Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
File: RhsmU4H0lIsYkofVpiySqpBU768.mft (raw, json)
Hash identifier: Wfsi1xHGb83DcnnHvcdKwSkFGyfisdWOfefkP80Z8LU=
Subject key identifier: 87:E9:20:62:26:B5:B8:D3:C9:1F:8E:1A:06:0E:06:86:4E:17:C8:E2
Authority key identifier: 46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
Certificate issuer: /CN=461b265381f4948b189287d5a62c92aa9054efaf
Certificate serial: 01A135232889F8D77C7A25FB755887065D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
Manifest number: 0245
Signing time: Tue 13 Oct 2026 12:00:58 +0000
Manifest this update: Tue 13 Oct 2026 12:00:58 +0000
Manifest next update: Wed 14 Oct 2026 12:00:58 +0000
Files and hashes: 1: RhsmU4H0lIsYkofVpiySqpBU768.crl (hash: wOr/DBRjDFx3EBoeY+lnUlv0RNkDJrQUHjJFYiuF6QQ=)
2: Yz3FCqH3QHthq81f1DJuXfruXjM.roa (hash: EtlM1emQtHiqLpDRSd/JKMYJURZgwq+EqF92luYX6xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:23:28:89:f8:d7:7c:7a:25:fb:75:58:87:06:5d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461b265381f4948b189287d5a62c92aa9054efaf
Validity
Not Before: Oct 13 12:00:58 2026 GMT
Not After : Oct 14 12:00:58 2026 GMT
Subject: CN=87e9206226b5b8d3c91f8e1a060e06864e17c8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:3f:38:85:db:a8:9e:49:77:e1:c0:38:72:
9c:10:21:bd:07:07:41:de:45:0d:7b:5f:6e:eb:8a:
86:1b:54:b2:9b:95:0b:8d:8c:ed:df:76:d1:3d:27:
0c:8f:dc:2f:d5:46:15:98:3b:e6:6a:af:e5:01:3a:
f4:9c:49:84:b1:51:93:b3:ef:c6:4b:08:d2:27:bf:
f1:d3:bb:38:1f:e1:23:e8:aa:74:fd:41:43:b7:a0:
f9:c4:fc:58:e5:9d:c3:37:1b:03:eb:03:95:75:a9:
82:d3:7a:79:2f:77:ca:91:20:66:b8:34:62:dc:4f:
52:38:0b:8d:8c:b8:3a:47:eb:12:6f:de:ad:b9:6b:
44:a5:f8:9b:a7:07:fa:91:16:48:5f:46:43:53:cf:
11:48:42:1e:7d:5b:c2:2a:b7:d9:59:1a:92:19:98:
0c:46:30:61:96:66:3b:b7:37:10:ff:49:3f:7d:cf:
6b:dd:aa:33:ae:ab:29:e2:ff:76:cc:77:0d:da:06:
fc:49:b5:04:7f:1c:d2:88:5e:2f:43:4a:d5:c3:24:
4a:1f:02:ae:a3:91:ee:eb:36:69:df:c4:1b:e5:51:
3c:62:2e:e9:c8:24:2c:49:03:7d:e9:f8:6e:93:08:
7f:7e:9a:49:45:4d:be:2e:51:eb:c4:c1:bf:aa:36:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E9:20:62:26:B5:B8:D3:C9:1F:8E:1A:06:0E:06:86:4E:17:C8:E2
X509v3 Authority Key Identifier:
keyid:46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:09:4f:bf:fb:25:aa:4c:0e:10:83:b1:3c:43:44:18:75:86:
b2:68:a2:95:03:1b:70:27:4c:dd:6c:72:4b:e0:91:7a:c0:94:
c0:d8:ff:6b:17:a0:5a:5f:64:d6:2c:fc:4f:42:40:5d:3a:4a:
fa:37:fc:b7:0f:35:1b:2f:6b:22:56:07:1e:35:6a:44:36:6e:
a5:99:18:53:e7:5a:50:d5:2f:6b:60:49:8f:6e:6a:d6:99:3e:
f8:6a:a2:85:f5:46:b0:c4:5e:3e:4f:ec:b8:5d:01:a1:d8:7d:
8f:65:2b:47:7e:aa:57:30:7c:7a:14:eb:0e:05:c9:b2:59:bd:
16:fe:4e:47:42:c1:ff:a3:3b:d5:db:c5:31:29:d5:ef:dd:88:
4a:94:f6:3e:02:ad:a9:53:07:a5:fb:ac:00:13:8c:b7:a8:b5:
30:df:24:1a:5c:51:15:bd:8d:27:9f:12:e7:03:5c:f0:b5:5b:
4d:70:52:aa:a0:ab:b3:6d:e7:4c:13:99:42:d0:2a:d2:8b:24:
b7:9a:73:a2:db:e6:ff:87:a8:2f:94:ff:65:1b:15:81:ef:e9:
6a:5c:66:9e:1c:7a:1a:ff:b3:10:c0:a2:9a:77:8e:a7:77:12:
25:e0:f6:5f:bf:94:cd:5b:2b:36:6c:67:fa:ee:3a:55:30:d0:
a9:a0:17:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 19:33:39 2026 by rpki-client