Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: xkQtddBqts3Z+XkJUcsREFWvBwBsB7sA2vBy4r+Towc=
Subject key identifier: 12:2A:D0:05:69:C1:FE:D0:56:10:29:BC:D2:CA:27:08:FC:5A:72:6C
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 019D9C2D28A82182AC873656D0A91C52D383
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 1817
Signing time: Fri 17 Apr 2026 16:01:38 +0000
Manifest this update: Fri 17 Apr 2026 16:01:38 +0000
Manifest next update: Sat 18 Apr 2026 16:01:38 +0000
Files and hashes: 1: MYb8VAECnaCGoqYg036Ww2frkMM.roa (hash: JPX2kf+QL+uvDn6HBV8cAFTbeXUIBEUW2fYqImCC42M=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: s0Px2ew5LCkF52huppxuldeo98+2/cdTA6YMv/0MXU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:28:a8:21:82:ac:87:36:56:d0:a9:1c:52:d3:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Apr 17 16:01:38 2026 GMT
Not After : Apr 18 16:01:38 2026 GMT
Subject: CN=122ad00569c1fed0561029bcd2ca2708fc5a726c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2b:17:14:0e:5a:d3:c2:10:71:ff:a1:8f:ee:
f4:f1:32:00:6b:4f:c4:88:b3:45:bd:3e:94:80:74:
c7:b5:82:ca:ff:de:4c:99:ab:4e:b4:a6:99:73:8d:
3e:37:a5:4d:0a:a4:36:f1:19:e3:7b:a1:2f:3c:4b:
6f:cc:4b:f8:41:68:ad:54:28:a3:df:87:5b:b7:e2:
9c:be:15:8e:ad:fa:8c:18:e8:f8:a0:37:a3:6c:6c:
49:54:46:41:3a:55:4f:c0:fb:0b:67:2f:bc:16:77:
10:04:1f:c9:8b:43:b5:42:82:cd:41:ff:49:92:f6:
86:21:3b:6f:b9:4f:f4:a0:8c:2f:95:f7:d0:b3:a2:
30:65:c6:cb:93:ac:e7:2a:cb:34:53:a0:c7:da:71:
63:76:28:21:b4:fe:4e:08:1e:3a:ee:a4:22:21:09:
64:36:94:3b:ae:3d:06:99:8b:f1:40:e6:15:1b:45:
f8:ec:aa:bf:2a:92:4d:3f:f8:e2:b3:a0:71:0b:8c:
d9:99:d0:a1:9d:26:f3:cb:06:77:84:44:03:26:38:
49:17:6c:e9:a1:65:cc:ae:8f:77:06:24:89:3a:a3:
7c:13:e6:7a:bc:af:35:b6:34:d2:bf:e4:28:61:bd:
9d:b5:15:be:33:70:54:76:27:49:92:26:fc:0a:27:
c0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2A:D0:05:69:C1:FE:D0:56:10:29:BC:D2:CA:27:08:FC:5A:72:6C
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:10:24:ff:44:0f:eb:24:35:2c:75:eb:fe:80:fe:8e:fc:a5:
2f:79:5b:a7:dd:86:cd:94:4e:cf:e0:1d:65:9f:1d:9a:d7:28:
36:22:6e:1d:8b:a6:19:cd:5e:08:fb:87:3e:07:10:66:d6:79:
a7:95:11:58:2a:78:ab:84:5f:58:0e:9d:bc:68:62:3d:d4:da:
36:d8:21:bf:ce:ed:d6:7e:5b:2f:c3:f6:c1:50:84:5c:38:b2:
03:6d:c1:cd:d0:85:d6:27:21:bc:e1:fb:70:78:e6:5d:e4:9a:
98:13:1d:1b:08:b0:56:94:fb:93:4c:f7:a9:83:38:7a:a9:0d:
d9:78:70:fb:31:cc:f7:b0:bc:4c:9b:c7:9c:d3:d3:94:d3:88:
f6:b3:54:00:2a:60:69:62:65:ca:31:d5:e2:d7:d1:e9:31:05:
a6:f5:e1:4a:5f:d6:0b:b2:50:14:d5:a1:12:42:a7:ff:f0:dd:
8c:59:e8:93:1d:34:92:4f:81:76:00:92:50:b6:ef:98:c9:16:
5a:6c:6f:16:04:95:08:ce:6b:50:6f:7e:e5:7c:6c:8d:9f:1b:
4b:b8:68:a8:fa:3e:3e:6d:c4:6a:52:36:4a:cc:34:07:85:03:
eb:d0:fc:45:20:26:2d:1c:61:dd:e1:fa:46:46:07:03:4a:3b:
f8:4c:97:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:23:41 2026 by rpki-client