
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
File: RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json)
Hash identifier: kJ+j1eJhlXipMrpIxPcQfUKYvmvMNweYqpW4c23yvkc=
Subject key identifier: 35:14:6A:4A:F9:F1:8A:5A:45:01:16:95:DA:19:ED:D0:6D:EA:7C:E0
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Certificate issuer: /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial: 019DA29C6007A49F8575BBB3DCA3A260BE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
Manifest number: 079E
Signing time: Sat 18 Apr 2026 22:00:50 +0000
Manifest this update: Sat 18 Apr 2026 22:00:50 +0000
Manifest next update: Sun 19 Apr 2026 22:00:50 +0000
Files and hashes: 1: LH31eWblzc9N88J9ihjcAEm2GSU.roa (hash: aA7SpWPZXBL5dHzOmD7+zSVA2s9TImnC5p7oJrbvDXA=)
2: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: R2BflQrqEDr5KsmyvTimyUEv72WV3EsRbeag8y2tmUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:60:07:a4:9f:85:75:bb:b3:dc:a3:a2:60:be:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Validity
Not Before: Apr 18 22:00:50 2026 GMT
Not After : Apr 19 22:00:50 2026 GMT
Subject: CN=35146a4af9f18a5a45011695da19edd06dea7ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:30:4a:15:01:68:e7:b5:7f:91:f4:70:5c:22:
e0:fd:2a:94:e4:f0:af:58:5d:fa:e1:c1:a6:50:5b:
32:f8:51:cb:c9:5a:92:c1:a4:2d:ec:ca:d4:d1:4e:
49:4e:c8:66:8c:cb:70:f8:f1:41:99:69:5c:c4:64:
66:fd:a9:2d:aa:41:99:51:a7:4e:b0:40:d4:38:92:
ee:72:fb:2e:f6:36:1c:84:c8:dc:29:5a:83:a0:d5:
26:37:ec:8e:b0:54:e4:e7:88:9a:94:fc:e8:dc:d6:
99:68:c9:f8:42:22:af:dd:20:58:7d:0b:c3:26:49:
0c:68:fb:85:6c:89:bc:f4:cc:c7:85:a0:6d:0e:a8:
cc:84:0c:10:09:47:11:4d:06:f2:31:5d:14:ca:01:
fa:21:ef:4b:68:1d:fe:5a:ef:56:4b:4c:f5:39:e8:
dd:81:c0:69:0c:fe:d0:73:ac:f4:bc:2f:49:5f:38:
cc:fa:80:90:6f:d8:02:24:33:ff:be:90:5c:b1:22:
9a:2a:90:95:c7:c2:dd:85:06:9f:53:b1:e1:b2:fd:
61:a0:c2:cc:a2:d7:c0:d2:db:71:47:3d:c3:c4:71:
7b:d3:59:9b:ef:35:b5:49:f1:26:0c:fc:d8:06:ae:
c2:65:9d:ba:06:ce:98:a9:05:6b:6c:fa:85:17:dd:
70:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:14:6A:4A:F9:F1:8A:5A:45:01:16:95:DA:19:ED:D0:6D:EA:7C:E0
X509v3 Authority Key Identifier:
keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:69:48:c2:e8:09:04:9d:0f:87:5e:1f:73:fa:0c:28:c5:75:
65:f5:f2:05:34:93:88:9f:4b:e1:0e:b7:69:f7:b6:ba:74:b2:
af:3f:99:cf:4e:8b:d3:d2:ed:2d:f1:a8:40:7f:77:f2:2a:3d:
e7:57:18:57:74:53:7b:7b:d5:ff:f4:a3:be:cd:0b:a8:b9:b6:
0c:9f:7e:3e:c6:6b:0c:96:f7:b5:3c:07:a2:1b:f3:6a:e2:f6:
1d:5e:70:3a:88:d3:0d:15:d5:91:7e:df:15:34:24:ae:2e:82:
5a:a4:2e:e2:ac:41:d2:f1:e4:54:43:f2:6d:19:1a:88:98:6d:
f6:54:67:60:3d:5d:f1:db:80:32:04:9b:82:7e:ee:13:73:bd:
85:cc:3f:8e:1c:d1:24:60:10:c2:de:34:5b:ef:07:2c:53:45:
bf:e7:4c:b7:f1:ee:17:d1:25:30:e4:27:cc:a8:24:31:47:41:
2e:0a:a5:0d:1c:81:79:05:dd:9f:cb:33:fa:73:9d:94:c9:fe:
2c:6d:8a:ea:e2:7e:d7:86:77:f7:5c:9d:d6:3a:c8:68:c6:70:
de:cf:af:fc:4e:3a:9d:47:89:ea:4e:7c:ee:a6:0b:9c:42:47:
36:9a:9e:24:04:b4:7e:84:28:a6:a2:44:d5:e6:0e:e6:51:10:
90:66:c3:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2inGAHpJ+Fdbuz3KOiYL53MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MTUzZThhYzQ2ZGI1Y2U1NzRiYTdlMzllODdlOGFmMDk2
YzFhODkwHhcNMjYwNDE4MjIwMDUwWhcNMjYwNDE5MjIwMDUwWjAzMTEwLwYDVQQD
EygzNTE0NmE0YWY5ZjE4YTVhNDUwMTE2OTVkYTE5ZWRkMDZkZWE3Y2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TBKFQFo57V/kfRwXCLg/SqU5PCv
WF364cGmUFsy+FHLyVqSwaQt7MrU0U5JTshmjMtw+PFBmWlcxGRm/aktqkGZUadO
sEDUOJLucvsu9jYchMjcKVqDoNUmN+yOsFTk54ialPzo3NaZaMn4QiKv3SBYfQvD
JkkMaPuFbIm89MzHhaBtDqjMhAwQCUcRTQbyMV0UygH6Ie9LaB3+Wu9WS0z1Oejd
gcBpDP7Qc6z0vC9JXzjM+oCQb9gCJDP/vpBcsSKaKpCVx8LdhQafU7Hhsv1hoMLM
otfA0ttxRz3DxHF701mb7zW1SfEmDPzYBq7CZZ26Bs6YqQVrbPqFF91wmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUUakr58YpaRQEWldoZ7dBt6nzgMB8GA1UdIwQY
MBaAFEYVPorEbbXOV0un456H6K8JbBqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhVLWlzUnR0YzVYUzZmam5vZm9yd2xzR29rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8wZDExNzItNGJiMi00OTJjLWI1MTEt
NzhkYzdiMmMzZTg4LzEvUmhVLWlzUnR0YzVYUzZmam5vZm9yd2xzR29rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8wZDExNzItNGJiMi00OTJjLWI1MTEtNzhkYzdiMmMzZTg4
LzEvUmhVLWlzUnR0YzVYUzZmam5vZm9yd2xzR29rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMmlIwugJ
BJ0Ph14fc/oMKMV1ZfXyBTSTiJ9L4Q63afe2unSyrz+Zz06L09LtLfGoQH938io9
51cYV3RTe3vV//Sjvs0LqLm2DJ9+PsZrDJb3tTwHohvzauL2HV5wOojTDRXVkX7f
FTQkri6CWqQu4qxB0vHkVEPybRkaiJht9lRnYD1d8duAMgSbgn7uE3O9hcw/jhzR
JGAQwt40W+8HLFNFv+dMt/HuF9ElMOQnzKgkMUdBLgqlDRyBeQXdn8sz+nOdlMn+
LG2K6uJ+14Z391yd1jrIaMZw3s+v/E46nUeJ6k587qYLnEJHNpqeJAS0foQopqJE
1eYO5lEQkGbDUw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:16 2026 by rpki-client