Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File: RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier: LDE/yCHhheWw7mjlq6cBw4iR5B53Nxs/CfqUgD8rCMs=
Subject key identifier: F3:A5:CE:B6:F3:BB:74:46:16:92:EF:77:1A:2B:21:A9:C7:D4:76:AB
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial: 019CAD909BA00541B74E982B1C1487EE25EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number: 134A
Signing time: Mon 02 Mar 2026 08:01:01 +0000
Manifest this update: Mon 02 Mar 2026 08:01:01 +0000
Manifest next update: Tue 03 Mar 2026 08:01:01 +0000
Files and hashes: 1: 1-y_IdByEhn8iG3365qsDy0gWV1Y.roa (hash: VS0T4i9Pv0/1fxgKv6PoNA1S1TKYjVElMHVoIv5HPww=)
2: 3xhOROtsWU6kcbRg-0eVsWv_Cf4.roa (hash: 5LTgCgWwER8eaf33nSzOpEaP32v0UF0hdAvBDa8TC70=)
3: KRctRzsS6WkYFQeNR_1yTG9YjP0.roa (hash: oB1FvlbACGWEHyhDswCez14XuSiwC0mCrxW2Q45DLmU=)
4: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: M2GcbJL7NoeEzvhvc52u1p3ezxIhdNvpn75XgL72UN0=)
5: mjMkYwmjZRiMyxXVqWiu6H4FD_o.roa (hash: A+YQ/4Az7bNkzemJO71ARj4rjsy96lN9Lz8BWv7V8fg=)
6: nayB3_rE3RntOJEk4e7i16Y7R3M.roa (hash: YijDZOJxEI25MjJmJqVvk74PVNuOr37g49vUulKscOg=)
7: oI0gNsAnUZaiiR1_JxvhZXrdyvc.roa (hash: PZhUlF96CrIiZt17nWZPHRO35kGXkmt9vTJKXgGorHc=)
8: qT0dlLpzpHG-UMlryrlwiaMMxcY.roa (hash: 9waKgS4/9SGo8HvqSDRZz0wIFy4U+cc/1Ys4XOOzmjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:9b:a0:05:41:b7:4e:98:2b:1c:14:87:ee:25:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Validity
Not Before: Mar 2 08:01:01 2026 GMT
Not After : Mar 3 08:01:01 2026 GMT
Subject: CN=f3a5ceb6f3bb74461692ef771a2b21a9c7d476ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:32:4d:ef:16:12:0c:05:f6:7a:df:7a:78:fc:
d2:26:cf:f4:6f:76:55:7b:67:3d:c9:dd:28:50:50:
22:16:3c:a9:2c:f1:9b:0f:af:b1:83:db:b6:c6:3a:
56:d3:8d:0c:21:42:64:41:c0:fa:85:d2:9b:76:21:
0f:a0:e6:61:fa:61:5c:77:88:6e:eb:46:68:2b:0a:
fa:a5:cd:79:95:e6:22:6e:9b:be:fc:99:3b:ee:e9:
e2:c6:6c:cf:dd:76:94:f0:28:e5:a5:13:75:52:05:
d3:74:58:13:03:ea:4b:cf:89:3d:74:53:1f:bb:93:
8d:13:ea:0f:f9:28:e8:d2:29:ae:df:6e:1c:58:0f:
e3:ee:1f:05:8a:05:d0:f0:0a:19:82:7c:f4:82:6b:
12:45:40:5c:40:14:68:e3:3f:46:fa:fd:c9:77:cd:
b3:95:d7:bc:fc:a5:32:bc:9d:2f:98:29:a5:4b:12:
b9:da:73:b7:93:63:b5:e1:d6:06:10:55:ed:b0:e5:
b2:77:7b:f5:e5:f7:2c:77:f5:d8:dc:d4:61:12:4a:
21:7b:54:98:fd:cb:20:6d:87:43:f1:f8:b6:3b:c2:
a4:f9:6e:39:90:fb:b6:b7:aa:f0:06:ba:54:aa:61:
ea:a0:4d:72:eb:4d:a5:cc:13:c9:eb:1c:ea:eb:9d:
57:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A5:CE:B6:F3:BB:74:46:16:92:EF:77:1A:2B:21:A9:C7:D4:76:AB
X509v3 Authority Key Identifier:
keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:28:53:f8:ab:8b:b9:7c:b2:22:50:4a:98:08:69:1b:50:60:
15:cb:b7:c5:89:83:bd:48:65:b5:aa:2f:2d:2c:76:10:0e:76:
d3:9f:25:4b:bc:84:42:95:63:f0:42:95:74:8b:ac:84:60:d5:
83:e5:45:f7:83:0f:7f:c9:38:a3:2e:f7:55:7c:be:cc:27:36:
31:d4:0b:45:dc:af:7e:57:20:4a:5d:ec:62:03:71:88:80:97:
89:40:26:5d:9b:56:c6:8f:44:93:d4:3e:3e:f9:e3:1d:98:5b:
21:8c:dd:81:de:80:57:6b:f0:c0:4e:97:89:5a:52:c5:00:e9:
85:92:65:fd:ef:29:6e:20:07:8d:52:5a:46:6a:c1:1f:14:69:
37:ea:aa:1e:e2:a7:53:7e:d7:94:71:a0:58:b7:aa:89:5a:ce:
2d:5f:7f:12:fa:61:8c:fc:7f:07:74:d3:d3:58:81:0e:cf:a8:
4e:e5:16:c5:b7:e4:03:0d:2b:cc:04:a9:29:1c:7d:2c:7b:e2:
fa:2d:52:a3:17:9c:a6:93:52:0f:5d:61:b5:06:23:6a:5f:99:
b3:cd:0c:41:58:59:e7:d7:32:81:1f:32:51:fa:3a:d1:3e:17:
30:b3:e8:5a:3c:c1:62:5a:bf:63:0c:e8:53:b2:ec:82:60:a0:
b5:c6:dc:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:39 2026 by rpki-client