Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
File: RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json)
Hash identifier: P2M5bCcDY2/mEw+BXyEkdMWmR543rw9cC4RnVLHNPOY=
Subject key identifier: DA:13:6A:F1:01:9E:52:5C:DE:1E:67:2F:2B:D3:BF:23:9C:E6:92:04
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Certificate issuer: /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial: 019D2704CE26E6A88ACC2F64F17466C0F8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
Manifest number: 075E
Signing time: Wed 25 Mar 2026 22:01:59 +0000
Manifest this update: Wed 25 Mar 2026 22:01:59 +0000
Manifest next update: Thu 26 Mar 2026 22:01:59 +0000
Files and hashes: 1: LH31eWblzc9N88J9ihjcAEm2GSU.roa (hash: aA7SpWPZXBL5dHzOmD7+zSVA2s9TImnC5p7oJrbvDXA=)
2: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: ukrTMR9CmgwojKwHwAbnxCTqfY0GWvJP6ThPjjuRLDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ce:26:e6:a8:8a:cc:2f:64:f1:74:66:c0:f8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Validity
Not Before: Mar 25 22:01:59 2026 GMT
Not After : Mar 26 22:01:59 2026 GMT
Subject: CN=da136af1019e525cde1e672f2bd3bf239ce69204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:19:fe:3e:e5:e1:1c:df:18:5d:5d:d6:2b:76:
fb:9e:f5:ed:2e:0f:7e:60:c9:ba:2b:65:b7:d9:48:
e2:e4:7b:d1:fe:86:39:08:fc:bb:79:e5:53:c0:de:
04:1c:83:0d:21:cf:21:bc:c6:b7:3b:7b:15:db:13:
01:77:eb:17:c8:49:b8:67:9a:bf:f7:40:93:6d:85:
2d:30:ce:5e:c0:3d:c2:91:97:e9:fe:71:c2:f6:16:
43:a1:5b:f3:eb:4e:ba:47:44:cc:e9:f2:38:97:36:
0c:55:8f:65:0a:a2:5e:b3:a2:88:ad:ac:62:5c:8a:
19:f8:9c:fd:9d:45:23:0e:5e:17:d8:01:9e:8f:34:
cb:05:77:f4:36:f8:09:25:d0:b4:26:76:e4:14:ed:
43:2f:39:cb:fa:9b:f0:f5:8a:62:89:e8:2b:e9:ea:
16:63:97:60:21:8b:12:8d:5e:5a:d2:46:0d:24:49:
7c:b9:81:9f:b4:0d:4b:4b:a3:36:86:ce:46:e0:06:
54:db:19:a1:56:de:f2:c0:ee:f8:13:72:db:5c:77:
5b:29:70:09:36:4e:88:9f:7b:cc:4a:c6:39:bf:c2:
21:2c:12:28:e4:87:08:2a:e0:d3:69:07:e8:70:35:
a4:80:63:1c:86:e5:6e:73:02:af:c1:b5:cc:2a:8f:
34:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:13:6A:F1:01:9E:52:5C:DE:1E:67:2F:2B:D3:BF:23:9C:E6:92:04
X509v3 Authority Key Identifier:
keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:18:7c:b3:ce:f6:01:e1:56:07:42:76:94:d5:2a:65:59:9d:
32:b8:b3:57:0f:3e:9e:ff:53:94:0b:91:20:d2:78:eb:57:a7:
44:f9:5b:61:45:79:82:5c:6a:0d:a7:d1:a7:15:22:ab:85:58:
a2:a2:e6:3b:48:2c:3c:75:73:6f:cb:d0:91:49:b6:a2:04:6f:
4d:f8:b7:e4:c8:a1:ee:fd:42:53:dc:91:54:7d:34:34:84:7d:
f8:a4:d6:9b:00:d5:1a:dd:ac:35:78:3f:c9:0a:0a:bb:6f:c4:
7d:10:e9:21:4b:ef:92:4d:eb:ea:59:73:b5:1f:da:3e:f1:60:
bd:70:87:4d:5c:5e:a0:20:e4:a1:80:3e:a8:06:60:db:f2:41:
4b:94:4e:8e:2e:14:d7:55:34:3f:fa:90:87:12:85:58:3c:83:
f5:5c:c9:d7:64:0c:9c:61:27:f1:af:8e:63:13:5e:6b:cc:6e:
d5:05:ce:ec:f3:82:32:4e:51:1f:dd:44:c0:3b:e4:ec:2c:70:
18:1d:fc:7a:39:35:6e:70:9e:50:af:77:4e:e8:e3:36:bd:7f:
70:db:1a:ed:95:cb:d1:1b:d0:f8:96:c7:19:66:1a:aa:7e:25:
05:ee:c4:57:dd:04:3c:5a:06:dc:c1:51:ad:e8:99:c7:85:48:
fd:96:cb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:29 2026 by rpki-client