Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
File: RhsmU4H0lIsYkofVpiySqpBU768.mft (raw, json)
Hash identifier: Lz/h6HVcuMSkTsmY8F74DrwH3awAXbas8DO+/KYoH+k=
Subject key identifier: C4:F7:5D:29:62:48:15:AD:95:DC:40:28:2A:F2:3B:A8:DB:10:2C:A2
Authority key identifier: 46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
Certificate issuer: /CN=461b265381f4948b189287d5a62c92aa9054efaf
Certificate serial: 019E2135F9E549DE86D644CFA0340B928AF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
Manifest number: AD
Signing time: Wed 13 May 2026 12:00:45 +0000
Manifest this update: Wed 13 May 2026 12:00:45 +0000
Manifest next update: Thu 14 May 2026 12:00:45 +0000
Files and hashes: 1: RhsmU4H0lIsYkofVpiySqpBU768.crl (hash: VNCmyeRDqLdaJXWBzK427oikVasLkZrRJ/wGyWVWBFQ=)
2: Yz3FCqH3QHthq81f1DJuXfruXjM.roa (hash: EtlM1emQtHiqLpDRSd/JKMYJURZgwq+EqF92luYX6xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:35:f9:e5:49:de:86:d6:44:cf:a0:34:0b:92:8a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461b265381f4948b189287d5a62c92aa9054efaf
Validity
Not Before: May 13 12:00:45 2026 GMT
Not After : May 14 12:00:45 2026 GMT
Subject: CN=c4f75d29624815ad95dc40282af23ba8db102ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ee:2e:87:af:11:be:14:ff:5c:b6:3b:0f:23:
1c:be:e5:2b:33:1b:9d:c7:cb:30:d9:b0:b2:ef:73:
61:ea:da:58:e2:70:8b:0c:b9:18:22:91:80:a2:09:
5b:55:56:dc:fb:18:5c:f6:53:e9:f9:cf:09:02:34:
14:ec:0e:51:0f:75:08:06:26:42:ee:ad:df:bc:88:
6b:e9:58:d4:2c:b8:cd:3a:fb:dc:6c:50:18:aa:67:
af:6b:dc:7b:b4:71:5c:15:ef:11:8d:b8:18:a6:30:
46:05:51:61:05:8b:71:62:92:74:26:ba:1d:d2:d3:
47:5f:e9:99:00:a4:65:fd:22:82:bf:9e:ce:2d:25:
48:14:a9:72:4e:1a:32:ff:23:2f:3e:8c:e2:b7:e9:
7f:95:44:dc:9f:34:df:1f:d4:fe:41:a1:3b:0d:6b:
58:1c:6c:07:ad:5f:d3:42:c9:a3:57:3c:78:ae:cd:
06:fd:d2:a0:38:51:fe:02:be:9f:cb:9e:05:49:d9:
79:39:c8:9d:22:70:07:d3:c1:63:4b:43:28:3b:0b:
f5:0d:fe:f8:8b:0d:a7:03:c2:05:81:e0:d4:2a:50:
93:2b:07:cf:4c:68:e1:45:ef:74:0f:73:fb:4b:71:
24:23:f4:9c:84:c5:f4:6c:ae:13:19:8a:58:72:36:
38:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F7:5D:29:62:48:15:AD:95:DC:40:28:2A:F2:3B:A8:DB:10:2C:A2
X509v3 Authority Key Identifier:
keyid:46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:8a:d8:0c:ea:43:e1:74:26:7a:8d:10:35:81:98:44:23:ed:
78:f3:29:d0:94:06:91:be:24:9e:b0:b3:54:90:c0:a3:65:43:
39:27:9e:0a:17:21:38:6f:76:f6:a3:fd:85:b7:51:9f:62:63:
cf:df:85:c0:9b:0d:f1:e1:53:ad:d1:b4:56:c0:66:8b:01:71:
8f:29:f2:f6:cc:a4:b2:f9:95:d9:dd:a1:d0:40:70:9a:5d:07:
a9:c7:5c:71:c4:9c:da:9d:d7:65:b1:92:e1:4d:1f:fd:9a:7e:
b6:8b:f7:a9:86:6f:e6:3b:66:e8:61:09:ab:34:22:46:f8:8d:
6d:e0:3c:8d:5c:6a:6c:1e:01:30:7c:79:f8:da:18:1c:e3:21:
c5:15:2a:17:ee:eb:7e:c9:c2:db:dd:de:23:77:15:3d:78:9e:
d1:a1:1e:cb:9e:b2:56:42:99:fb:54:07:eb:a7:d2:5f:22:57:
01:bc:42:06:b1:a3:f6:46:b4:23:ea:40:d8:f3:10:a7:5f:cd:
db:d8:d3:9f:46:42:50:5d:8a:e5:7c:ae:4f:a4:21:2b:bc:09:
8d:10:02:d8:db:db:08:73:e6:5b:60:03:f7:30:c0:ef:12:df:
cb:a7:a3:40:8d:de:e5:f2:c9:c7:da:60:8e:14:3d:26:40:87:
96:c3:f6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:29:31 2026 by rpki-client