Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: jpx9QcF3yDIm+QfdLXwPr2ZWOyJwR+Oc8PnOlDZwzek=
Subject key identifier: 61:35:B2:0F:FA:EA:8B:33:41:90:B5:8D:8F:59:BB:66:8C:9C:74:45
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 019CABA23418252C9F3C6B518703EE1D8106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 1349
Signing time: Sun 01 Mar 2026 23:00:59 +0000
Manifest this update: Sun 01 Mar 2026 23:00:59 +0000
Manifest next update: Mon 02 Mar 2026 23:00:59 +0000
Files and hashes: 1: 1-y_IdByEhn8iG3365qsDy0gWV1Y.roa (hash: VS0T4i9Pv0/1fxgKv6PoNA1S1TKYjVElMHVoIv5HPww=)
2: 3xhOROtsWU6kcbRg-0eVsWv_Cf4.roa (hash: 5LTgCgWwER8eaf33nSzOpEaP32v0UF0hdAvBDa8TC70=)
3: KRctRzsS6WkYFQeNR_1yTG9YjP0.roa (hash: oB1FvlbACGWEHyhDswCez14XuSiwC0mCrxW2Q45DLmU=)
4: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: Ba2IGTnKIs+rwX33LVV8BQzG1/diWHp9qtOWVuqbw1k=)
5: mjMkYwmjZRiMyxXVqWiu6H4FD_o.roa (hash: A+YQ/4Az7bNkzemJO71ARj4rjsy96lN9Lz8BWv7V8fg=)
6: nayB3_rE3RntOJEk4e7i16Y7R3M.roa (hash: YijDZOJxEI25MjJmJqVvk74PVNuOr37g49vUulKscOg=)
7: oI0gNsAnUZaiiR1_JxvhZXrdyvc.roa (hash: PZhUlF96CrIiZt17nWZPHRO35kGXkmt9vTJKXgGorHc=)
8: qT0dlLpzpHG-UMlryrlwiaMMxcY.roa (hash: 9waKgS4/9SGo8HvqSDRZz0wIFy4U+cc/1Ys4XOOzmjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:34:18:25:2c:9f:3c:6b:51:87:03:ee:1d:81:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Mar 1 23:00:59 2026 GMT
Not After : Mar 2 23:00:59 2026 GMT
Subject: CN=6135b20ffaea8b334190b58d8f59bb668c9c7445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1b:83:23:4f:62:cd:5b:90:7f:28:d6:bd:42:
98:13:20:fe:27:a7:b7:0e:30:c7:78:a0:e0:61:3e:
7d:6b:4c:92:e7:88:2b:28:03:36:5e:64:64:a1:c8:
c3:71:41:66:8e:7d:48:10:16:c2:a6:44:3a:09:3e:
43:01:96:a2:d8:ea:99:83:22:11:af:f4:3e:5f:1e:
e1:11:b8:7f:43:b2:85:8e:ba:e7:b5:cd:4f:0b:32:
79:d7:d6:9f:a6:9b:18:c7:07:10:44:6d:e9:88:ca:
2c:4e:89:91:44:de:05:3e:89:23:4a:7e:1b:d0:4d:
32:a6:7a:06:46:cf:f3:34:31:fb:c0:71:dc:fb:f8:
f7:e8:ae:1a:21:48:23:c9:78:44:2e:eb:16:eb:42:
44:f6:b3:03:0f:ba:31:f7:84:89:22:5e:c7:37:bc:
cc:98:4e:f5:fb:3f:1f:a6:60:a8:b1:cb:f4:3a:a5:
19:c8:92:ba:ce:8d:5c:86:fb:2d:bc:3e:57:e2:a1:
d7:61:94:2c:21:bf:47:12:0a:83:99:f7:fa:58:48:
5b:b6:de:7f:9f:66:c6:83:b2:48:a6:1d:f7:3c:a6:
c0:fb:99:1c:b8:07:16:c8:8c:49:27:47:89:f4:ea:
c9:2a:f6:82:f9:7d:65:e1:3d:de:c6:4d:b5:e6:c2:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:35:B2:0F:FA:EA:8B:33:41:90:B5:8D:8F:59:BB:66:8C:9C:74:45
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c2:31:4a:37:a1:5c:d2:8f:9f:19:d7:d1:fb:d4:a3:3c:4f:
b2:c7:f6:5a:69:e0:79:91:57:64:88:47:0d:e2:a5:ec:8e:b2:
91:b7:63:3c:90:b1:5c:2c:e1:28:84:d9:a6:d6:23:d7:18:45:
48:69:e2:24:7e:45:a4:e3:52:c5:48:1f:b2:bc:72:fc:d5:28:
fb:d9:81:8e:d0:08:11:bc:ac:34:78:6a:d6:21:97:83:26:2b:
d9:33:55:4c:95:c6:66:0e:cb:96:fa:33:c7:e1:55:5a:ce:10:
7b:cb:21:79:7a:7e:33:f1:02:b3:3c:75:11:7e:56:17:c6:1a:
7b:e8:be:45:7a:5e:ef:83:93:ca:b1:d3:75:b1:31:f5:c6:f0:
47:9d:5d:30:b2:f2:b1:8f:39:10:41:01:6b:46:64:f1:69:5e:
d2:da:9a:68:6a:90:73:4a:ed:73:a5:75:28:4d:7d:71:bb:59:
e0:cf:56:13:54:d5:76:f8:34:be:5c:e7:dc:79:7a:52:b2:66:
6c:f2:81:17:3b:17:95:7b:62:71:ce:f0:4e:7c:9a:36:f4:e1:
e4:3e:35:1b:c1:b8:5b:05:14:48:58:39:4e:2e:11:2b:55:37:
c2:4e:ea:12:12:29:04:90:69:ef:e3:12:74:0f:fa:a4:31:2e:
11:b5:e0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:57 2026 by rpki-client