7f:5c:12:
d9:8f:b8:7d:5e:bc:f1:a7:58:ef:e0:af:8d:11:cc:45:49:9f:
26:6e:af:a4:d2:ad:69:0d:ec:8f:58:bc:4f:38:b2:05:b2:2d:
e1:30:d0:f1:fa:0f:c9:83:06:18:a1:0e:71:c5:70:84:41:f0:
fa:dd:6f:1f:2b:3f:de:39:4d:39:38:64:f6:54:2c:f1:a8:df:
4e:d4:53:9b:5e:62:6c:af:b6:ad:41:35:24:7c:1c:51:37:4a:
8f:fb:85:db:dd:82:38:52:a4:11:fc:17:fb:ae:fe:d8:ae:0f:
02:f9:2b:d2:5a:a7:c8:fa:5b:22:0d:f6:b8:32:ba:23:5f:4f:
05:30:c3:f0:a2:60:2b:bc:f6:58:d0:c6:08:73:fb:6a:3a:5b:
49:05:c8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:30:04 2026 by rpki-client