Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
File: RhX5mPdHJp43r32hEIBhJMmX3Fc.mft (raw, json)
Hash identifier: MS9wx/Enjo8CR2eYP+mGZ3f4og7n5i2UprazySZ2g4U=
Subject key identifier: 2D:4D:BB:A6:D6:EE:EF:E2:6C:64:62:2E:B5:07:B6:E8:F1:13:AF:01
Authority key identifier: 46:15:F9:98:F7:47:26:9E:37:AF:7D:A1:10:80:61:24:C9:97:DC:57
Certificate issuer: /CN=4615f998f747269e37af7da110806124c997dc57
Certificate serial: 019FA974C4FD248FD4AB467DBA0CB86CE755
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhX5mPdHJp43r32hEIBhJMmX3Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
Manifest number: AB
Signing time: Tue 28 Jul 2026 16:00:29 +0000
Manifest this update: Tue 28 Jul 2026 16:00:29 +0000
Manifest next update: Wed 29 Jul 2026 16:00:29 +0000
Files and hashes: 1: RhX5mPdHJp43r32hEIBhJMmX3Fc.crl (hash: Jk1d5/Ipuib7t6dgte02YtwuGwE79hOyKQrEbNJSwsQ=)
2: dLlLozq_LxYh46bnmgkvjvoWmpw.roa (hash: h2aFWt98BJV3iCLAz94s4Esgtecs4nrZqTq2dKOirQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhX5mPdHJp43r32hEIBhJMmX3Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:c4:fd:24:8f:d4:ab:46:7d:ba:0c:b8:6c:e7:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4615f998f747269e37af7da110806124c997dc57
Validity
Not Before: Jul 28 16:00:29 2026 GMT
Not After : Jul 29 16:00:29 2026 GMT
Subject: CN=2d4dbba6d6eeefe26c64622eb507b6e8f113af01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:05:54:4f:21:5a:72:77:9d:db:c8:90:09:
65:a7:b9:b9:1a:8d:08:91:8f:d3:2b:8b:a9:f1:68:
97:ac:2a:74:28:31:48:59:cf:4b:6e:a5:eb:94:eb:
0d:d3:22:4d:95:64:2d:ee:89:25:84:8a:14:7f:04:
0f:eb:4e:fc:b5:d6:4c:a3:4f:63:8c:c5:f7:a4:fa:
fa:8d:55:f1:4e:63:c1:26:56:93:71:0b:09:78:ac:
6e:0e:25:38:4f:52:c3:ab:34:c8:a4:be:9c:bb:d9:
1d:72:65:51:c7:73:38:a9:42:42:51:d0:45:82:aa:
9f:10:c5:b4:e4:75:bd:43:71:12:62:f2:b2:bf:a7:
64:e2:f9:65:7f:c5:f9:1a:10:93:ff:ac:c7:e3:a7:
ca:3a:20:0d:2f:12:cd:e8:fd:c8:5c:06:cd:9a:9e:
71:2b:cb:82:39:cf:95:b1:2f:88:e2:5c:10:55:45:
4f:aa:70:6c:f0:87:60:86:6f:f0:2d:1c:e4:89:25:
16:79:9a:6d:cd:a8:f8:30:52:5f:98:61:3f:85:2b:
e9:ad:4c:38:d8:3b:f3:1c:ab:21:41:0b:49:6c:ba:
ea:de:56:82:13:7d:c3:0d:9f:73:6f:4a:d1:2e:13:
6f:50:ca:5a:f4:63:7d:c7:a7:69:2d:ad:5d:84:85:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4D:BB:A6:D6:EE:EF:E2:6C:64:62:2E:B5:07:B6:E8:F1:13:AF:01
X509v3 Authority Key Identifier:
keyid:46:15:F9:98:F7:47:26:9E:37:AF:7D:A1:10:80:61:24:C9:97:DC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhX5mPdHJp43r32hEIBhJMmX3Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d5:e2:4e:27:25:8c:f4:e8:75:62:a7:a8:b6:ad:fe:c5:f6:
76:49:f4:0c:e5:7a:9c:c9:7c:ac:ff:4e:f6:86:75:9a:e1:26:
5c:88:4c:6a:3d:19:16:3f:32:e1:53:d2:cb:c1:01:17:69:32:
ac:5e:87:37:95:4f:09:0a:99:16:74:cd:9f:5c:85:f6:e2:56:
a9:4e:8d:01:ef:e0:10:42:b6:e6:94:3a:d7:6f:79:48:e3:7d:
0a:eb:fd:c4:32:2a:ea:84:6f:80:4f:5c:6d:bd:90:b2:8e:02:
19:3b:57:20:a9:05:d1:1b:f0:ca:2c:b7:f4:dd:c9:85:7e:33:
67:ec:9d:79:46:1a:73:33:67:7e:9d:96:df:45:94:1f:11:8a:
8e:08:12:5a:eb:d5:dc:04:ae:1e:4a:5b:cb:db:db:9e:a0:e6:
d0:f6:11:1a:44:c2:15:4f:9f:17:b4:87:df:1a:93:8d:f0:4c:
c8:ab:06:0e:bb:e8:16:06:4d:6c:19:57:9a:74:8c:54:d5:52:
1b:8a:2e:b8:5f:94:6f:44:9a:72:b6:8e:4b:91:6f:bb:fe:fb:
50:07:a5:2e:60:85:49:9e:e1:85:8c:51:ab:b8:95:68:dd:eb:
eb:12:59:40:20:cb:ac:83:84:12:02:22:bf:b8:dd:c0:68:ce:
fe:fe:36:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:06:15 2026 by rpki-client