Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
File: RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft (raw, json)
Hash identifier: 09puXdLZ5fjj1kPUZlK2nG7pjOQRtbX/0FZZtOSEFP8=
Subject key identifier: D6:4C:32:43:89:AC:CD:8C:3C:CA:16:F0:8C:ED:E4:78:21:BC:48:25
Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
Certificate issuer: /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Certificate serial: 019D99996A0DF49091FC6E4D8B9B08B503F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
Manifest number: 155A
Signing time: Fri 17 Apr 2026 04:01:01 +0000
Manifest this update: Fri 17 Apr 2026 04:01:01 +0000
Manifest next update: Sat 18 Apr 2026 04:01:01 +0000
Files and hashes: 1: RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl (hash: rbgYojapZMaNHGqUcQUbjT8ESJz9I1vFU/iZOneOFCE=)
2: hZKAqR6QknkFASXf8FpEd_mKZFc.roa (hash: KzMYcZGAhPvDwgQOpxUt3D4xmzyN9ctcfUksHbupIAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:6a:0d:f4:90:91:fc:6e:4d:8b:9b:08:b5:03:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Validity
Not Before: Apr 17 04:01:01 2026 GMT
Not After : Apr 18 04:01:01 2026 GMT
Subject: CN=d64c324389accd8c3cca16f08cede47821bc4825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:eb:5e:91:6c:94:49:7a:fb:08:5d:32:04:90:
b6:99:be:f9:65:d6:8d:1b:4a:39:c5:f3:66:90:67:
89:95:fa:41:db:ce:99:ef:99:4e:2b:61:cc:c7:21:
2b:c8:2c:23:b8:43:eb:b0:05:50:28:6f:48:8d:80:
0c:6c:ee:f6:70:4f:c6:4c:17:99:65:5a:46:a7:64:
9c:17:c0:e4:b3:3c:52:b9:e0:7f:de:97:70:fb:e2:
2a:1d:66:92:e5:26:95:fb:a7:32:79:ec:b4:83:f3:
5d:a3:c5:1a:c5:d0:17:03:d4:0f:c0:f0:07:27:54:
a3:c1:6b:b5:34:eb:8e:10:ec:db:48:36:2f:87:88:
36:e3:52:3e:7a:c6:91:34:df:a8:82:25:e5:bd:dd:
a4:3b:da:39:76:61:ac:63:73:57:c0:f3:00:23:3a:
41:07:ae:e4:de:38:50:5d:7a:3d:2c:f6:a1:97:02:
b2:a8:29:7e:48:92:c5:b9:6c:4e:b9:9c:c6:88:e5:
92:39:6f:32:74:b5:a2:c2:38:5b:8b:6f:70:e3:32:
f5:c2:7b:a1:1c:b6:1b:8d:38:d1:03:c5:ee:35:a6:
27:58:37:9f:20:ff:1f:14:61:6c:92:bc:73:23:7d:
1e:ce:f5:c3:77:f4:c7:eb:de:4c:d8:48:05:7e:08:
22:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4C:32:43:89:AC:CD:8C:3C:CA:16:F0:8C:ED:E4:78:21:BC:48:25
X509v3 Authority Key Identifier:
keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:06:a3:37:a0:f3:56:ea:58:f7:d5:bb:0e:a2:d6:15:fc:0d:
57:5a:d9:bf:5e:3d:a3:26:87:35:32:8b:f8:47:ce:52:5d:bd:
ee:aa:be:31:b2:6d:bc:42:78:be:25:4f:47:93:ae:52:a1:13:
3e:6a:2a:f3:c3:a2:94:6b:66:f9:93:c6:0a:19:3d:4c:50:68:
6a:9d:f2:8a:60:11:18:30:af:fd:5e:7d:f5:d3:25:14:53:54:
fd:d0:8c:db:94:1a:74:34:de:8e:7d:d8:c7:15:52:42:71:c1:
66:5d:11:ce:7c:4b:0e:61:ac:6e:89:10:1e:1d:10:a5:1d:1a:
8a:57:ad:b5:a3:66:fa:89:aa:16:ab:60:f5:12:6e:df:86:9f:
88:cc:b6:8d:6e:ad:18:22:9c:7b:2a:e1:75:a4:80:01:51:1c:
0f:9a:2c:86:c1:5c:61:31:ee:ee:48:18:a2:ba:af:dd:d7:5d:
15:e4:4b:b2:76:33:38:b4:4c:ad:0d:c5:4c:5b:d7:be:ba:0a:
a9:5e:eb:79:e7:ac:7b:d5:8c:50:0f:8a:c5:6f:f1:2d:ea:d1:
a4:2b:2a:b3:71:51:95:19:e4:e9:ca:23:79:72:ce:15:53:e6:
5b:91:2e:c1:52:24:f3:3c:eb:4c:ff:cc:10:f7:19:b3:fb:1b:
d4:ee:d7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:23:04 2026 by rpki-client