Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
File: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft (raw, json)
Hash identifier: VrCNiLEcDe3p1SxZ1HeT4xQmqpcWJumHU3tKbeDE4K0=
Subject key identifier: 46:04:D9:40:26:69:86:9A:A3:36:E5:B1:38:19:43:34:97:62:0F:32
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 019D9AAB9BABEE0597DB9E1BABC83F93A66D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
Manifest number: 0CFF
Signing time: Fri 17 Apr 2026 09:00:30 +0000
Manifest this update: Fri 17 Apr 2026 09:00:30 +0000
Manifest next update: Sat 18 Apr 2026 09:00:30 +0000
Files and hashes: 1: 1JtyFjGHKOjB6E5ymFRYHo0Cjno.roa (hash: makKU1K/a9OvfPTgKGZKj9kwQNZtoAlnHOJ1Bnu95GE=)
2: jmBPCb9DTm9fzSzAZ1_mQpVIr-k.roa (hash: FekyEXt0eMF+S2nBvz+51hHLK6v+L5cr1WGH2ZOcpgs=)
3: rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl (hash: vtb8k5GTS6Rq5AtTNzaL+FWDpFfJzg9YVewj+w3LPnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:9b:ab:ee:05:97:db:9e:1b:ab:c8:3f:93:a6:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Apr 17 09:00:30 2026 GMT
Not After : Apr 18 09:00:30 2026 GMT
Subject: CN=4604d9402669869aa336e5b13819433497620f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:8b:df:18:23:37:7e:56:5e:0d:66:e4:d8:
c5:81:48:09:62:e6:c8:0c:49:95:00:dd:51:00:59:
ca:2f:a9:07:d1:58:8d:65:58:b5:1d:d8:eb:29:02:
7a:c3:87:30:86:0b:cd:7a:0f:4e:25:a2:b8:6e:b3:
39:5f:58:69:4b:1e:a2:e9:18:86:05:cb:9b:49:41:
ed:7e:82:58:5a:7b:cc:c8:21:21:e8:fa:59:25:83:
81:3a:ba:aa:1e:ef:94:a9:69:b7:a1:27:65:73:5d:
ba:07:9f:b3:95:35:01:65:37:c3:8d:a5:5f:2c:59:
2e:18:9a:4f:1b:c2:54:12:ba:26:cf:bc:f7:3b:3b:
29:50:26:b2:c9:11:8a:fd:f1:db:01:25:79:53:3e:
df:dc:98:b1:c3:1c:6d:e9:d4:12:3a:65:3c:af:04:
5a:6c:e7:a7:90:64:52:16:98:2d:fe:bf:04:69:78:
d7:a7:6e:97:65:1f:37:59:db:47:03:57:90:11:29:
9c:57:d0:ac:a1:b3:d6:65:64:f3:dd:c5:2f:d3:a0:
5e:57:de:fd:79:8d:42:61:0a:75:a5:ff:d9:4b:f9:
d9:ea:ca:1b:ba:9c:99:e0:6b:67:01:d6:00:90:ab:
c3:f7:39:b8:cf:36:8c:51:84:61:b3:46:5f:0c:00:
df:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:04:D9:40:26:69:86:9A:A3:36:E5:B1:38:19:43:34:97:62:0F:32
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:09:3a:5b:15:3d:92:ff:ba:f1:b5:ee:74:1a:f3:21:ba:b2:
53:af:fa:65:98:d1:2f:99:f1:e4:5d:5b:83:58:7d:ab:88:70:
eb:38:7f:d7:77:a7:88:95:a8:8e:1a:c8:c7:a8:06:71:f3:06:
43:63:c9:b6:61:79:1f:69:19:7b:87:4c:90:99:00:6e:ae:fa:
10:16:7d:3e:80:ae:51:8d:f1:35:fa:45:96:52:ba:d5:5c:90:
34:fb:96:3d:52:48:54:72:d3:cf:a0:ca:8f:a5:c9:e1:98:ee:
a7:2c:84:f7:f9:da:53:e6:1b:aa:6a:57:a4:ca:b0:b2:0a:02:
b6:7b:9e:e4:59:06:a1:af:5b:a3:ef:3d:e8:07:ed:e7:85:e9:
85:31:f0:c3:0d:b9:1f:d8:e0:09:eb:ca:9e:aa:4d:a4:ad:29:
1f:b3:a7:00:9b:68:54:65:c6:27:6e:ba:12:61:e5:18:de:6a:
ee:ce:7d:ed:0a:32:6f:7d:bc:99:14:88:e7:72:b1:76:5a:58:
48:2d:02:01:21:c3:0c:1a:c0:9b:1f:4f:a4:71:32:c2:db:89:
45:c3:c5:ef:73:c3:d1:8c:2d:2a:b5:2d:7b:ca:69:84:5d:d0:
1d:44:02:a7:a2:2f:98:27:75:47:06:69:f0:0e:2e:e1:cd:50:
54:2e:9e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:48 2026 by rpki-client