Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
File: RhX5mPdHJp43r32hEIBhJMmX3Fc.mft (raw, json)
Hash identifier: vKqRHkBB8LCxGwW8wECgwGNVoPa5ZpR2GCK31T8FMLA=
Subject key identifier: 6F:CA:4E:08:4E:BB:EC:0E:33:26:11:9F:F2:80:EF:58:B0:A4:A0:F1
Authority key identifier: 46:15:F9:98:F7:47:26:9E:37:AF:7D:A1:10:80:61:24:C9:97:DC:57
Certificate issuer: /CN=4615f998f747269e37af7da110806124c997dc57
Certificate serial: 01A0C17AC21BCEE527543108C9F85611971D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhX5mPdHJp43r32hEIBhJMmX3Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
Manifest number: 013C
Signing time: Mon 21 Sep 2026 01:00:42 +0000
Manifest this update: Mon 21 Sep 2026 01:00:42 +0000
Manifest next update: Tue 22 Sep 2026 01:00:42 +0000
Files and hashes: 1: RhX5mPdHJp43r32hEIBhJMmX3Fc.crl (hash: jTl9L2sPlCK6d7YcIgj4ohKV62C4I8KVhCxINGAL+VA=)
2: dLlLozq_LxYh46bnmgkvjvoWmpw.roa (hash: h2aFWt98BJV3iCLAz94s4Esgtecs4nrZqTq2dKOirQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhX5mPdHJp43r32hEIBhJMmX3Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:c2:1b:ce:e5:27:54:31:08:c9:f8:56:11:97:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4615f998f747269e37af7da110806124c997dc57
Validity
Not Before: Sep 21 01:00:42 2026 GMT
Not After : Sep 22 01:00:42 2026 GMT
Subject: CN=6fca4e084ebbec0e3326119ff280ef58b0a4a0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c8:f9:b6:ef:1f:71:12:c1:2b:b6:3e:ab:3f:
7a:7d:ea:99:6c:7f:c1:25:69:ef:53:1c:d1:71:6e:
89:15:42:8e:d6:84:2f:9f:1e:c9:b8:2a:ee:21:df:
ba:a9:d2:e4:ad:e5:6f:2c:72:5f:1f:4a:06:33:e5:
46:77:e3:75:a0:43:9c:89:80:9c:18:1a:c5:3f:2a:
00:9c:b3:77:06:b7:b8:b5:c8:f9:4c:01:48:6b:90:
e1:ba:1f:a1:3b:fb:4a:92:56:83:fe:8a:bf:b0:92:
9b:2b:ce:a5:ef:39:58:c4:7c:d9:1b:14:ee:65:b3:
fe:a3:c6:0a:99:4f:69:bb:16:15:71:fc:25:ee:09:
4b:e7:f6:2f:48:2c:3b:3a:77:bc:1e:0c:22:99:b5:
84:a1:55:f2:ae:ef:2f:0a:17:d6:6b:61:6d:8e:2a:
ed:73:99:45:f1:9b:cd:71:36:f8:ee:fd:1a:cd:74:
2f:a6:ee:84:aa:3c:e5:64:30:5b:f9:cc:f4:84:3a:
ea:78:12:19:98:fc:e1:03:c9:cb:7d:e9:d3:93:83:
4e:db:f7:f3:79:c9:b4:8a:6d:0f:36:bc:34:57:7e:
7a:4c:90:76:02:c3:9d:ce:f9:28:48:ad:2c:21:a3:
1b:e5:58:0d:f8:95:0b:42:56:21:fe:46:e8:fe:22:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:CA:4E:08:4E:BB:EC:0E:33:26:11:9F:F2:80:EF:58:B0:A4:A0:F1
X509v3 Authority Key Identifier:
keyid:46:15:F9:98:F7:47:26:9E:37:AF:7D:A1:10:80:61:24:C9:97:DC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhX5mPdHJp43r32hEIBhJMmX3Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:77:3c:35:40:29:8b:b4:27:8e:b9:c9:d7:67:89:4e:c6:0a:
04:9a:af:f7:e3:f7:03:bc:91:49:24:4b:37:0c:fd:f9:c2:88:
62:a3:b3:0b:3f:e5:8b:00:7f:29:be:7f:04:40:dc:01:81:30:
40:85:0a:c8:cf:e0:58:d0:44:67:0f:16:68:e0:75:c0:55:ae:
35:f0:18:60:4d:d2:93:ed:2d:9f:ad:d1:2e:2c:32:47:73:b5:
3d:fc:c7:05:6f:30:23:25:51:df:19:ae:0d:4f:3f:a3:24:e7:
74:88:b0:21:d3:4d:ef:42:7b:bb:b7:d4:ba:27:cf:64:64:93:
e2:32:3d:9d:e8:ca:3f:d3:f7:cd:c3:11:48:36:fb:c2:c3:1e:
49:da:4b:8d:a3:6a:a5:ff:cc:98:f0:17:dc:c0:3f:23:6d:f8:
ff:c8:e0:65:57:06:91:61:b1:de:d4:42:21:7c:fc:17:df:a2:
1d:06:d9:ef:c6:83:86:37:70:42:92:cf:9c:38:d5:83:bc:b5:
0a:d9:06:59:c9:16:f2:90:30:b4:b1:f2:c8:00:df:6d:11:43:
a4:a9:a3:4c:b3:92:93:b6:85:21:78:1b:f3:66:e3:5c:a9:9a:
db:ba:2a:e8:65:5e:d1:2a:c2:0c:e0:1f:08:cc:12:c1:28:a4:
53:04:73:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:55:25 2026 by rpki-client