Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
File: RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft (raw, json)
Hash identifier: /KsqTwXE5b1yhTtnMSZyYRoZUKZUBhWNQKdyk3UkfDw=
Subject key identifier: 11:E4:87:AE:D6:2D:BB:83:32:6B:8B:B5:20:82:6A:81:CB:6B:0C:03
Authority key identifier: 46:D4:3D:A6:AD:E5:F2:D2:33:3D:ED:52:F5:83:1F:BE:D4:8C:FD:47
Certificate issuer: /CN=46d43da6ade5f2d2333ded52f5831fbed48cfd47
Certificate serial: 01A0D9BA936DA1B60F85570BA9B087881D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:01:18 +0000
Manifest this update: Fri 25 Sep 2026 18:01:18 +0000
Manifest next update: Sat 26 Sep 2026 18:01:18 +0000
Files and hashes: 1: A3vyQNFZmIIiVEvn821V3LPNqkc.roa (hash: 0mBujLmZOmOPTcByzEM0WftntYdLFr6SGaantjpe9Ko=)
2: RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl (hash: X9QtVtn2zVsUeI/9Sk98P3zHclBEmzfl9A/nFXzgh18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:93:6d:a1:b6:0f:85:57:0b:a9:b0:87:88:1d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d43da6ade5f2d2333ded52f5831fbed48cfd47
Validity
Not Before: Sep 25 18:01:18 2026 GMT
Not After : Sep 26 18:01:18 2026 GMT
Subject: CN=11e487aed62dbb83326b8bb520826a81cb6b0c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:97:83:8d:7f:3d:f4:0b:59:b2:e0:01:2f:
69:87:d1:bc:c9:44:e7:98:70:fd:af:0a:de:c5:01:
25:a3:1a:75:86:78:e4:e1:12:c4:5c:ff:da:a1:20:
aa:f2:09:07:79:94:b7:96:f0:f7:20:a7:44:fd:ec:
53:21:c3:67:ef:4e:91:25:4b:e3:7b:35:ec:c6:ad:
a5:82:d1:8f:20:07:07:9a:1f:4b:86:1e:c5:4d:35:
b2:5b:3c:d2:11:4f:6b:cd:74:3b:55:91:0f:9b:3e:
80:4b:dc:c7:56:88:20:96:37:21:66:66:1e:65:f5:
d6:a4:95:33:4e:d9:28:6b:b0:b4:b7:7c:52:8b:23:
01:20:02:db:cc:08:d5:7b:56:dd:23:0f:54:96:59:
41:80:71:e9:3e:18:bb:81:c1:a1:97:a3:c0:7e:3f:
4e:45:24:38:77:b5:8e:0c:9b:d1:17:d6:7a:db:85:
1e:ad:99:47:f2:b0:23:ea:a2:18:5b:84:a0:6c:ae:
5d:cc:98:27:86:dd:8d:97:3e:c4:84:9d:ec:4b:e4:
61:ab:d2:7c:8d:c2:f6:70:11:ca:0b:78:3e:90:29:
42:65:d5:ca:79:1a:18:dc:41:4b:c2:6a:e5:a4:ff:
df:25:e0:be:b9:d5:67:f6:0d:3f:9b:e3:3f:e3:25:
c0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E4:87:AE:D6:2D:BB:83:32:6B:8B:B5:20:82:6A:81:CB:6B:0C:03
X509v3 Authority Key Identifier:
keyid:46:D4:3D:A6:AD:E5:F2:D2:33:3D:ED:52:F5:83:1F:BE:D4:8C:FD:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:df:e0:cf:e4:6b:be:5b:85:1f:b7:6f:35:0a:8a:6f:ee:48:
fb:fd:c4:b4:dc:8b:bd:f2:93:17:39:cc:f2:5c:a3:8f:99:6d:
d9:89:20:fc:b4:fb:fe:d3:a2:c8:cd:7a:4c:3e:d7:cf:5a:7a:
ce:db:40:5b:0b:3f:e0:bf:38:b0:98:be:d6:31:27:7c:73:6d:
63:70:46:06:9a:46:d9:95:0d:25:67:b5:0a:70:29:b8:1e:c3:
ea:43:66:8f:70:b1:84:3a:be:5b:eb:a7:a7:63:2b:41:fa:96:
3d:fe:ac:7b:dc:6e:15:e2:99:8f:26:87:ff:e4:9f:bb:de:b9:
f6:0b:35:38:f2:dc:d8:fc:a0:73:c8:03:bf:20:99:4f:74:86:
40:15:29:d8:41:cb:85:4a:de:79:8c:49:ff:0f:7b:05:d2:3e:
c2:3f:22:12:ab:eb:c0:e8:2d:06:03:85:b6:a9:5f:8b:64:ea:
8b:d8:b4:95:74:72:6f:56:e4:63:54:fb:f6:a4:bc:cb:de:fd:
66:89:c0:e9:f6:68:d1:01:0b:bc:29:47:6e:a5:ec:55:7d:f4:
79:3a:7c:e9:c2:dc:93:a2:17:68:72:59:27:8d:a7:6b:26:05:
44:f4:b5:18:e3:15:77:bb:30:42:de:40:05:18:99:96:42:3a:
58:b9:53:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:56:18 2026 by rpki-client