Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
File: RhX5mPdHJp43r32hEIBhJMmX3Fc.mft (raw, json)
Hash identifier: /E2+7GHgW9z3N2lx3zRDz6PuQxQPS7OGHsAKuK5RiY8=
Subject key identifier: 82:54:49:7C:4B:31:B5:35:A4:E6:FE:51:D4:56:72:C0:F5:92:BC:11
Authority key identifier: 46:15:F9:98:F7:47:26:9E:37:AF:7D:A1:10:80:61:24:C9:97:DC:57
Certificate issuer: /CN=4615f998f747269e37af7da110806124c997dc57
Certificate serial: 01A0DA964534A084E0DADA91BD3578BEEBD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhX5mPdHJp43r32hEIBhJMmX3Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
Manifest number: 0149
Signing time: Fri 25 Sep 2026 22:01:16 +0000
Manifest this update: Fri 25 Sep 2026 22:01:16 +0000
Manifest next update: Sat 26 Sep 2026 22:01:16 +0000
Files and hashes: 1: RhX5mPdHJp43r32hEIBhJMmX3Fc.crl (hash: K+MeTVaW4LClxSAn2XxlaI5SIZwM7UXpyTfzkgNCcxs=)
2: dLlLozq_LxYh46bnmgkvjvoWmpw.roa (hash: h2aFWt98BJV3iCLAz94s4Esgtecs4nrZqTq2dKOirQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhX5mPdHJp43r32hEIBhJMmX3Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:96:45:34:a0:84:e0:da:da:91:bd:35:78:be:eb:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4615f998f747269e37af7da110806124c997dc57
Validity
Not Before: Sep 25 22:01:16 2026 GMT
Not After : Sep 26 22:01:16 2026 GMT
Subject: CN=8254497c4b31b535a4e6fe51d45672c0f592bc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:c9:0d:6b:a3:d2:e1:e8:2b:7f:62:f4:88:
3b:01:ce:9f:04:06:68:13:55:ac:1f:1f:98:6a:d0:
38:fa:06:40:f7:f7:78:e6:26:25:66:dc:e9:48:15:
5b:ed:c4:84:7b:24:9e:63:1f:89:c5:b4:bd:c3:ee:
18:be:55:b1:f9:7c:b2:f8:e5:8a:98:a1:f9:35:1c:
ee:33:2f:08:c1:68:6f:9c:95:1a:c9:b8:b1:71:8f:
f4:42:11:48:8a:fc:17:5a:60:eb:f0:5d:ea:e3:f2:
f5:0d:da:74:48:f8:de:a5:af:45:a8:b8:ba:ae:b6:
56:1d:4e:7b:15:29:7c:1f:e1:ac:4b:4c:73:f0:51:
0a:28:1a:13:6d:cb:df:0d:4c:a5:12:ef:40:6e:fb:
2c:27:1d:56:df:e0:3e:e4:5e:37:1b:76:e8:10:89:
32:57:7e:0e:51:b4:a2:66:dd:fc:fd:78:75:ac:59:
22:1e:35:44:96:54:f2:33:c2:e4:e1:a4:bc:3c:26:
ef:0b:75:a9:d6:aa:f0:bf:7d:75:d2:fc:03:f5:13:
f8:22:b9:6e:43:fe:44:36:0c:de:e7:46:b0:5e:5b:
18:4c:06:79:25:ba:f3:f5:42:1d:43:d7:2e:0c:d9:
c0:fe:6f:42:e0:94:53:e0:e7:b9:a5:97:e4:75:1c:
f2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:54:49:7C:4B:31:B5:35:A4:E6:FE:51:D4:56:72:C0:F5:92:BC:11
X509v3 Authority Key Identifier:
keyid:46:15:F9:98:F7:47:26:9E:37:AF:7D:A1:10:80:61:24:C9:97:DC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhX5mPdHJp43r32hEIBhJMmX3Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:d1:a2:10:56:62:a7:27:b2:98:43:27:3e:a8:c7:db:1b:86:
d5:35:62:b4:66:3b:55:86:44:11:d4:58:d8:ce:37:a3:82:a4:
16:40:f4:e5:b0:2a:a4:54:31:81:fe:d1:b6:2d:f7:03:8d:d8:
31:ab:7c:3b:9e:65:b7:dd:04:20:5b:5d:8d:a5:bb:16:2b:d4:
fd:ef:a0:04:86:8e:d9:c4:f0:01:a5:22:3f:97:a2:b7:06:81:
b1:5f:3a:f9:cc:8b:81:85:22:76:43:87:15:1b:d3:4c:f1:07:
73:08:aa:53:61:4e:ac:33:47:da:1c:ce:62:95:e6:ed:ad:97:
80:18:d9:50:74:ae:2b:7f:68:da:da:91:9d:b7:02:3b:7a:8f:
cd:1c:78:b5:1c:31:b5:3c:64:fd:14:3a:50:21:ec:9c:24:c9:
ae:21:0c:77:a8:b1:4c:2d:1d:ad:03:4c:d3:fb:d0:53:f2:35:
ce:b5:68:88:71:3b:9d:23:1c:d4:c5:61:a0:0e:e0:73:4e:1d:
92:e1:ef:f2:9a:a1:1f:a6:bd:1d:0a:d7:5b:77:eb:80:51:ce:
af:6e:b8:22:a9:d8:b9:45:24:0f:1d:ec:66:0d:7c:0d:af:00:
af:e6:dc:fc:44:a2:f9:4a:68:05:c1:ed:d2:89:fe:3d:9c:0a:
50:c7:29:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:09:44 2026 by rpki-client