Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
File: rlhan3aCaNb60MyHxgPMCsJrgbQ.mft (raw, json)
Hash identifier: 4qMk/yZbmdBeN8OSBhCF+/FjhBvvKw6zEpBkKnz8Boc=
Subject key identifier: 5C:83:69:81:01:50:18:5C:7A:E7:B3:3D:39:08:FC:90:EE:66:51:8E
Authority key identifier: AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
Certificate issuer: /CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Certificate serial: 019FAC768F045C1CA20992556ABD93A19464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:18 +0000
Manifest this update: Wed 29 Jul 2026 06:01:18 +0000
Manifest next update: Thu 30 Jul 2026 06:01:18 +0000
Files and hashes: 1: GuoMB_zJywmocFJnKvWUYbJRa48.roa (hash: k2hTVb7JpoVzJihpxeGxTk4yLmmOezOpphzp2CNKQaI=)
2: Sv0eeuDrY0VnfeDOcJuJ3wgg3iQ.roa (hash: 8rSLnwJU4pBMw2vuCjNXLhmsmomCnLncEO3ROsppLCw=)
3: rlhan3aCaNb60MyHxgPMCsJrgbQ.crl (hash: UqIdFX9ZHh1/+jVTjSFPDJQxC+y2dy1D/2D8eik1sjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:8f:04:5c:1c:a2:09:92:55:6a:bd:93:a1:94:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Validity
Not Before: Jul 29 06:01:18 2026 GMT
Not After : Jul 30 06:01:18 2026 GMT
Subject: CN=5c8369810150185c7ae7b33d3908fc90ee66518e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:31:88:fb:80:f5:26:9b:12:ca:eb:dd:5b:
8c:0c:13:00:bc:2b:33:fd:56:9b:c5:e9:ca:95:89:
42:5e:ba:40:b7:7d:90:4a:a4:17:68:5b:3c:ac:16:
98:2b:12:69:eb:b5:64:1c:8c:5e:08:2e:5d:37:cb:
54:33:85:a2:22:64:e8:48:e7:e0:8e:45:a2:dd:61:
84:e7:15:e8:af:37:86:9f:0c:da:31:b8:ad:d9:c4:
65:9d:eb:1f:45:f7:3e:30:4d:6c:45:9e:e0:3d:b5:
16:85:92:8b:2f:3d:40:c0:05:c6:26:66:1c:21:e5:
e9:dc:b5:11:4f:1c:35:2f:ed:15:e5:47:d1:35:70:
6f:bc:52:3a:33:5a:71:99:bf:5d:88:6f:9b:57:69:
02:d1:35:63:ad:39:e1:a6:eb:3a:25:29:ec:45:4e:
bf:4b:0e:cb:84:7c:63:ef:26:87:0b:39:00:26:b8:
b2:fe:7d:0b:f8:ea:6d:fc:96:77:2a:de:fb:87:6b:
1f:0f:55:bc:16:44:d6:f2:14:b6:f8:c3:d2:09:75:
42:a3:77:fd:53:04:ac:0a:71:eb:e7:6c:c3:e0:a1:
a1:5d:98:d4:aa:00:df:a9:14:01:61:3a:e3:7e:2b:
dd:9d:ae:ee:56:04:3c:23:be:b7:73:34:41:03:fe:
81:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:83:69:81:01:50:18:5C:7A:E7:B3:3D:39:08:FC:90:EE:66:51:8E
X509v3 Authority Key Identifier:
keyid:AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:3e:c1:1f:3a:29:57:dd:c9:8c:5b:cd:e5:56:5c:8c:3d:11:
88:15:7c:74:13:e6:a0:14:3b:8e:7b:a3:7a:78:de:1e:81:a6:
e8:62:5c:e4:a8:77:85:68:bf:7e:dc:82:bd:6f:10:ca:eb:84:
3b:ba:43:06:b3:e6:52:a2:85:71:1f:7f:3b:1f:fc:cb:3e:16:
30:b5:a3:fe:8b:94:21:13:e0:52:cc:3d:bb:ee:73:fc:6c:10:
72:81:07:a8:bc:37:54:b6:2e:ab:07:ab:e6:44:c6:15:79:c0:
30:11:49:b7:bf:b0:52:4b:ce:be:91:f8:db:38:4e:6e:b1:83:
c9:73:9f:ac:30:0b:54:29:bb:f6:b4:d6:72:8b:f9:b1:e7:e1:
3d:ce:c9:e6:2b:85:50:79:2f:71:53:21:ff:d0:e7:6f:c4:30:
7f:74:9f:8a:cc:e3:29:b4:2f:44:99:87:19:db:de:23:4f:b3:
3f:a9:1e:b2:3e:22:65:56:84:cf:13:e6:b5:e7:f0:29:56:8a:
68:32:29:26:3a:df:f7:7a:3c:8b:79:f2:b1:69:0e:2a:e6:36:
8c:48:82:db:b7:3c:50:cf:d9:01:fc:57:64:1c:bb:8b:5d:81:
b4:4e:f8:f3:6b:ae:01:d6:0a:f0:4c:4a:5b:51:ca:18:03:b7:
41:ad:3a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:20:47 2026 by rpki-client