Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: s7zjSBvR0lQt2uCKCVADBhfGPOaP5Lmddt9vnPgnmIY=
Subject key identifier: 8E:86:B8:38:4A:C4:04:7B:51:C8:16:ED:44:13:2A:D9:44:5D:49:11
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 01A0D53987EAAA25E4376610F3A32A003E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 0EAB
Signing time: Thu 24 Sep 2026 21:01:52 +0000
Manifest this update: Thu 24 Sep 2026 21:01:52 +0000
Manifest next update: Fri 25 Sep 2026 21:01:52 +0000
Files and hashes: 1: 1JtyFjGHKOjB6E5ymFRYHo0Cjno.roa (hash: makKU1K/a9OvfPTgKGZKj9kwQNZtoAlnHOJ1Bnu95GE=)
2: jmBPCb9DTm9fzSzAZ1_mQpVIr-k.roa (hash: FekyEXt0eMF+S2nBvz+51hHLK6v+L5cr1WGH2ZOcpgs=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: qQDSAaicepo9dIp5yn+swsHyoN+VoWFI8XBfiv+YN2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:87:ea:aa:25:e4:37:66:10:f3:a3:2a:00:3e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Sep 24 21:01:52 2026 GMT
Not After : Sep 25 21:01:52 2026 GMT
Subject: CN=8e86b8384ac4047b51c816ed44132ad9445d4911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c0:bd:32:ec:8a:98:4f:78:02:07:d6:c5:45:
7f:5a:8e:d2:b1:9a:ed:53:22:65:c8:4f:09:c5:b4:
d1:03:3e:cc:af:96:06:df:03:28:1e:95:8f:49:35:
2d:4d:4f:dc:a5:d6:f4:06:ea:19:38:49:19:61:e5:
9a:c3:d5:78:1c:79:75:e4:c3:1c:3e:92:07:9a:ef:
8f:76:c3:3e:57:86:37:de:17:99:57:1b:ef:60:cf:
44:42:48:cf:86:86:32:e9:83:58:e5:34:82:51:0a:
e8:6d:09:1a:29:c3:bc:52:fa:98:57:cc:1d:a0:b8:
aa:07:84:e4:73:2b:98:d8:05:9a:5d:95:2b:bf:78:
82:12:91:7f:9d:e0:5a:44:0d:0d:44:0d:9b:c4:ff:
37:54:88:4d:c0:58:5c:db:c6:cb:f4:eb:88:f9:b5:
64:66:f3:b1:46:56:19:ac:c6:55:f0:6a:c5:3f:8d:
6c:4b:80:0d:1d:78:47:31:0a:8d:ff:ce:d2:09:2c:
3f:ea:75:5e:38:d2:fe:a2:a3:27:b6:99:c9:54:66:
e8:33:ff:04:f2:34:43:44:f0:9f:58:f1:ce:00:3c:
bc:78:7b:05:e7:3d:cb:ca:e1:a1:2b:5d:6d:73:eb:
f6:83:da:e0:ac:55:f1:15:dc:1d:a7:cb:b1:39:79:
76:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:86:B8:38:4A:C4:04:7B:51:C8:16:ED:44:13:2A:D9:44:5D:49:11
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f4:71:cc:be:f0:d7:11:d8:ec:b5:1f:68:6c:e6:0d:83:16:
c1:25:b8:51:73:76:a0:e0:67:26:91:11:1d:1c:57:6d:67:f6:
9c:dd:b7:19:5d:91:d4:11:4c:e7:fd:08:f9:a7:75:d4:56:ed:
7d:95:36:87:77:46:86:a0:4f:72:89:dc:6f:c9:ab:85:ac:b9:
2e:a1:11:01:ef:30:19:bf:b1:02:27:b0:c2:99:34:dd:61:ad:
2a:09:92:69:c2:b3:f8:4d:61:da:8d:07:b9:66:55:9f:4e:c8:
70:e9:77:9a:83:53:45:83:e4:bb:c3:37:66:ce:80:d4:d9:e1:
d6:45:ba:8f:84:d8:90:22:d9:1d:5e:35:b0:b7:fe:63:5b:a1:
2b:5b:dc:e1:ad:d0:85:23:a0:d5:6c:aa:90:fd:5e:fd:d2:04:
32:2a:e8:ef:6d:b0:34:f8:0b:b5:7c:f1:ad:72:fe:1d:a7:bc:
7e:ae:20:d7:8e:37:31:c1:f2:b5:e2:b3:35:b3:5b:03:bc:35:
fa:f1:25:5a:dc:e6:3a:5b:a3:70:cb:33:1a:a1:66:c6:03:f3:
8f:3f:8c:34:89:36:db:ac:34:93:16:ff:aa:1a:72:38:7d:e4:
31:a6:f4:a2:80:04:2b:a3:b5:9b:c6:b5:f1:32:6c:32:3a:46:
bc:cc:a6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:48:02 2026 by rpki-client