Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
File: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft (raw, json)
Hash identifier: AHxjApc0DHHzpxUKh9bl4cwRmzNU3j71CynFF2cm9jM=
Subject key identifier: 55:09:AA:EA:55:DD:46:50:46:89:56:48:DE:81:DB:88:5C:B7:38:50
Authority key identifier: 44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
Certificate issuer: /CN=447f9143ea55358fbd62fa5644547460172e1afd
Certificate serial: 019D265EFA681B112E5DCEBC15E5FA732537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
Manifest number: 065C
Signing time: Wed 25 Mar 2026 19:00:51 +0000
Manifest this update: Wed 25 Mar 2026 19:00:51 +0000
Manifest next update: Thu 26 Mar 2026 19:00:51 +0000
Files and hashes: 1: 5TB32dEiFrDCOhmncS_By-MXI5g.roa (hash: nEn2khZ7HTIKhK7IdrNN/UAq+nwAT5kuCFekds2YcnY=)
2: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl (hash: CCh5m4Ef8PHbEQ+0V1jM1Y5NHW9lxflTsL3HboDuoek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:fa:68:1b:11:2e:5d:ce:bc:15:e5:fa:73:25:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447f9143ea55358fbd62fa5644547460172e1afd
Validity
Not Before: Mar 25 19:00:51 2026 GMT
Not After : Mar 26 19:00:51 2026 GMT
Subject: CN=5509aaea55dd465046895648de81db885cb73850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:35:19:d7:47:10:19:82:e7:57:0d:02:1b:
3a:05:c3:e8:cd:01:c9:09:88:9e:aa:50:63:8a:89:
70:df:e6:d6:32:0d:fa:8b:df:0c:5d:57:a3:3c:55:
31:fa:76:ae:cd:32:b0:5f:29:90:8c:03:93:2d:6a:
53:f5:05:45:fc:fc:36:7f:28:da:0e:a2:a3:a8:77:
8f:45:91:98:54:e3:e7:0d:61:e6:30:c1:41:59:85:
78:d8:6c:f4:8c:25:04:1a:3d:79:ef:58:12:3c:47:
27:9a:63:52:f0:7b:2c:ed:0a:e2:0b:cb:5a:94:00:
6f:ee:44:1e:32:3e:df:1e:ce:cf:ca:de:78:ca:b3:
78:22:9b:35:e3:e9:d8:62:73:44:a9:f0:0f:29:68:
1e:0c:dd:e6:7b:60:a1:b5:51:a2:5d:2f:01:7d:97:
e7:f5:90:3e:22:09:b5:06:73:f9:3d:01:97:f4:19:
4d:a9:4c:b2:54:a5:30:87:6f:6d:09:56:4d:c7:77:
ac:2a:08:21:50:8b:b2:68:dd:3d:f6:67:f2:60:1f:
d4:1f:72:c6:99:ad:e1:bd:51:e5:4f:82:eb:23:8c:
08:e0:f4:91:11:40:ac:1f:5b:07:1e:e4:18:5c:3c:
5f:b8:56:c8:2a:94:8c:01:75:57:71:2b:7d:2c:f4:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:09:AA:EA:55:DD:46:50:46:89:56:48:DE:81:DB:88:5C:B7:38:50
X509v3 Authority Key Identifier:
keyid:44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5b:a8:fa:13:73:0d:70:fd:86:5c:da:b8:b4:49:34:45:f1:
1c:79:49:83:33:18:5f:66:3b:ec:4c:7f:09:e9:6c:e5:56:65:
bd:30:c7:de:47:89:23:05:41:f5:50:75:4f:40:5a:16:3e:ec:
0c:01:f2:9e:19:86:58:8d:3b:bc:ec:56:a5:ac:67:f1:ff:da:
db:19:b0:9e:2f:23:e0:9e:02:26:ee:67:2a:35:af:90:05:4a:
fb:8b:c5:13:16:7d:82:aa:63:f0:1e:9a:c9:8f:c4:d0:07:c4:
cf:a0:3b:ce:89:e8:0c:2c:5e:0f:20:e3:4a:45:a4:43:a2:85:
57:15:f5:db:56:f7:89:7a:58:8b:a7:2b:e6:4a:77:35:70:14:
1d:fd:07:d5:ae:58:bc:5b:bc:48:78:fb:3f:3b:a3:57:b8:88:
65:76:67:78:75:b4:6a:e9:6c:89:5f:9e:d3:79:12:21:da:d0:
76:49:19:62:ac:15:69:55:5c:94:3e:86:9f:8f:3b:77:98:28:
0d:13:6d:6a:8c:4b:0a:3b:8b:83:8c:1e:f2:72:0d:26:4a:8b:
96:d0:60:ff:06:93:87:3c:0d:99:7a:aa:a6:77:8a:e7:6f:4f:
a3:b3:1a:f3:d3:b0:be:3f:ec:cd:87:03:36:48:4d:d1:57:8c:
57:f3:03:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:05 2026 by rpki-client