Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: 8/fOQMWTqW9Alt0rqLIC84RFcqubkAIxSecMrnU4/fM=
Subject key identifier: A6:5C:B7:F0:64:75:35:37:46:7B:97:06:8C:B0:1A:E0:80:62:B7:80
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 01A1336B7B2DAB23ED86B1E9A4F06D3F72A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 19F3
Signing time: Tue 13 Oct 2026 04:00:44 +0000
Manifest this update: Tue 13 Oct 2026 04:00:44 +0000
Manifest next update: Wed 14 Oct 2026 04:00:44 +0000
Files and hashes: 1: MYb8VAECnaCGoqYg036Ww2frkMM.roa (hash: JPX2kf+QL+uvDn6HBV8cAFTbeXUIBEUW2fYqImCC42M=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: TH8i14Or0E0ZDx12giEqwjuZfQDXpripANivq6Ml4Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:6b:7b:2d:ab:23:ed:86:b1:e9:a4:f0:6d:3f:72:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Oct 13 04:00:44 2026 GMT
Not After : Oct 14 04:00:44 2026 GMT
Subject: CN=a65cb7f064753537467b97068cb01ae08062b780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:74:18:ec:31:4a:fe:45:eb:cf:5f:bf:fa:
77:6e:31:bd:24:83:d7:50:8d:9b:a8:ad:05:e8:ef:
5f:a7:de:89:4b:b2:00:fc:45:9e:f7:df:0c:6d:2f:
a1:d0:10:06:10:b7:30:54:a7:8f:73:92:76:b9:37:
94:62:e0:ad:ba:82:18:af:10:a9:b5:f3:59:2f:92:
9c:29:90:14:2c:75:9d:7b:f0:10:93:f7:d4:cb:d6:
4a:96:f5:ba:9a:07:f5:0d:ac:9b:1a:6d:a2:20:f7:
20:9a:f9:67:b8:06:30:81:a3:f5:a9:3f:34:8c:6b:
e2:89:12:b6:bb:de:ee:5c:ca:8e:e9:af:e3:e6:48:
10:e4:93:1b:e1:f7:2d:8a:08:6a:00:05:54:b9:b2:
68:f0:3c:de:54:8a:ff:13:51:db:e5:e4:c2:3a:30:
7e:4d:44:93:5e:99:2a:1f:e0:fa:ee:4a:4c:d7:f3:
d5:62:59:6a:a3:ab:24:3e:4b:db:0f:39:8b:bc:37:
cb:11:a5:ae:dd:9f:88:7f:0b:c9:d6:e0:5e:45:83:
59:91:19:8a:db:41:e2:9c:25:95:9c:a1:61:f2:9f:
34:ad:11:fb:de:88:c4:7e:04:11:21:a7:74:5c:55:
09:48:ed:73:56:18:5a:c4:77:18:83:ee:b8:0c:89:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:5C:B7:F0:64:75:35:37:46:7B:97:06:8C:B0:1A:E0:80:62:B7:80
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:e4:5e:bc:3d:41:91:0f:60:4d:70:c9:45:23:d5:5a:14:de:
ff:85:b5:00:57:63:f6:9e:5b:81:32:ab:1f:8f:df:99:69:d5:
39:1d:5a:5d:e5:22:3a:0f:0d:5e:c6:33:35:3b:04:30:0c:99:
03:b0:b4:35:f4:30:61:cf:6c:9d:b2:08:3c:76:8e:91:bd:f1:
9b:28:ef:f9:9f:99:c3:d6:23:7c:9a:2c:c7:30:17:de:28:c7:
61:50:ab:42:2d:65:ef:10:ac:10:a5:df:79:a5:48:94:e5:74:
f8:be:c0:9f:b7:69:c1:c8:52:40:ac:1d:ca:ed:cd:34:b8:72:
ad:ad:6c:65:6d:bf:21:2b:83:d1:a3:c1:2c:65:e1:64:d8:4e:
95:ff:ac:32:cd:23:ed:60:bb:23:50:e1:7a:a0:d4:37:80:ff:
9d:c7:f8:f5:a2:ad:7a:d7:9d:65:f9:cc:04:a3:68:af:e8:71:
03:a6:13:44:6d:e5:6c:45:44:69:a0:71:11:55:39:12:25:cc:
d3:c3:19:e1:bc:3f:8e:3b:76:49:97:30:ea:72:76:de:6a:0d:
ef:fa:ed:90:42:b4:b2:3c:4f:db:79:fc:28:3e:a6:42:4b:9c:
e1:fa:a2:22:19:3e:28:4d:f8:4e:5b:44:4b:3f:cd:a5:e4:55:
2e:d9:bc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:39:44 2026 by rpki-client