Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File: RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier: TAAfQ8VYod+69JaZWY929ApZoPoSyXHb+w/SjUAuyIc=
Subject key identifier: 65:E9:C5:2B:C9:9B:B0:E6:38:8C:D2:69:BF:48:90:EF:AE:47:87:A1
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial: 01A1DE02AAC47EA6DFF7B26309F166DFD1B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number: 1A3F
Signing time: Sun 15 Nov 2026 07:01:18 +0000
Manifest this update: Sun 15 Nov 2026 07:01:18 +0000
Manifest next update: Mon 16 Nov 2026 07:01:18 +0000
Files and hashes: 1: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: GHFLP7JvcCHf6PlxfGnKrKJ92Q0uKzr6gu+E2XvvGxg=)
2: cyldzaN5uMb66fkP-hiffFjw-IE.roa (hash: Gj1kHwBLzSGp/dgWtzh7IJONH/VWApAr2xjaYZ7+1iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:02:aa:c4:7e:a6:df:f7:b2:63:09:f1:66:df:d1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Validity
Not Before: Nov 15 07:01:18 2026 GMT
Not After : Nov 16 07:01:18 2026 GMT
Subject: CN=65e9c52bc99bb0e6388cd269bf4890efae4787a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:86:07:0a:43:7c:f2:61:94:d7:e4:55:d8:0f:
af:28:85:0b:16:51:a7:46:26:d0:b3:46:61:29:72:
09:8f:fe:3f:6d:fa:1f:48:08:f2:56:e3:28:4e:5a:
92:01:b0:1e:1e:e6:70:a2:61:35:a8:2e:71:4b:1a:
3a:a6:67:01:ef:05:c2:56:44:bd:8f:5c:6e:bb:29:
1a:a2:fb:5d:b2:7f:bf:04:ae:3b:77:e9:a0:09:9c:
ac:c1:4f:39:26:72:21:0c:70:0e:1f:f1:4b:33:0e:
37:48:ad:7b:22:95:40:cf:74:0d:87:ea:73:28:1f:
6f:9b:60:17:f2:f3:44:6e:5c:8b:91:5c:91:2c:29:
97:e5:77:d6:1f:7d:39:cf:f8:40:b9:e8:19:93:29:
c8:88:e1:87:3f:21:70:d2:9a:c4:80:ff:86:ef:d8:
71:00:a8:dd:5c:e1:5e:a5:28:55:a2:51:cc:0b:3d:
aa:81:85:15:ce:b8:79:de:62:22:3a:c0:df:bf:15:
49:da:f6:7f:5c:f6:d1:66:ef:c6:cc:8f:46:6c:cb:
8b:8f:ca:7c:bf:18:72:fb:90:db:f8:d7:01:16:2a:
54:af:30:46:f9:5a:af:3b:3c:f4:69:98:54:8e:62:
c4:2a:3e:7d:f7:71:80:2b:45:ab:4c:4e:b7:51:08:
28:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E9:C5:2B:C9:9B:B0:E6:38:8C:D2:69:BF:48:90:EF:AE:47:87:A1
X509v3 Authority Key Identifier:
keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:61:99:83:7b:02:0f:99:dd:60:e3:36:80:a1:c9:b4:44:97:
66:6e:8d:73:32:18:8d:50:7d:04:c5:df:25:a0:7b:49:24:04:
b8:1c:86:49:8a:f0:d1:0c:a8:5d:01:bb:7f:8f:27:7f:55:6b:
a2:a6:74:76:58:2c:1c:9e:b5:15:40:43:b8:98:fb:24:39:5f:
f8:66:09:70:b1:76:f6:d2:df:c1:03:43:bf:f9:82:8d:45:c3:
e3:94:d9:19:3f:d1:c7:11:c3:d3:49:05:55:81:e1:0f:0c:5d:
4b:6a:7a:fc:fd:24:2c:87:1c:33:2c:fb:3b:6d:76:09:06:a1:
97:25:5b:8e:84:c0:1a:dd:9b:41:ab:3d:fc:d8:4a:4e:34:9e:
fd:7d:cc:e6:54:11:99:2e:03:f9:89:08:6f:95:fa:16:e9:b0:
83:63:59:80:5f:b0:ab:75:ec:9a:73:e5:cc:db:9f:ba:e6:61:
9e:ee:29:35:f0:54:a4:26:8a:b9:a1:e6:fb:10:3a:cc:b3:f8:
75:fa:9e:2d:1a:a5:c5:5c:03:e3:71:d7:53:b4:11:9a:a9:d9:
20:19:23:81:a8:8d:1a:b8:eb:c9:df:29:06:ff:f5:47:6b:bf:
41:ce:0e:22:aa:28:72:c9:32:d7:2a:27:90:c6:eb:e7:27:37:
8e:ee:72:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:32:14 2026 by rpki-client