
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
File: RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft (raw, json)
Hash identifier: 27Mkc7WlBhqH6d2nZG9uTj7T4GgXSseM0t1STJb2mrs=
Subject key identifier: A9:2C:6F:9A:B1:A7:EC:9E:38:D7:E1:34:9B:E8:FE:17:03:98:53:6B
Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
Certificate issuer: /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Certificate serial: 019CAFED02AC65ADC93983AB86D56CE7D6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
Manifest number: 14E1
Signing time: Mon 02 Mar 2026 19:01:11 +0000
Manifest this update: Mon 02 Mar 2026 19:01:11 +0000
Manifest next update: Tue 03 Mar 2026 19:01:11 +0000
Files and hashes: 1: RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl (hash: ESLlaNYlVxQ2JwtYsQkHWJ0Avk3CLa+DWTM/EOdBbwE=)
2: hZKAqR6QknkFASXf8FpEd_mKZFc.roa (hash: KzMYcZGAhPvDwgQOpxUt3D4xmzyN9ctcfUksHbupIAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:ed:02:ac:65:ad:c9:39:83:ab:86:d5:6c:e7:d6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Validity
Not Before: Mar 2 19:01:11 2026 GMT
Not After : Mar 3 19:01:11 2026 GMT
Subject: CN=a92c6f9ab1a7ec9e38d7e1349be8fe170398536b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dc:9d:33:6b:a5:dd:ed:20:bd:f6:86:c2:ae:
3e:dd:00:ae:d9:4b:ec:bf:4c:c1:7f:f6:0d:56:93:
5e:6b:51:9f:ca:69:2a:54:ff:3c:73:6e:86:83:6f:
14:c9:33:dd:a1:da:9c:d0:e2:e4:ff:3c:0a:13:a5:
1e:39:e2:36:02:d8:f1:d0:a1:f4:a2:04:81:7d:57:
f1:c4:04:63:21:04:37:99:f1:ec:dc:5a:d1:09:15:
18:6d:e8:43:65:84:a6:dc:8e:ac:8b:cb:53:1b:fa:
00:b3:55:80:67:2e:45:b4:07:fa:11:94:e3:1d:ba:
2a:58:3f:fe:c0:59:13:3c:80:85:65:0b:59:ee:a2:
4d:1e:cb:7d:f3:00:26:4d:7b:8e:9e:1b:e3:6f:a3:
78:ea:03:40:40:51:42:0a:5e:f4:96:da:5b:e6:db:
7d:af:95:49:4f:e2:7a:f7:23:92:83:95:ac:95:37:
4c:7e:17:b7:18:bb:fd:ab:95:6a:f1:a3:a4:17:64:
72:25:76:52:2f:b1:b8:df:2c:b4:70:6f:c8:0a:0a:
55:ba:84:ed:0d:ea:e1:5e:f4:c5:aa:6f:bc:15:85:
b0:fa:3e:26:53:21:67:ca:5d:52:91:4c:49:64:ef:
33:43:50:55:9f:91:7d:35:e3:8e:48:df:01:7b:10:
a9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2C:6F:9A:B1:A7:EC:9E:38:D7:E1:34:9B:E8:FE:17:03:98:53:6B
X509v3 Authority Key Identifier:
keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:48:29:81:0d:41:16:13:38:b5:97:26:76:05:0e:bc:91:9a:
37:60:d0:4d:3a:fc:a1:3e:f7:de:cd:9e:db:ab:89:d4:ca:33:
28:cb:50:36:e9:22:3b:d6:0a:14:00:cd:fc:00:79:fe:37:bf:
26:e0:3c:10:60:28:08:e4:2a:ff:ae:20:87:8b:33:2e:64:bb:
ba:fb:5b:8c:6f:5b:e7:e1:7e:1a:dd:0b:15:8a:27:60:c5:c8:
62:23:10:9c:6e:11:65:97:89:b2:9d:90:e8:d6:91:16:61:fa:
61:2f:78:bd:07:a8:6b:b8:c2:43:40:e5:a4:c8:bd:b8:e4:c3:
f7:1e:c7:ca:ff:97:24:10:7d:64:df:2a:ee:82:29:21:33:de:
b9:e7:c0:42:fc:39:25:af:0e:c1:f3:36:30:ab:d0:47:a5:3e:
56:bd:f2:73:42:f9:02:5b:2e:09:9a:71:0e:9e:28:e4:3b:c5:
04:bf:0b:40:8b:69:99:24:9f:55:3c:42:56:de:ad:c6:04:e0:
5e:28:0a:0b:1a:23:b6:b1:cf:53:a5:4d:76:7a:91:04:08:6b:
16:d0:a6:2b:7e:7e:2f:a7:10:dc:11:a9:dd:e0:d0:d4:c5:8a:
94:47:22:59:18:c4:b5:92:d9:d2:c2:e1:80:36:08:d3:0d:31:
4f:1d:2e:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyv7QKsZa3JOYOrhtVs59avMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MTIwN2EzZWVmMmI0NGY4ZTI3MzFiN2IwYWM3ZDE3MTZl
MzU1YzUwHhcNMjYwMzAyMTkwMTExWhcNMjYwMzAzMTkwMTExWjAzMTEwLwYDVQQD
EyhhOTJjNmY5YWIxYTdlYzllMzhkN2UxMzQ5YmU4ZmUxNzAzOTg1MzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dydM2ul3e0gvfaGwq4+3QCu2Uvs
v0zBf/YNVpNea1GfymkqVP88c26Gg28UyTPdodqc0OLk/zwKE6UeOeI2Atjx0KH0
ogSBfVfxxARjIQQ3mfHs3FrRCRUYbehDZYSm3I6si8tTG/oAs1WAZy5FtAf6EZTj
HboqWD/+wFkTPICFZQtZ7qJNHst98wAmTXuOnhvjb6N46gNAQFFCCl70ltpb5tt9
r5VJT+J69yOSg5WslTdMfhe3GLv9q5Vq8aOkF2RyJXZSL7G43yy0cG/ICgpVuoTt
DerhXvTFqm+8FYWw+j4mUyFnyl1SkUxJZO8zQ1BVn5F9NeOOSN8BexCplwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKksb5qxp+yeONfhNJvo/hcDmFNrMB8GA1UdIwQY
MBaAFEYSB6Pu8rRPjicxt7CsfRcW41XFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUt
MWM4Y2U3YzMzYWMwLzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC8zOGMxOTgtMGYxYi00YzU5LTgxZmUtMWM4Y2U3YzMzYWMw
LzEvUmhJSG8tN3l0RS1PSnpHM3NLeDlGeGJqVmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEgpgQ1B
FhM4tZcmdgUOvJGaN2DQTTr8oT733s2e26uJ1MozKMtQNukiO9YKFADN/AB5/je/
JuA8EGAoCOQq/64gh4szLmS7uvtbjG9b5+F+Gt0LFYonYMXIYiMQnG4RZZeJsp2Q
6NaRFmH6YS94vQeoa7jCQ0DlpMi9uOTD9x7Hyv+XJBB9ZN8q7oIpITPeuefAQvw5
Ja8OwfM2MKvQR6U+Vr3yc0L5AlsuCZpxDp4o5DvFBL8LQItpmSSfVTxCVt6txgTg
XigKCxojtrHPU6VNdnqRBAhrFtCmK35+L6cQ3BGp3eDQ1MWKlEciWRjEtZLZ0sLh
gDYI0w0xTx0u1Q==
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:10:34 2026 by rpki-client