Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
File: RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft (raw, json)
Hash identifier: 7qxAr1NBhn9aWi5Fdp2mOzG8I6RtOTP32CeZH97z9kM=
Subject key identifier: 89:57:69:C1:98:A5:F7:21:31:48:AC:C9:1C:CA:B7:BD:86:7C:AA:6F
Authority key identifier: 46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
Certificate issuer: /CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Certificate serial: 019D27A8C99998F2DCCA92FB74CF2B93CD9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
Manifest number: 151F
Signing time: Thu 26 Mar 2026 01:01:06 +0000
Manifest this update: Thu 26 Mar 2026 01:01:06 +0000
Manifest next update: Fri 27 Mar 2026 01:01:06 +0000
Files and hashes: 1: RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl (hash: Mkns/+4GKRmAGhk+bIt+cZA5cGlg3XzKeCVg/jUvLmA=)
2: hZKAqR6QknkFASXf8FpEd_mKZFc.roa (hash: KzMYcZGAhPvDwgQOpxUt3D4xmzyN9ctcfUksHbupIAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:c9:99:98:f2:dc:ca:92:fb:74:cf:2b:93:cd:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461207a3eef2b44f8e2731b7b0ac7d1716e355c5
Validity
Not Before: Mar 26 01:01:06 2026 GMT
Not After : Mar 27 01:01:06 2026 GMT
Subject: CN=895769c198a5f7213148acc91ccab7bd867caa6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:38:85:45:70:e6:1b:08:d6:e2:c8:a2:c5:4a:
5e:7d:8f:96:19:34:07:ed:76:df:1a:bc:04:f8:98:
65:f3:4e:05:a9:f5:79:d9:b3:9e:e5:76:87:fd:7c:
49:8a:0d:56:11:02:56:47:ec:2d:de:1e:3b:fe:a7:
87:33:c9:15:fc:44:fc:cf:ea:4b:5b:6e:11:bb:2e:
74:ca:f7:70:f3:93:0b:99:91:74:1e:8e:bd:f9:a5:
3e:f5:79:b9:83:82:1c:ff:b9:95:06:80:c5:82:01:
44:95:8e:b3:f8:cd:dd:f4:64:9f:3c:4c:c6:2a:ab:
42:66:1b:b5:a8:39:fe:28:48:f6:23:ba:d7:f3:98:
69:4d:c6:fb:35:7c:5e:f5:50:24:05:2c:42:d7:cb:
43:e4:3d:9e:2b:74:8c:15:60:85:dc:70:53:fc:80:
04:99:1e:bb:d1:2c:3f:ef:27:79:2e:50:95:3e:38:
f0:a1:5d:bd:f6:d7:b8:ba:9e:0d:c2:17:83:07:87:
01:b9:de:8a:e5:90:9f:80:86:93:26:86:3f:37:98:
7d:a5:65:16:cf:f8:1c:e3:6a:fa:84:4f:b4:ce:a2:
f1:2f:7e:f1:0f:27:1e:88:ab:5c:73:1d:07:3d:07:
bc:87:67:32:cb:97:f1:0a:c9:ad:1d:d3:87:a4:0b:
bc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:57:69:C1:98:A5:F7:21:31:48:AC:C9:1C:CA:B7:BD:86:7C:AA:6F
X509v3 Authority Key Identifier:
keyid:46:12:07:A3:EE:F2:B4:4F:8E:27:31:B7:B0:AC:7D:17:16:E3:55:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhIHo-7ytE-OJzG3sKx9FxbjVcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/38c198-0f1b-4c59-81fe-1c8ce7c33ac0/1/RhIHo-7ytE-OJzG3sKx9FxbjVcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:46:1e:32:68:65:a8:f4:4f:cd:bc:b9:2e:4a:09:0e:07:1a:
fa:3a:87:c9:9e:b6:07:25:4a:59:61:66:01:76:49:3a:d2:95:
03:de:0f:91:bf:c3:ba:d8:db:fd:b0:ab:25:31:a4:2d:c9:96:
2c:d0:d7:89:cc:a4:95:ae:b2:52:7f:01:49:ea:32:03:31:4b:
46:75:d4:28:a8:c4:c4:b3:55:33:65:d3:fa:19:e5:a4:c9:c6:
03:98:19:f3:32:a7:2b:8d:e2:cd:0d:34:36:90:e9:50:6c:29:
57:a6:61:5c:7b:8e:b4:e5:ec:b5:5c:53:67:a3:9b:e3:ae:82:
77:cc:f5:12:29:48:8a:48:a9:9f:9f:91:9b:99:5a:05:80:04:
4f:2f:cb:10:ad:cc:df:ba:04:a8:88:3e:a7:c9:15:67:ba:88:
05:4b:ff:f2:d6:42:85:5c:61:5f:f7:16:19:cf:29:41:97:2f:
10:76:c1:41:93:54:35:d4:89:bb:8b:d9:c4:cc:56:33:83:72:
e1:ff:60:8b:b1:f1:27:70:7b:c0:50:bf:43:f0:52:32:e3:9a:
82:1b:c7:3f:a1:7d:54:cd:b9:80:5b:12:26:ea:73:32:ff:dd:
21:18:c3:1c:77:65:1e:75:52:4b:c9:13:db:7f:ff:2c:40:ac:
37:8e:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:03 2026 by rpki-client