Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
File: RtlEd8i1TRLsiz97bZrnjlELI9g.mft (raw, json)
Hash identifier: Bm1lMlLmk2/CJbJTLGfwYWXvtPsghb7Bk3rzWicAtpc=
Subject key identifier: 98:9E:9B:20:AB:EC:54:14:8B:3B:68:23:1E:2C:87:23:24:D6:0C:27
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 01A1DA18B17911C95F0C65869FEC28755B09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
Manifest number: 1AFE
Signing time: Sat 14 Nov 2026 12:46:53 +0000
Manifest this update: Sat 14 Nov 2026 12:46:53 +0000
Manifest next update: Sun 15 Nov 2026 12:46:53 +0000
Files and hashes: 1: 3CbB-gU8Fkh_ywYdbqAJCeJYWoE.roa (hash: iBZA24ojW5yz7VpoZ8gZBo7ejClO8z0JYYTLlgfEF4Q=)
2: 6YdcLpvAvGqPmORwUs3mXgyru0I.roa (hash: f6+1ag2deIbRbwBvJfki80bdL6WSD0/GZDdKs+5X1zQ=)
3: 6oO-6-1bcA6Z8QJD_0vrHo8wkko.roa (hash: h1cCLwhcJyDdaYQ6GZavGUNAZX6iLc3GmTH9bJpo39Y=)
4: DbBkcBKTLwUVIRYiZoMGLtLABqc.roa (hash: nYJ7uYsvXEIvKqfy6utLXX5lQJgID0iu/HQASNofn+k=)
5: RtlEd8i1TRLsiz97bZrnjlELI9g.crl (hash: JYosq2HolcvNk0NSGR5wn4s05WDfxjGK+Bpt/7EjisQ=)
6: XC8Kc5mTk7fezpKSbjB-kbqsKvo.roa (hash: M3kIgDZZDu2U8kGSDYDggwFey+teEHBCeu/XLvDao3w=)
7: aRjoRHYk96BPNcuGbIrUIzq27HA.roa (hash: KkiP9K2kxxfIp28kXz7yaTm3Coq/66FEfzu8ep61Ons=)
8: xGlaSWAs_nGok3RsMj09mCdZA-c.roa (hash: PlUTSJXO25CuBLHkT82BadK7IIiVT9bby4rlA1xhZlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:18:b1:79:11:c9:5f:0c:65:86:9f:ec:28:75:5b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Nov 14 12:46:53 2026 GMT
Not After : Nov 15 12:46:53 2026 GMT
Subject: CN=989e9b20abec54148b3b68231e2c872324d60c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:67:bd:e1:e5:66:89:4b:2d:76:57:92:38:c4:
6d:a0:8d:9c:3f:63:68:a4:53:3b:93:01:31:a9:ab:
0c:23:b7:45:fe:ac:e6:31:6d:cb:ca:cd:c7:c9:62:
d7:10:11:e5:fc:f6:39:05:a4:09:95:3a:a3:dc:0d:
e5:c9:f7:9b:ef:9f:bc:b4:d1:0f:3e:a2:7a:da:f7:
f7:80:3a:8d:64:12:04:e8:ee:f7:88:66:2d:79:57:
07:3b:6d:c6:aa:a9:24:67:42:28:48:33:85:ad:1a:
65:0e:70:3f:a9:ba:c4:ca:4e:f5:76:e2:af:6f:01:
d5:b4:68:4d:80:ab:b9:f5:a8:d4:36:cc:17:4e:cf:
18:03:14:59:c4:6d:1d:98:34:20:38:2e:0b:82:09:
2a:4b:c4:40:f9:45:52:a7:3f:f3:03:26:3e:e9:e0:
77:19:22:13:05:07:2a:6d:01:04:d3:ad:70:5e:56:
51:06:f9:32:b8:74:ba:a6:77:8f:a7:53:f0:29:99:
16:f7:f3:d6:a0:96:4a:ad:f5:6f:c1:44:6d:d2:66:
b9:99:9d:7a:d3:e1:8e:e7:93:10:e0:80:83:6d:fb:
57:ae:a1:43:8f:f9:53:c1:db:03:2b:8b:e6:27:02:
18:3d:0f:7d:e9:57:f5:16:32:7e:77:8a:be:c7:67:
eb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:9B:20:AB:EC:54:14:8B:3B:68:23:1E:2C:87:23:24:D6:0C:27
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fd:b4:cc:d3:39:05:5a:fa:95:fa:15:4f:68:e8:70:af:d3:
66:f0:34:bb:38:0a:5c:87:3f:82:29:f1:c0:a0:47:85:81:b4:
9a:dd:8e:f0:79:dd:ef:68:4b:df:65:1c:ac:80:80:12:6b:16:
23:6a:f4:9c:a3:d0:af:65:7a:e5:5b:34:4d:56:6c:ef:e1:db:
dc:f5:98:78:a8:96:5e:06:ea:b0:c2:74:c9:5a:23:f7:93:13:
78:e5:ba:cd:0d:1f:83:a1:7a:f5:0e:b2:04:b7:99:b1:68:b9:
4d:cf:d0:51:5b:88:ff:a9:8d:eb:f0:1a:d1:f6:85:2f:18:a9:
83:78:0b:ac:94:89:54:fa:23:3d:07:f5:38:78:ab:57:3a:5e:
a0:cb:5e:00:23:db:64:81:7b:75:fb:42:d3:08:77:bf:9f:e9:
6c:07:13:04:42:df:55:3a:06:c1:f5:45:a6:cd:21:2a:f5:5c:
6e:c5:86:5d:e2:b7:89:6a:15:ae:b6:cf:22:0c:15:90:6f:69:
fd:6d:0e:f6:02:3a:cc:6b:79:c6:c4:cf:55:5d:00:c6:66:4a:
71:5a:79:7a:40:29:3f:be:7c:f0:e5:c4:aa:7f:82:1a:f6:41:
2e:81:13:71:41:88:d2:b8:da:d3:c5:81:fb:f1:57:2f:52:fb:
2e:f5:48:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:53:35 2026 by rpki-client