Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
File: RhsmU4H0lIsYkofVpiySqpBU768.mft (raw, json)
Hash identifier: zQ2DZYxRJdDDSCsYlPa8NN1hFfSG+5ZiJyoefuVBBgE=
Subject key identifier: DA:66:F0:E5:31:9C:94:ED:D9:B7:F9:32:2B:26:D3:D1:DF:52:DB:D2
Authority key identifier: 46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
Certificate issuer: /CN=461b265381f4948b189287d5a62c92aa9054efaf
Certificate serial: 019EC36E757C495BD0E6E8790104EBC2EEB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
Manifest number: 0101
Signing time: Sun 14 Jun 2026 00:00:56 +0000
Manifest this update: Sun 14 Jun 2026 00:00:56 +0000
Manifest next update: Mon 15 Jun 2026 00:00:56 +0000
Files and hashes: 1: RhsmU4H0lIsYkofVpiySqpBU768.crl (hash: 1EqHg6iEsZxBIbsvPzu/jzTRyhWCJhwBlSxbfi4gwGA=)
2: Yz3FCqH3QHthq81f1DJuXfruXjM.roa (hash: EtlM1emQtHiqLpDRSd/JKMYJURZgwq+EqF92luYX6xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:75:7c:49:5b:d0:e6:e8:79:01:04:eb:c2:ee:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461b265381f4948b189287d5a62c92aa9054efaf
Validity
Not Before: Jun 14 00:00:56 2026 GMT
Not After : Jun 15 00:00:56 2026 GMT
Subject: CN=da66f0e5319c94edd9b7f9322b26d3d1df52dbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:a1:8f:ce:fc:14:10:95:78:b8:8f:62:1b:
37:66:c8:a3:ce:cb:ea:bd:15:5b:3c:99:03:5c:6b:
95:a3:a3:1a:24:2d:fa:c0:9c:12:9f:d3:3c:b4:98:
f3:4e:cb:ef:e7:6f:5a:cb:4c:e1:96:12:09:46:e0:
c2:a1:2b:e7:4d:c1:d4:e9:1b:d0:d2:2f:f6:0e:3f:
db:2a:a5:a4:ba:b8:84:5f:3d:80:f1:bb:2c:c0:b1:
75:73:06:75:97:f5:de:0d:92:90:87:3a:10:2b:f0:
41:0d:85:bb:20:83:1d:b7:50:cb:5e:44:d8:de:51:
04:6f:db:62:ac:1c:4e:64:26:5c:fe:44:21:30:36:
58:ff:f8:dd:4d:3e:44:76:a9:cd:d5:11:0c:13:5e:
77:5a:99:6a:5f:a1:08:eb:32:f4:d7:c4:69:d9:9c:
97:c0:14:17:dd:23:cb:aa:04:90:bc:00:7a:27:d7:
66:97:6a:eb:0e:18:fc:b8:c4:02:f6:80:d0:b5:1c:
13:de:4b:88:65:e0:41:a1:5d:d3:b5:9e:d6:7f:b9:
13:54:95:18:bd:52:98:f8:d8:28:eb:8c:3d:a0:82:
53:b3:26:2b:98:2d:ef:2e:21:79:79:8f:07:ca:5a:
d2:e0:ac:a3:cb:d2:69:95:b4:3d:35:2c:11:6b:42:
32:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:66:F0:E5:31:9C:94:ED:D9:B7:F9:32:2B:26:D3:D1:DF:52:DB:D2
X509v3 Authority Key Identifier:
keyid:46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:42:94:00:50:de:00:ea:fc:08:ba:ac:cf:5c:f9:3f:87:ab:
67:2b:de:c8:ad:1e:18:84:60:f8:9b:a1:c1:d9:c8:67:ad:71:
bb:12:dd:04:a9:4a:32:38:9f:a1:f3:a4:20:de:a6:f0:15:8f:
cc:0d:a4:6c:e8:2f:bb:a1:9c:67:06:ba:83:44:eb:59:c7:ef:
70:29:c9:16:60:be:48:2e:98:6a:c6:5b:ad:2a:18:85:6e:0b:
98:af:48:d8:dd:72:2e:79:e4:2c:54:35:12:60:ae:9d:85:84:
39:e6:11:0f:5d:00:da:9f:a4:78:79:ba:f6:45:f0:c5:42:12:
5d:cd:03:48:3f:d1:fb:2e:09:0b:77:9d:e4:53:f5:f0:6f:a3:
99:7b:9c:68:ee:86:49:e7:0d:09:13:74:11:74:9b:bd:45:7d:
b1:0f:b1:9e:39:eb:75:7d:25:8a:11:7d:57:a7:6f:74:8f:fb:
9d:70:bf:c3:26:a1:8b:e5:cc:1b:0f:30:8d:1d:c0:c6:70:65:
f4:46:be:1f:74:30:2b:0b:e0:f6:94:2c:f3:4d:78:0b:3a:df:
84:af:50:48:62:b4:e8:a5:15:a2:b1:90:76:59:66:12:61:e4:
2e:85:74:6f:2e:27:96:03:e0:f9:7b:33:7f:e5:46:e7:38:40:
59:74:87:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:56:01 2026 by rpki-client