Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
File: rlhan3aCaNb60MyHxgPMCsJrgbQ.mft (raw, json)
Hash identifier: BnuQEHWc2jkvN8CkcYrm8qtdYbjk0zJpy7a0sDJ1Es0=
Subject key identifier: 14:F5:E6:84:BF:39:9B:97:6B:E4:A3:B8:64:30:29:53:8F:56:B0:46
Authority key identifier: AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
Certificate issuer: /CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Certificate serial: 01A12AD6DF3663AB61D83A60DC10B94FAC52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
Manifest number: 0114
Signing time: Sun 11 Oct 2026 12:01:27 +0000
Manifest this update: Sun 11 Oct 2026 12:01:27 +0000
Manifest next update: Mon 12 Oct 2026 12:01:27 +0000
Files and hashes: 1: GuoMB_zJywmocFJnKvWUYbJRa48.roa (hash: k2hTVb7JpoVzJihpxeGxTk4yLmmOezOpphzp2CNKQaI=)
2: Sv0eeuDrY0VnfeDOcJuJ3wgg3iQ.roa (hash: 8rSLnwJU4pBMw2vuCjNXLhmsmomCnLncEO3ROsppLCw=)
3: rlhan3aCaNb60MyHxgPMCsJrgbQ.crl (hash: b4ijFFeQyjlDH37yoGCkG1LxvUZLBOZa1tb43Wb6P/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d6:df:36:63:ab:61:d8:3a:60:dc:10:b9:4f:ac:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Validity
Not Before: Oct 11 12:01:27 2026 GMT
Not After : Oct 12 12:01:27 2026 GMT
Subject: CN=14f5e684bf399b976be4a3b8643029538f56b046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:1d:05:c8:25:47:07:f0:33:d3:4c:f3:39:
f2:dc:6e:c2:02:4b:79:7c:f2:57:28:9c:59:be:5b:
1f:3c:09:e3:9b:4b:9e:1c:31:64:9d:a8:0b:e2:aa:
da:c7:e6:fb:9e:f1:a3:f1:69:f8:ef:1a:6a:84:48:
0e:bf:98:4e:96:47:40:00:31:a5:c8:98:14:28:9d:
d8:5c:b6:88:d8:57:ff:c0:2e:2a:d2:a5:9e:ef:3e:
90:85:97:11:73:a7:8b:48:17:7d:53:38:58:e6:ec:
0e:76:e6:e5:b7:65:9c:3d:b0:6b:15:87:19:ed:b5:
ad:76:f3:7f:3e:ee:17:5f:51:37:b1:1b:17:18:3e:
9b:47:5d:27:c7:ec:01:95:e5:73:16:e2:4b:1e:23:
83:63:2a:c3:bf:17:ff:c9:9b:e6:03:eb:9e:8d:5b:
4c:05:b1:18:09:4c:1d:96:84:53:43:52:d9:bf:1c:
91:c6:38:53:4e:a8:a1:21:35:15:dd:1a:6f:be:c3:
f0:a6:72:71:17:ec:03:22:51:c4:25:aa:f2:24:be:
f8:48:5e:d6:2e:81:71:1d:d7:d0:e9:a2:6b:56:21:
3e:80:fc:29:47:a9:da:37:45:9f:76:c1:3a:f5:5a:
b0:c4:5e:18:8e:f8:07:04:b5:ec:86:eb:4d:12:26:
cd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F5:E6:84:BF:39:9B:97:6B:E4:A3:B8:64:30:29:53:8F:56:B0:46
X509v3 Authority Key Identifier:
keyid:AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:81:ea:bd:d9:f5:98:64:86:8f:a6:a8:5b:66:f4:3b:a5:9a:
ff:6f:46:70:4a:66:78:db:a9:65:11:17:8b:d2:d3:00:44:dd:
62:70:55:3c:ca:e5:16:2c:a1:59:0a:3a:40:42:6a:7c:b9:7d:
a0:9c:53:5c:f6:ac:1e:8c:03:42:c3:f1:b3:c3:7a:4c:57:e6:
f7:ae:b9:9c:1d:bd:a5:00:be:63:29:8d:c8:77:28:c3:6a:e6:
b0:ac:f6:c7:5d:d0:f2:f1:54:d3:7c:36:0c:44:73:67:76:70:
8e:d7:ae:a5:51:da:9e:fc:e5:ca:ac:32:e7:5a:b2:30:90:74:
e1:f3:80:f4:48:70:40:6b:0f:f9:65:4c:02:07:8f:86:f6:c7:
b9:03:e0:4c:6c:7d:26:75:37:e1:40:a1:1e:76:32:62:1c:f2:
60:e2:3b:cb:52:57:3e:94:74:0f:75:70:fe:2c:08:9a:5c:3b:
9e:d1:8a:2d:08:f6:c1:4a:d5:6f:97:d8:65:68:4c:43:5d:44:
aa:f8:d8:fb:b1:2e:fc:a3:a9:b4:ce:9a:0e:bc:ad:1d:56:9f:
2a:2f:ee:b3:09:71:45:dd:c3:f4:29:d6:ec:68:e4:a1:5d:14:
a9:0f:fc:c9:a4:01:1f:0b:07:ee:c3:ef:e3:f9:c3:a8:00:8e:
46:7a:81:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:21:10 2026 by rpki-client