Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: 63qSx8XuvYJR76zsHkEvbz1XsBM878TyKUGkcO76JyE=
Subject key identifier: 4E:01:5C:47:28:54:8C:C3:BF:FB:0C:9A:C1:7C:62:CC:65:30:62:6F
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 019F96251D6EEA9162DA8F6F77FDA9A62510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 191D
Signing time: Fri 24 Jul 2026 22:00:42 +0000
Manifest this update: Fri 24 Jul 2026 22:00:42 +0000
Manifest next update: Sat 25 Jul 2026 22:00:42 +0000
Files and hashes: 1: MYb8VAECnaCGoqYg036Ww2frkMM.roa (hash: JPX2kf+QL+uvDn6HBV8cAFTbeXUIBEUW2fYqImCC42M=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: 7Qok5NSJ1PfGCI8Y8RYu1lGxeQYrxSFX95MwMLUac+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:1d:6e:ea:91:62:da:8f:6f:77:fd:a9:a6:25:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Jul 24 22:00:42 2026 GMT
Not After : Jul 25 22:00:42 2026 GMT
Subject: CN=4e015c4728548cc3bffb0c9ac17c62cc6530626f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:53:ae:c1:79:0b:f5:5d:67:e6:77:6f:43:
35:04:12:c7:2e:41:1e:62:f5:a0:c0:38:00:9f:85:
3c:ff:ee:46:cd:e3:97:17:9f:5f:eb:0a:26:dc:40:
12:da:12:0e:fa:94:c4:cc:97:76:50:ea:84:0b:fd:
2a:3e:8b:58:a5:49:a0:d1:bd:33:3e:62:ea:4e:22:
7d:5f:fa:98:88:17:c6:5f:b4:a0:61:64:21:bb:34:
3c:01:33:5c:83:f4:e3:a4:5a:65:97:7d:1e:77:11:
e2:86:fa:64:d8:ca:3e:da:e9:46:3e:df:af:13:c7:
ed:3d:bb:cd:ba:f1:cf:22:c0:80:9d:db:fe:b7:bc:
39:eb:33:b6:3e:6e:2a:92:5b:b9:2e:97:04:ad:8d:
fe:8f:5b:bb:08:f8:cb:e6:ec:22:8d:e4:2c:bd:11:
fd:6e:7e:d5:0a:9f:20:8c:4e:3f:9e:e5:af:9d:4f:
91:2f:70:be:2a:49:95:a3:19:07:36:44:5c:be:04:
89:c2:1d:d5:7a:21:00:37:b5:e8:bb:3a:72:dc:7e:
d1:f8:02:03:11:e2:a9:42:fe:58:74:57:7a:d6:bd:
2f:9b:5c:2b:5c:52:69:30:08:59:40:e3:c5:f2:46:
50:e6:ea:10:87:c2:c5:c8:1c:73:54:be:1d:f9:10:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:01:5C:47:28:54:8C:C3:BF:FB:0C:9A:C1:7C:62:CC:65:30:62:6F
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c3:1f:89:ab:ba:9e:ce:0d:f3:e5:1a:28:d1:66:6c:0f:81:
d5:08:cf:ea:9c:53:d8:bf:c8:7e:2d:7c:00:80:bd:69:9e:a2:
27:d2:f5:59:1d:48:39:d8:1a:1d:9d:44:7e:a1:2d:8a:bc:20:
6f:13:53:f6:c1:81:d4:4b:d9:19:cb:aa:a4:43:76:93:83:90:
62:c3:56:8a:4a:5a:fa:13:dd:f0:f3:37:e5:67:92:ed:09:6a:
e5:bf:8c:1a:8b:b8:95:ca:a5:a9:a4:7e:32:1d:67:82:e7:f7:
84:78:d6:28:78:14:c9:c4:2b:28:fa:48:4e:b2:21:c5:e3:53:
7a:b1:89:80:a0:94:ef:ee:28:8d:47:da:a6:ec:01:20:ac:13:
8b:b4:6a:96:b1:29:19:cd:df:3d:ad:2f:0a:62:05:e7:fd:94:
35:03:5a:e2:92:1e:8e:ae:f7:ae:7f:38:20:f3:23:79:01:73:
c3:e6:b0:54:48:ea:47:54:6d:22:cd:f9:0a:de:ef:8d:1b:49:
91:e8:f1:24:d5:b5:17:7e:bb:bb:ee:1b:6b:4f:48:0a:5f:4a:
d6:e7:43:f1:74:be:ca:d9:0d:ca:6b:d3:67:d1:b6:c0:96:f6:
6c:5e:f8:9b:67:b9:46:3b:0f:5c:96:40:47:1f:7d:ff:ef:0d:
6c:61:2e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:26:59 2026 by rpki-client