Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
File: rlhan3aCaNb60MyHxgPMCsJrgbQ.mft (raw, json)
Hash identifier: k7iCbijmOXLLe4hM2NbXCU16O71knGqTKNOKqDHnwuM=
Subject key identifier: D7:21:B3:9B:EC:66:F4:3E:D7:23:96:60:FB:CA:91:30:24:3E:73:91
Authority key identifier: AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
Certificate issuer: /CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Certificate serial: 01A0CA46ABCA1966C41F8CE82CD2946F7B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:00:24 +0000
Manifest this update: Tue 22 Sep 2026 18:00:24 +0000
Manifest next update: Wed 23 Sep 2026 18:00:24 +0000
Files and hashes: 1: GuoMB_zJywmocFJnKvWUYbJRa48.roa (hash: k2hTVb7JpoVzJihpxeGxTk4yLmmOezOpphzp2CNKQaI=)
2: Sv0eeuDrY0VnfeDOcJuJ3wgg3iQ.roa (hash: 8rSLnwJU4pBMw2vuCjNXLhmsmomCnLncEO3ROsppLCw=)
3: rlhan3aCaNb60MyHxgPMCsJrgbQ.crl (hash: /CNWsQI3laA5HntXpu8idQ+vSR70RSZztMx8Htx4+kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:ab:ca:19:66:c4:1f:8c:e8:2c:d2:94:6f:7b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Validity
Not Before: Sep 22 18:00:24 2026 GMT
Not After : Sep 23 18:00:24 2026 GMT
Subject: CN=d721b39bec66f43ed7239660fbca9130243e7391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:7f:89:44:50:c0:76:3e:f7:83:85:d1:dc:
8d:51:0e:fc:22:d9:8a:07:b6:fc:2d:d3:3d:e2:8e:
b8:79:5e:ea:5d:5a:4a:9b:73:75:f8:24:55:a2:2e:
46:7b:65:87:71:c6:c8:d9:5c:e5:e2:f1:bb:db:5f:
e9:00:3e:f1:96:bf:7c:c0:08:f5:2e:6e:d4:32:f4:
6a:96:3c:ff:3e:18:50:12:35:3e:61:1b:85:c7:a1:
34:4e:e7:7f:e3:ca:af:16:92:eb:4b:dd:33:e6:2e:
cf:14:45:cc:09:8f:1d:1b:1a:db:65:af:ff:c0:83:
54:93:7a:d2:e8:88:ca:7c:58:ab:83:53:b8:f3:17:
2a:a3:02:67:4d:a9:fb:15:45:c8:fb:30:9c:29:43:
0f:42:9c:78:bf:88:5e:b5:52:29:e5:d7:c0:dd:ad:
19:ec:f1:a5:d0:83:da:b6:26:4e:e8:55:96:d8:b8:
c1:78:b2:22:b5:1b:ba:29:7e:ea:06:a2:a1:6f:7f:
e9:63:e4:ab:f3:dc:c9:eb:81:93:04:51:72:8c:6f:
74:23:5c:0f:76:d2:c0:0d:13:a0:ca:13:e2:53:d0:
01:6f:58:a5:5e:c8:14:17:a6:37:7b:83:30:06:81:
e2:a9:56:1c:5c:a9:a3:00:47:79:f9:d6:b5:4f:06:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:21:B3:9B:EC:66:F4:3E:D7:23:96:60:FB:CA:91:30:24:3E:73:91
X509v3 Authority Key Identifier:
keyid:AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:74:33:43:0b:0e:16:84:22:fa:29:d1:f5:2d:61:f6:26:d5:
b3:9e:de:0a:95:2b:d6:c1:5c:4c:f7:2b:17:c1:70:e8:86:87:
63:ee:2c:2e:6f:d9:a5:96:a6:09:1d:cf:9b:e5:7a:de:bc:ef:
1b:d5:1a:dc:51:03:2c:54:5b:74:a8:c5:ad:64:36:4d:08:75:
22:42:a8:1d:c5:5d:88:7c:6b:d9:5d:a7:cb:f8:e0:0a:93:96:
d7:e2:65:17:5b:7f:1b:1c:58:a7:28:2d:2f:f9:86:fa:04:3a:
48:4d:90:40:96:9e:78:42:3a:68:7e:90:b3:b2:3a:24:e1:ec:
b3:6a:e0:5c:10:32:e1:f1:80:af:7d:27:7b:b5:a0:57:9d:e0:
b1:2c:c4:fa:3a:3d:85:b3:78:bd:db:77:71:2c:ac:b5:26:c1:
a7:f3:1c:f1:4d:93:a8:ad:65:59:ae:db:6e:75:c6:41:54:ed:
d4:4b:9a:f0:71:24:bc:9f:ee:d4:78:8a:ef:40:39:d3:61:aa:
54:73:cd:22:30:7a:25:42:e2:7e:37:01:57:56:d8:31:37:da:
0e:0e:38:0b:7d:14:0e:0e:f8:06:21:cd:59:c4:7e:be:fd:d0:
00:e1:dd:17:3d:69:3d:05:07:1e:d0:a3:5f:b8:16:2d:59:95:
e3:f9:3f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:28:31 2026 by rpki-client