Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
File: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft (raw, json)
Hash identifier: yOsJXAEJQdhxeKj/UUbJqTBseUk2C8K5tvOlKOQnO4o=
Subject key identifier: CA:14:68:91:75:4F:22:D6:28:8F:C7:B1:CE:8B:8C:20:DA:D1:33:8F
Authority key identifier: 45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24
Certificate issuer: /CN=4534cab4450404862b201fe733f2c70a6bf52924
Certificate serial: 019D28BBB55432FDCBCE7A8F7E446F2FF263
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 06:01:23 +0000
Manifest this update: Thu 26 Mar 2026 06:01:23 +0000
Manifest next update: Fri 27 Mar 2026 06:01:23 +0000
Files and hashes: 1: QimJZyg_5Yfg1zb4CAZqCQiArVo.roa (hash: Z7/KTdUBdl9nRIlHCoXi0enigEky+0AXzlP7afwwRuk=)
2: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl (hash: KMU1IgpCI0KqdF9TbsqAYUYFhMiaz9Rb2ttY/eaBf0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b5:54:32:fd:cb:ce:7a:8f:7e:44:6f:2f:f2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4534cab4450404862b201fe733f2c70a6bf52924
Validity
Not Before: Mar 26 06:01:23 2026 GMT
Not After : Mar 27 06:01:23 2026 GMT
Subject: CN=ca146891754f22d6288fc7b1ce8b8c20dad1338f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0b:2d:03:89:3a:7f:08:80:f2:2d:85:69:83:
87:63:17:65:16:4b:03:ba:b9:41:1e:67:23:37:da:
17:2d:06:1e:61:80:c6:a7:9a:26:ea:41:74:d3:20:
3f:cd:a1:4e:4d:46:8d:a4:aa:36:af:31:c1:55:98:
4c:ba:dd:69:83:0f:45:a6:69:db:f4:a4:d5:b5:fd:
e1:f8:ba:7a:33:12:b0:d5:ef:63:c2:0c:79:85:4a:
6f:25:57:ea:d4:f0:b7:6e:a9:bd:74:dd:46:21:75:
d7:4b:99:bb:df:13:88:ce:41:45:ed:d1:ef:3f:fa:
02:d8:98:22:8a:e1:5e:59:d6:7d:e3:b6:77:e4:3e:
64:69:6f:0d:a2:8e:a1:eb:de:2c:1b:fd:72:27:f7:
25:ec:a2:49:d3:19:ac:9d:a3:09:77:1c:d5:f6:69:
f8:3a:40:38:d7:ef:36:8f:49:34:ca:52:41:1f:ef:
4d:19:76:8a:ac:8d:71:4d:66:95:53:49:d1:77:2e:
08:bc:dc:fc:dc:58:71:e0:b0:2e:05:dc:f6:9f:f7:
95:55:05:ca:22:b8:22:fe:ba:34:48:cc:5a:da:b1:
94:3a:fe:2b:c4:b9:7b:62:96:91:07:52:21:49:db:
1a:7c:09:ba:06:99:c5:d2:a3:62:ef:fd:9f:ae:2a:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:14:68:91:75:4F:22:D6:28:8F:C7:B1:CE:8B:8C:20:DA:D1:33:8F
X509v3 Authority Key Identifier:
keyid:45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f6:12:e3:34:66:b5:9a:1e:13:1a:4b:de:d4:c2:21:f8:bf:
b3:00:26:8a:63:ae:b9:fe:aa:bc:eb:2c:27:0d:93:9d:24:c8:
b2:36:83:61:a1:4c:e8:7b:48:2a:71:f0:da:51:e7:f4:ca:61:
76:94:ee:97:59:21:f4:2b:8a:20:11:cb:2d:27:48:e5:33:3d:
0e:4f:59:cd:ac:42:04:07:5c:3b:44:ea:bc:80:c8:69:28:df:
6f:6b:99:94:01:29:8a:a0:e8:0a:c7:92:09:29:03:86:e4:d8:
2f:46:bc:36:d1:9b:b6:15:95:50:44:ca:7c:fb:55:f2:18:bc:
8c:6a:25:2e:14:e6:79:cd:cc:69:50:fb:14:f4:75:36:e4:fc:
66:e0:8a:fb:e7:c4:b7:6b:51:d6:c7:85:d6:08:49:07:0e:8b:
bb:35:74:cf:18:ed:d9:70:c2:85:b5:eb:2b:f6:08:80:58:b9:
77:62:10:37:24:04:4c:8f:84:dc:da:17:be:33:46:89:d0:92:
5b:8d:8c:58:e5:f8:c4:02:c5:67:96:22:8d:41:7a:ef:5b:13:
bc:17:41:9c:44:29:30:32:96:f9:be:09:64:4f:66:d7:de:f7:
eb:22:2a:77:6a:65:f5:3e:2b:83:4d:bd:9a:2d:c9:aa:56:a0:
77:d6:6f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:19 2026 by rpki-client