Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: USLxyxJhua15vajECWtglpxB7elE+3DhPsXC6lhHkuQ=
Subject key identifier: 3A:30:ED:D9:B6:60:11:69:3D:E0:F1:46:BD:2E:DF:C2:41:90:3D:18
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 019D28BBD2F5FB129D26790F04121FE2EC11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 0CC4
Signing time: Thu 26 Mar 2026 06:01:31 +0000
Manifest this update: Thu 26 Mar 2026 06:01:31 +0000
Manifest next update: Fri 27 Mar 2026 06:01:31 +0000
Files and hashes: 1: 1JtyFjGHKOjB6E5ymFRYHo0Cjno.roa (hash: makKU1K/a9OvfPTgKGZKj9kwQNZtoAlnHOJ1Bnu95GE=)
2: jmBPCb9DTm9fzSzAZ1_mQpVIr-k.roa (hash: FekyEXt0eMF+S2nBvz+51hHLK6v+L5cr1WGH2ZOcpgs=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: esW0pC78FbueU8wwRhK0UAiw0LisEckb+oUYesAaDvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:d2:f5:fb:12:9d:26:79:0f:04:12:1f:e2:ec:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Mar 26 06:01:31 2026 GMT
Not After : Mar 27 06:01:31 2026 GMT
Subject: CN=3a30edd9b66011693de0f146bd2edfc241903d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:df:c9:12:1a:0e:e3:c6:ca:22:ee:86:2d:
7e:81:09:16:cf:f6:f9:6e:7e:8f:0a:e9:1e:ce:63:
76:8c:2c:9f:df:5e:86:32:c3:14:c7:6d:3a:d3:78:
34:9f:a3:5a:92:4a:61:86:91:54:6c:a7:17:01:fc:
d8:51:ec:d1:9e:4c:b7:6a:45:15:46:e9:09:69:9c:
fa:f2:09:b3:7e:a3:3b:86:22:92:54:5e:23:9f:c5:
32:cd:db:16:5c:94:2f:ad:dd:32:ad:c2:26:c2:03:
d6:61:07:0b:ed:7a:5a:0b:9c:13:96:33:58:05:c2:
63:0b:46:45:d0:48:96:85:e2:7f:be:2b:dc:da:35:
10:e1:27:59:58:92:87:7c:cd:42:03:8b:ed:9e:ba:
e6:9c:23:b4:22:48:30:27:c8:98:2a:b0:b0:ff:bf:
04:e2:c2:0f:12:c4:6e:ba:a0:9f:cc:f5:d7:91:8a:
28:e3:e3:11:65:ac:fb:02:79:8d:8e:42:72:19:b6:
fe:1b:cf:7f:c4:5f:6d:44:7a:3b:9f:26:93:61:b5:
6f:64:a7:b3:c6:4d:5a:e0:e3:7d:bb:8d:a1:7c:86:
80:bc:b6:af:5c:d7:bd:6b:b3:9d:9e:71:96:06:52:
a8:be:81:36:1d:44:96:6d:a7:96:19:2c:71:80:6f:
27:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:30:ED:D9:B6:60:11:69:3D:E0:F1:46:BD:2E:DF:C2:41:90:3D:18
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:82:83:d9:14:2f:a0:86:a9:86:84:5a:3c:5a:30:6a:ca:24:
0c:e1:60:1e:fd:5e:33:99:cc:24:f3:0e:3f:70:b5:da:01:3b:
cd:8e:61:12:1d:1d:cc:f0:e8:6e:d8:92:0d:f1:98:53:a3:b4:
68:f6:58:dd:d4:3b:20:5a:0c:85:20:92:9a:7a:59:c3:c1:e0:
53:58:28:45:fb:0f:12:af:58:10:5e:7e:29:6a:2d:a9:d5:3a:
b1:af:02:ce:89:d5:98:a3:e3:e2:4a:f9:57:44:6a:e5:16:4f:
0f:29:77:c7:91:74:fc:c3:f2:27:0d:ea:44:51:00:4b:51:7f:
36:8d:74:95:d8:e1:1f:a2:2e:6c:70:a6:b4:67:eb:1e:74:bf:
1c:7a:7a:9a:b9:20:16:2d:f9:2e:aa:8f:1e:55:7f:bd:80:e1:
74:38:3e:08:1e:33:83:15:3a:0b:c0:12:b7:1b:92:3c:c9:a9:
42:7b:6e:7c:ae:d1:d5:9f:cf:7d:97:17:04:19:88:fa:fd:2f:
b1:1f:e8:b9:b6:26:7e:6d:ee:c5:67:92:bb:ca:48:d6:5e:71:
d3:ab:2b:6e:82:14:d1:fd:84:e0:b8:bc:d8:0f:18:38:45:45:
ac:af:01:11:aa:23:a5:56:9e:85:1d:b0:fe:40:0d:4c:66:d2:
8f:70:63:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:02 2026 by rpki-client