Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: AFghzywuSHWQPgDTF3srUqfxZryEKCNOoybOaqU3i6g=
Subject key identifier: DE:A4:17:3F:2A:38:EE:9F:13:79:0A:03:26:E2:CA:33:CA:1C:BC:E7
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 019D28BB4CEC51586C71D40574B5FCC2B966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 138A
Signing time: Thu 26 Mar 2026 06:00:56 +0000
Manifest this update: Thu 26 Mar 2026 06:00:56 +0000
Manifest next update: Fri 27 Mar 2026 06:00:56 +0000
Files and hashes: 1: 2SIXUZTGLSsuNmHnmH_XZgRCYVY.roa (hash: kuoWaUJI+dAA7ih84KRN5TqDkuF9bUAxQjQzkKOCjIc=)
2: 3xhOROtsWU6kcbRg-0eVsWv_Cf4.roa (hash: 5LTgCgWwER8eaf33nSzOpEaP32v0UF0hdAvBDa8TC70=)
3: KRctRzsS6WkYFQeNR_1yTG9YjP0.roa (hash: oB1FvlbACGWEHyhDswCez14XuSiwC0mCrxW2Q45DLmU=)
4: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: iFxYBO9w1502oQKhbpSSSxDFlkBID45MIuZ9JT1T98U=)
5: nayB3_rE3RntOJEk4e7i16Y7R3M.roa (hash: YijDZOJxEI25MjJmJqVvk74PVNuOr37g49vUulKscOg=)
6: oI0gNsAnUZaiiR1_JxvhZXrdyvc.roa (hash: PZhUlF96CrIiZt17nWZPHRO35kGXkmt9vTJKXgGorHc=)
7: qT0dlLpzpHG-UMlryrlwiaMMxcY.roa (hash: 9waKgS4/9SGo8HvqSDRZz0wIFy4U+cc/1Ys4XOOzmjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:4c:ec:51:58:6c:71:d4:05:74:b5:fc:c2:b9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Mar 26 06:00:56 2026 GMT
Not After : Mar 27 06:00:56 2026 GMT
Subject: CN=dea4173f2a38ee9f13790a0326e2ca33ca1cbce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:96:ad:bd:e0:e0:93:9c:93:a4:77:62:94:32:
d3:6d:cb:fa:d9:ff:9f:d2:0e:e8:2e:6a:f4:bc:2b:
f1:4e:1a:a3:d1:97:7e:33:00:1f:f0:c0:fb:ca:76:
39:bf:13:a8:f2:e9:5f:78:01:ca:f0:e0:bb:91:4b:
8a:7c:c2:f5:be:b9:ec:e1:b5:35:6f:a1:49:7f:57:
eb:f0:5d:29:99:ed:b7:5a:4f:9e:37:65:d8:e0:3b:
21:36:d0:95:d0:4d:27:4d:1b:49:de:d2:17:f2:f2:
d3:1e:ee:e4:b5:af:6a:94:79:cc:7a:0f:2e:72:99:
79:80:09:08:96:c2:9b:45:71:b5:51:da:e3:19:44:
69:09:7b:c4:22:67:23:27:f8:00:73:29:9c:72:5e:
ae:52:64:ab:2b:13:b6:92:d3:2b:4a:83:eb:f1:39:
c4:33:78:b2:06:f4:68:00:5a:4c:fc:6d:91:23:2d:
0a:44:fd:e7:6b:29:00:73:07:44:31:26:c3:4e:97:
88:34:36:5a:e1:92:0f:91:ca:32:0a:5d:a6:a2:32:
70:68:d0:c1:88:44:db:9f:dd:a4:24:44:ef:2e:46:
64:bc:b0:b5:0e:5f:b7:ab:2b:71:63:de:ed:67:41:
21:cf:c9:8a:14:71:3f:ba:8b:f2:9b:45:a8:be:e2:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A4:17:3F:2A:38:EE:9F:13:79:0A:03:26:E2:CA:33:CA:1C:BC:E7
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:28:a5:0b:cb:16:83:01:9b:50:76:23:5e:14:d8:23:76:23:
75:56:fe:8c:e8:b7:82:58:8d:7e:4b:3e:3d:d2:f0:01:95:b7:
5d:02:69:9d:fe:dd:4c:c8:97:59:c0:20:9d:ad:67:67:7f:fa:
4e:27:ef:b1:ff:18:04:b1:ea:c7:df:84:a2:a1:af:b3:3f:c9:
ba:81:05:85:b7:a4:44:3d:8e:76:06:1c:c1:f6:4e:48:6e:16:
5c:93:54:1d:64:a8:49:88:ee:ba:b9:58:c0:69:37:ae:11:89:
f9:bc:ce:cd:b8:84:2c:52:47:83:7b:ae:e4:e4:0f:37:76:74:
ac:fd:4a:33:a6:02:11:7c:f2:79:32:60:b7:1d:13:ef:fe:25:
d8:87:48:b4:7d:8f:ba:6f:9e:96:95:0f:d7:60:bd:ad:6d:f2:
41:6b:52:7f:2e:15:a4:56:70:6d:db:e3:52:56:b8:ca:54:2c:
a3:69:e4:05:9e:44:f1:20:11:2d:8d:7b:85:56:99:b9:43:a7:
b5:94:86:4b:0e:38:c5:6b:82:68:23:46:c2:73:20:ee:0e:f5:
0c:15:6e:1e:60:74:bb:f9:97:f3:f5:88:61:09:ad:17:2f:28:
6a:13:34:bb:bb:5d:21:ff:12:b4:48:ff:1e:77:4a:2e:62:03:
79:55:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:26:28 2026 by rpki-client