Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
File: rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft (raw, json)
Hash identifier: HRfCy8K8yXAgMFmcYWM5uKwshERHeTbvz0mHIu5zOMM=
Subject key identifier: 01:1A:F4:C6:F1:10:E9:EE:89:24:F5:1D:63:6F:D5:30:A7:AC:16:98
Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
Certificate issuer: /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Certificate serial: 019CAAC6D5FE0EE467A4773D57DF82244678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:01:23 +0000
Manifest this update: Sun 01 Mar 2026 19:01:23 +0000
Manifest next update: Mon 02 Mar 2026 19:01:23 +0000
Files and hashes: 1: cuuVCevCVUzGr-kAkN3m1WE9FDE.roa (hash: D4SsZHbQIEHtfRHXbg7otJ679eXTgRTgVgeBr6U9wDI=)
2: rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl (hash: ZYyf1CDeTr9d3M4n0YA6UJDrSFdz6Rr2I8ppyPyB8JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d5:fe:0e:e4:67:a4:77:3d:57:df:82:24:46:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Validity
Not Before: Mar 1 19:01:23 2026 GMT
Not After : Mar 2 19:01:23 2026 GMT
Subject: CN=011af4c6f110e9ee8924f51d636fd530a7ac1698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:43:de:fa:da:da:e9:13:7e:e6:65:1f:a9:
3b:8c:9e:2b:d7:53:24:32:68:61:41:6b:1b:e0:4c:
f7:df:16:68:33:db:b6:e5:cf:47:c0:77:49:78:52:
50:5c:1d:5a:56:1e:db:35:72:8f:f3:e7:77:8b:6d:
35:c0:fc:51:1c:a9:b3:96:39:25:c8:0a:39:51:6a:
36:63:7f:fd:04:8d:be:38:a3:48:98:06:90:78:30:
8e:85:31:e5:d9:46:21:31:f9:0d:6f:bf:09:b1:99:
01:80:2c:82:b9:4f:19:7e:a2:07:a8:58:46:d8:0c:
ce:2c:81:4c:5a:3b:a0:e4:25:e0:ca:48:e3:ed:92:
8d:89:ec:71:72:4b:d9:26:b8:83:5a:28:7d:cb:a9:
40:a9:f4:3a:e4:c6:b7:e0:d8:f8:c9:16:c1:9d:b3:
0d:2f:be:42:d8:4f:04:c4:13:22:5f:7e:db:d8:18:
26:eb:06:ad:60:7b:20:83:99:2a:ae:38:e6:d8:1b:
28:4a:ba:8e:78:65:eb:f8:21:a4:6b:6f:88:ef:64:
37:1e:69:c1:50:c7:68:c2:4a:85:43:96:bf:a4:ce:
8f:72:4f:e4:a6:04:be:7d:21:30:fc:d0:e7:eb:d5:
97:22:dc:f5:3c:d0:58:74:5c:ab:d0:f4:83:db:f5:
b7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:1A:F4:C6:F1:10:E9:EE:89:24:F5:1D:63:6F:D5:30:A7:AC:16:98
X509v3 Authority Key Identifier:
keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e8:8c:06:a3:4f:ca:bd:ae:d7:1e:e3:03:45:b9:aa:b3:a6:
05:e0:cd:81:c1:6b:3f:89:60:1e:62:ab:4f:63:03:36:f7:48:
de:41:7c:99:45:cb:82:37:03:54:74:36:27:66:e6:82:8d:d6:
8d:4c:b4:75:88:72:81:3b:db:89:ac:a1:08:7c:53:8a:21:93:
18:9a:85:7c:59:48:ad:18:d9:30:9a:ce:0c:47:ef:07:bc:28:
1f:48:1a:37:ce:08:18:fe:f0:84:68:87:2f:8e:3c:44:5b:69:
70:e1:ee:ac:3a:d8:fb:0b:3c:16:3c:fa:8e:65:e6:2d:cd:13:
dc:67:72:6f:e4:6d:5b:de:58:f4:cd:7c:a5:a6:7e:e0:70:e1:
10:ec:93:c2:2c:e6:c0:4d:de:81:08:82:00:f3:a6:b3:0c:f4:
96:f8:76:bd:c0:8f:98:bd:ee:fa:9a:90:b8:d3:80:10:60:89:
cd:a8:a2:27:60:45:68:7b:e1:df:8d:08:ce:60:12:a4:26:51:
0c:c5:a9:78:b7:ea:27:87:ab:3e:ec:7a:6f:3e:11:4d:65:7b:
cc:b5:c0:c2:94:a7:ff:12:e2:16:60:8a:9c:6b:c4:b8:ba:0f:
29:1c:53:28:c0:66:c1:ac:28:3b:8e:bf:37:5c:10:e3:b5:a5:
2a:e4:39:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:20 2026 by rpki-client