Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: +puenrP23ooyaSCoh829bE9tGE4AjAgmNYrgBkBJFVI=
Subject key identifier: 91:0B:D3:76:AC:6A:BB:FB:CF:26:6D:01:C5:82:62:2C:01:C9:FA:57
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 019E1DFE9D79127C3334BBBFD95D956CC5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 0D43
Signing time: Tue 12 May 2026 21:01:26 +0000
Manifest this update: Tue 12 May 2026 21:01:26 +0000
Manifest next update: Wed 13 May 2026 21:01:26 +0000
Files and hashes: 1: 1JtyFjGHKOjB6E5ymFRYHo0Cjno.roa (hash: makKU1K/a9OvfPTgKGZKj9kwQNZtoAlnHOJ1Bnu95GE=)
2: jmBPCb9DTm9fzSzAZ1_mQpVIr-k.roa (hash: FekyEXt0eMF+S2nBvz+51hHLK6v+L5cr1WGH2ZOcpgs=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: vSgn7cHs5AIpdB1+d8o9D88G5SATCjZtTBDw5mL3UKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:9d:79:12:7c:33:34:bb:bf:d9:5d:95:6c:c5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: May 12 21:01:26 2026 GMT
Not After : May 13 21:01:26 2026 GMT
Subject: CN=910bd376ac6abbfbcf266d01c582622c01c9fa57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5d:fa:da:98:07:4c:e8:7d:86:72:03:54:ad:
64:63:ed:a6:e5:86:21:68:23:21:72:14:67:d2:70:
b6:07:65:39:e7:5f:bb:95:c4:70:cc:6d:ad:1d:40:
16:25:8c:a8:45:e8:a6:6a:9b:e8:64:c3:ad:28:9d:
a9:d9:23:fe:db:1b:49:94:ff:ca:e3:33:c1:d1:83:
71:98:74:12:d4:66:c1:4b:0d:64:33:ba:e2:66:d4:
d5:b0:c9:9f:d8:4a:39:c3:31:28:4b:2f:03:10:93:
2f:33:74:6d:8a:2b:b3:bf:44:36:35:87:8a:4d:70:
51:b5:07:14:4a:54:27:1e:d2:47:e9:29:83:5a:52:
68:f9:3d:03:63:7b:29:e4:6f:eb:ba:e0:41:cf:97:
ee:ae:32:7b:87:aa:39:ae:cf:9e:7c:00:e6:67:5b:
93:55:f1:1a:3d:6e:11:15:07:c7:3f:e8:19:a5:16:
79:23:1f:54:8f:52:c0:11:11:db:41:0f:8d:9c:43:
bd:00:82:7e:2f:74:45:17:18:77:b3:27:e0:c1:62:
03:27:24:a3:df:20:02:ea:b8:03:13:ca:47:b2:37:
ea:e6:fc:2b:e7:f5:e9:6e:78:c6:b4:82:a6:c0:97:
2e:f8:1d:42:4f:af:a3:d6:48:74:2c:ec:3e:99:fb:
47:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0B:D3:76:AC:6A:BB:FB:CF:26:6D:01:C5:82:62:2C:01:C9:FA:57
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:41:17:87:fc:c6:7b:90:20:2e:b8:f0:e7:58:12:48:80:22:
9d:ed:b9:5b:b6:3a:c2:c7:44:f3:69:4c:ce:81:18:6d:12:8e:
20:3b:b0:fb:c2:70:46:82:80:40:58:c6:56:a8:c1:2f:04:fb:
53:9f:be:7b:fa:9f:31:73:92:5d:e1:e7:ee:58:41:b8:88:30:
f5:b8:65:4e:db:83:f2:91:e2:69:32:6f:c4:0a:a3:56:76:67:
3e:4b:85:c4:da:2f:1f:46:c7:91:12:8d:e3:34:fa:27:21:5d:
d7:89:86:cd:84:90:cd:13:8c:ae:10:fb:d4:73:f0:85:15:40:
09:82:b2:4f:e0:39:7e:8e:7d:25:40:e4:91:46:cf:0f:5c:29:
26:bc:ed:f6:98:8c:46:e2:f7:fc:f0:07:3b:c6:c9:57:5d:f1:
99:c6:df:88:41:37:3f:4b:39:3a:30:a3:8a:02:02:8b:fb:dd:
32:e1:e4:0f:ea:00:5d:de:30:fe:4a:3e:14:94:ef:35:36:bf:
69:e5:65:57:f8:16:3f:b5:fd:3c:cc:27:53:98:2a:3f:f0:5e:
6f:02:30:ee:0d:47:c0:4a:62:47:a6:ad:e6:3b:9c:6e:a2:2d:
2a:d2:0b:5c:33:b0:c9:2a:e4:37:8d:44:66:b1:6c:b6:d6:8c:
8b:f5:e0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:43:11 2026 by rpki-client