Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: bDOPbr53rqtbaJgdzCJhc1iWkpV038rlg1KcD0zHNtk=
Subject key identifier: 1A:FC:02:DF:11:3F:9A:64:FE:83:F8:72:3D:3A:19:F7:F9:4C:14:90
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 019FABD14211920049798C4AEC3271348DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 0E11
Signing time: Wed 29 Jul 2026 03:00:45 +0000
Manifest this update: Wed 29 Jul 2026 03:00:45 +0000
Manifest next update: Thu 30 Jul 2026 03:00:45 +0000
Files and hashes: 1: 1JtyFjGHKOjB6E5ymFRYHo0Cjno.roa (hash: makKU1K/a9OvfPTgKGZKj9kwQNZtoAlnHOJ1Bnu95GE=)
2: jmBPCb9DTm9fzSzAZ1_mQpVIr-k.roa (hash: FekyEXt0eMF+S2nBvz+51hHLK6v+L5cr1WGH2ZOcpgs=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: 3/EHc0AiegkL+RVrAif81No4mKO3TrBe9hD0xRweZ5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:42:11:92:00:49:79:8c:4a:ec:32:71:34:8d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Jul 29 03:00:45 2026 GMT
Not After : Jul 30 03:00:45 2026 GMT
Subject: CN=1afc02df113f9a64fe83f8723d3a19f7f94c1490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:61:19:f1:fa:6a:a5:98:c9:c5:a5:3d:47:70:
ff:fa:c7:80:43:b1:3b:4d:94:be:5d:32:9d:ce:b3:
c6:c0:13:2a:74:7b:66:6b:6d:ad:0d:58:d3:f8:8c:
f1:7d:e9:9b:eb:b7:64:16:5c:53:4d:16:33:c8:7a:
9c:15:ac:df:0a:3b:5f:d5:06:1d:0c:35:ea:3e:c9:
87:bd:e8:2b:2c:c6:1a:87:a4:92:d5:b9:c0:83:86:
94:fe:7a:0d:65:33:d8:39:c0:53:a6:4d:87:1d:5b:
65:8a:62:ba:f4:94:be:eb:3a:61:89:47:f0:95:54:
d6:89:91:aa:19:6f:ac:e8:44:db:2f:cb:3c:bc:22:
f7:8b:bc:d1:ff:58:cf:fe:4e:93:6e:b4:87:67:1c:
97:db:53:de:77:9e:88:00:8e:0a:05:27:90:25:22:
05:72:99:49:8e:60:db:49:53:7e:b2:7b:52:6c:ff:
69:8a:a4:56:c4:d6:91:ef:53:22:8d:8f:e0:98:6f:
7e:01:68:6d:06:00:07:db:57:cf:a8:56:43:22:22:
c0:42:4c:09:d3:b6:b0:c6:a1:8a:e2:fb:a6:0e:5e:
14:2f:d8:37:60:c3:f7:9c:93:f4:05:2e:63:92:d8:
e4:72:22:1c:9d:28:9f:f2:cf:a4:ab:e6:95:61:48:
f0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FC:02:DF:11:3F:9A:64:FE:83:F8:72:3D:3A:19:F7:F9:4C:14:90
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e2:bf:ef:5a:3e:cf:47:8b:93:b4:40:1e:f6:2e:22:ce:f7:
f5:5d:c7:3b:d6:35:71:02:64:2d:fc:b3:08:57:f2:67:64:15:
19:ce:76:56:76:99:f8:21:71:db:7a:f5:12:f4:ef:06:ff:3d:
1c:44:28:b4:93:0b:cc:4d:76:40:23:81:1b:dd:bf:b1:94:ba:
1b:34:fe:3b:0d:07:93:04:f9:c2:95:51:99:9d:bd:81:9c:2a:
50:87:79:cc:96:17:88:8d:f5:9e:2f:bc:3d:16:aa:66:7e:34:
91:76:ea:eb:fd:3b:19:18:bf:97:2b:01:4c:66:56:42:b4:b3:
88:c9:8e:00:98:13:0b:33:7c:9e:5b:b6:ad:77:3a:69:13:71:
e6:f2:9e:cf:f8:b6:20:6e:ca:3e:73:b3:27:3c:66:01:6c:03:
18:49:27:58:b6:e3:ab:0e:2f:eb:b9:84:64:5c:0f:51:4f:fe:
87:5d:49:9e:6c:03:24:79:64:23:cc:30:10:0f:ff:f7:a9:57:
2b:b4:b7:58:b1:72:06:41:2e:cf:5b:c0:02:a7:51:4e:17:4f:
90:54:10:4d:21:4a:6f:5d:83:59:11:d2:ef:fa:3d:87:5a:3e:
cd:db:18:6a:6e:df:d2:12:38:1b:8f:7a:ce:d3:c9:1b:f9:0a:
3c:1b:62:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:28:04 2026 by rpki-client