Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: hH8e4z5wzSP+5S9ig/nL4D9uOS4MQ9jIWek+wThO9Cc=
Subject key identifier: AA:EE:B3:6C:C5:3B:1C:64:27:91:F7:74:55:1E:BC:8A:B7:97:9C:03
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 019D265F84B79CBC918B0DD1FCA8740CC051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 17DA
Signing time: Wed 25 Mar 2026 19:01:27 +0000
Manifest this update: Wed 25 Mar 2026 19:01:27 +0000
Manifest next update: Thu 26 Mar 2026 19:01:27 +0000
Files and hashes: 1: MYb8VAECnaCGoqYg036Ww2frkMM.roa (hash: JPX2kf+QL+uvDn6HBV8cAFTbeXUIBEUW2fYqImCC42M=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: Eacvj9DPqk/RZSqjnR9VFkWJ+alwYW3nq4/RuBy/vfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:84:b7:9c:bc:91:8b:0d:d1:fc:a8:74:0c:c0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Mar 25 19:01:27 2026 GMT
Not After : Mar 26 19:01:27 2026 GMT
Subject: CN=aaeeb36cc53b1c642791f774551ebc8ab7979c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ef:d7:42:c3:b7:cb:c9:3c:8c:27:59:fe:92:
67:81:c0:fe:26:5a:54:07:78:dd:ed:8e:13:d4:94:
c1:a5:35:2c:8f:f3:bb:d1:4e:97:79:95:45:51:73:
44:d4:dc:f0:37:bc:9e:97:98:74:45:b7:16:25:db:
86:4a:0e:72:4f:a2:4e:6f:0e:4d:bd:31:15:b2:03:
e4:87:15:3e:6f:33:a8:41:6d:40:4f:7d:63:94:9e:
c2:f6:0a:92:05:d7:7c:d1:68:04:f0:53:22:16:d7:
c7:e1:20:64:89:f0:ce:78:3b:36:96:0d:45:fd:60:
d9:57:e9:c7:8f:16:07:d8:19:ed:f3:c6:f6:c3:cf:
36:8d:9c:17:32:5d:88:86:dc:62:55:b9:9f:16:f2:
d2:a5:7f:67:b3:de:d7:af:55:81:97:5a:82:7f:19:
8c:79:0d:3d:04:c6:5a:fb:60:7c:f5:ea:62:5d:12:
37:73:72:c4:46:f7:ff:b1:39:7e:f0:c5:f5:f8:b3:
ca:2f:f2:52:84:6d:7c:27:40:91:f6:1c:c5:c9:04:
b6:ba:e0:4d:80:53:6a:f2:45:59:9c:59:cc:9c:e9:
98:1b:09:76:e8:ff:15:4c:55:e4:f8:d3:55:97:c4:
77:0c:be:63:ce:8d:90:86:08:58:92:40:1a:1a:12:
1f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EE:B3:6C:C5:3B:1C:64:27:91:F7:74:55:1E:BC:8A:B7:97:9C:03
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:23:b8:8c:57:bd:80:e0:d1:23:52:66:86:97:11:49:87:ee:
52:70:db:e7:24:1e:3f:4f:0b:d3:da:70:13:da:5d:77:51:2d:
64:75:ea:06:34:3c:25:0c:ea:14:b8:81:70:fd:71:e5:da:65:
5e:57:99:c2:24:ad:a9:16:a0:f3:cd:f7:d3:0f:b6:a6:65:a4:
90:70:0d:18:32:69:93:c7:9b:3b:cd:02:ad:8b:87:f4:cf:ad:
2d:6c:6d:ea:7a:f0:2e:71:5f:d6:f9:89:86:64:d6:31:4d:f7:
c5:db:3a:5c:f9:ed:42:f5:15:ad:4d:3a:e6:5f:94:33:b8:49:
fe:08:cd:20:b8:d8:28:f5:92:eb:c9:10:3a:17:ea:7a:0b:3d:
13:fa:96:26:b0:ce:e0:b2:39:eb:b6:cb:e9:1c:c5:51:b9:83:
9d:01:83:7b:95:3a:f9:1b:60:0f:c7:fd:de:4c:98:e7:b3:d8:
ce:12:07:3a:10:f1:18:60:57:28:07:86:83:73:11:b3:2f:5e:
df:ae:ec:d1:4a:e4:3e:34:e9:c9:aa:11:27:4b:22:d6:f9:7c:
e8:1d:91:26:3f:1b:71:14:fb:65:9e:db:a6:ae:17:fb:e4:c6:
80:93:b6:46:43:14:6f:3f:7d:46:dd:ea:aa:b4:dc:04:f2:76:
bc:16:a5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:07:28 2026 by rpki-client