Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft
File: Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft (raw, json)
Hash identifier: a2Q3cMyDfIz131uckoAPVck2fsfdhRT5ONTpxc52TyQ=
Subject key identifier: 88:5D:FB:47:24:4A:69:BF:15:97:8E:B3:0D:D6:14:14:38:9F:29:16
Authority key identifier: 46:DC:9B:82:8A:AC:EC:97:11:4D:DB:A6:81:9E:30:24:65:2C:18:67
Certificate issuer: /CN=46dc9b828aacec97114ddba6819e3024652c1867
Certificate serial: 01A0D5DED431224313830405648FA5F15682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rtybgoqs7JcRTdumgZ4wJGUsGGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft
Manifest number: E8
Signing time: Fri 25 Sep 2026 00:02:25 +0000
Manifest this update: Fri 25 Sep 2026 00:02:25 +0000
Manifest next update: Sat 26 Sep 2026 00:02:25 +0000
Files and hashes: 1: 4XiXh8_wXxHMXryb21gQu-Vo2ak.roa (hash: ZhzTAMyy8UUREXRxteZi8kS1/dlvGAHQtBtzgyRuz1Y=)
2: R2rXfyd0OXaVnfiV3CA9oe0qoxg.roa (hash: vVj2qBO4foAyQkAfmXKW438nMYRkk8Pl9+S1RCDweeM=)
3: Rtybgoqs7JcRTdumgZ4wJGUsGGc.crl (hash: OFwQlKTfTOrk/9PUUTWqCbYt7+VFwOoiIJ48y3DqTIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rtybgoqs7JcRTdumgZ4wJGUsGGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:d4:31:22:43:13:83:04:05:64:8f:a5:f1:56:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46dc9b828aacec97114ddba6819e3024652c1867
Validity
Not Before: Sep 25 00:02:25 2026 GMT
Not After : Sep 26 00:02:25 2026 GMT
Subject: CN=885dfb47244a69bf15978eb30dd61414389f2916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:f6:8d:46:96:2d:56:bb:29:28:9c:28:fb:
08:07:ac:91:e6:80:8c:d9:ec:17:96:93:f7:8a:6d:
10:b4:fe:11:df:58:02:fb:16:5b:36:be:00:df:cf:
72:55:de:49:ef:55:9f:e4:61:98:b3:ae:38:04:67:
ac:bd:52:ba:4a:10:0f:6d:1f:c6:eb:c4:44:91:56:
57:d4:df:ab:94:dd:5e:f7:6c:5d:92:1d:8f:3e:c4:
f2:74:fd:95:30:9b:2d:cc:25:7f:d5:2f:30:09:fe:
6e:c6:57:a7:ed:27:68:0f:0c:3b:45:3a:5a:da:0e:
82:ed:79:e2:73:5e:c4:b6:e4:15:57:96:db:96:ad:
f3:d9:5c:6b:0a:bc:e1:34:ed:2b:e7:85:9d:96:f7:
b0:a1:74:a6:08:2e:85:72:7d:c3:05:8f:ed:00:63:
a7:69:01:61:a8:2a:21:5e:a9:87:d0:00:3e:cc:3d:
9e:32:eb:28:23:ce:7a:4f:62:33:bf:c0:ce:c3:63:
3b:89:f0:b9:44:0f:1f:b1:9c:19:b2:10:fe:97:4b:
c4:f2:7e:f6:b4:c8:0e:ea:43:22:20:06:f0:06:19:
2d:d9:7d:5d:96:d7:11:91:c5:1f:17:7d:1c:21:62:
4c:06:6c:c4:6b:b6:a5:20:9c:d0:1d:6d:f1:33:9d:
1e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:5D:FB:47:24:4A:69:BF:15:97:8E:B3:0D:D6:14:14:38:9F:29:16
X509v3 Authority Key Identifier:
keyid:46:DC:9B:82:8A:AC:EC:97:11:4D:DB:A6:81:9E:30:24:65:2C:18:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rtybgoqs7JcRTdumgZ4wJGUsGGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:03:b3:44:77:34:f5:37:5c:c1:b9:8a:61:ea:4d:2d:67:21:
7a:bc:f1:a1:1c:1b:52:2d:58:5d:4d:9d:7f:ee:14:86:60:1f:
cc:8e:d2:19:1c:3d:e1:40:07:4b:0a:9f:9b:95:2a:54:10:ef:
f8:11:50:be:b4:a5:0e:58:d6:b6:90:44:fe:54:8b:8a:b6:a7:
a3:21:f9:e2:a6:a9:6a:44:bc:43:eb:70:97:94:9e:15:39:57:
0e:5f:a4:cb:04:5c:c6:38:b3:a0:48:2d:0a:e6:2b:c2:9c:b0:
b4:84:b2:fe:43:03:04:72:6b:81:1d:8d:aa:79:1e:64:a4:48:
99:08:8b:90:37:ac:b7:88:fc:d3:64:d2:c9:53:f6:37:5c:1b:
55:3a:8e:63:f7:38:2c:07:ec:b5:2d:79:b6:dd:04:69:2d:4a:
05:10:16:f5:05:05:52:da:80:03:9e:5d:70:83:5a:82:21:b3:
e4:76:c6:9f:7a:e3:f6:d4:29:11:e1:9b:5e:c8:45:a6:a8:59:
d4:2a:f1:d7:f8:4b:66:18:e0:81:7c:da:17:a6:aa:45:54:8e:
46:9c:7a:86:98:1f:3d:ba:d6:40:14:80:ca:a5:df:24:f5:42:
36:56:b0:fe:e6:17:ac:b6:87:4c:33:dd:d4:21:d4:ae:56:e2:
98:50:87:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3tQxIkMTgwQFZI+l8VaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZGM5YjgyOGFhY2VjOTcxMTRkZGJhNjgxOWUzMDI0NjUy
YzE4NjcwHhcNMjYwOTI1MDAwMjI1WhcNMjYwOTI2MDAwMjI1WjAzMTEwLwYDVQQD
Eyg4ODVkZmI0NzI0NGE2OWJmMTU5NzhlYjMwZGQ2MTQxNDM4OWYyOTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9T2jUaWLVa7KSicKPsIB6yR5oCM
2ewXlpP3im0QtP4R31gC+xZbNr4A389yVd5J71Wf5GGYs644BGesvVK6ShAPbR/G
68REkVZX1N+rlN1e92xdkh2PPsTydP2VMJstzCV/1S8wCf5uxlen7SdoDww7RTpa
2g6C7Xnic17EtuQVV5bblq3z2VxrCrzhNO0r54WdlvewoXSmCC6Fcn3DBY/tAGOn
aQFhqCohXqmH0AA+zD2eMusoI856T2Izv8DOw2M7ifC5RA8fsZwZshD+l0vE8n72
tMgO6kMiIAbwBhkt2X1dltcRkcUfF30cIWJMBmzEa7alIJzQHW3xM50ezwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhd+0ckSmm/FZeOsw3WFBQ4nykWMB8GA1UdIwQY
MBaAFEbcm4KKrOyXEU3bpoGeMCRlLBhnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnR5YmdvcXM3SmNSVGR1bWdaNHdKR1VzR0djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yMTY2YTgtMzU3Yy00Y2Y2LWI2ZjIt
ZjhkNmQxYTc0YjFkLzEvUnR5YmdvcXM3SmNSVGR1bWdaNHdKR1VzR0djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yMTY2YTgtMzU3Yy00Y2Y2LWI2ZjItZjhkNmQxYTc0YjFk
LzEvUnR5YmdvcXM3SmNSVGR1bWdaNHdKR1VzR0djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAOzRHc0
9TdcwbmKYepNLWcherzxoRwbUi1YXU2df+4UhmAfzI7SGRw94UAHSwqfm5UqVBDv
+BFQvrSlDljWtpBE/lSLiranoyH54qapakS8Q+twl5SeFTlXDl+kywRcxjizoEgt
CuYrwpywtISy/kMDBHJrgR2NqnkeZKRImQiLkDest4j802TSyVP2N1wbVTqOY/c4
LAfstS15tt0EaS1KBRAW9QUFUtqAA55dcINagiGz5HbGn3rj9tQpEeGbXshFpqhZ
1Crx1/hLZhjggXzaF6aqRVSORpx6hpgfPbrWQBSAyqXfJPVCNlaw/uYXrLaHTDPd
1CHUrlbimFCHEA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 07:34:23 2026 by rpki-client