Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
File: rlhan3aCaNb60MyHxgPMCsJrgbQ.mft (raw, json)
Hash identifier: BbSR4ASjMthQJa5r+FCVSFLSFdqgh6T4rbmUpEyHyvA=
Subject key identifier: 2C:01:0D:F6:23:5E:E1:A3:B9:55:12:A6:29:04:2F:3C:43:7A:5F:88
Authority key identifier: AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
Certificate issuer: /CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Certificate serial: 019F916CCDEC98C88D71F5D071A5340721A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
Manifest number: 40
Signing time: Fri 24 Jul 2026 00:00:54 +0000
Manifest this update: Fri 24 Jul 2026 00:00:54 +0000
Manifest next update: Sat 25 Jul 2026 00:00:54 +0000
Files and hashes: 1: GuoMB_zJywmocFJnKvWUYbJRa48.roa (hash: k2hTVb7JpoVzJihpxeGxTk4yLmmOezOpphzp2CNKQaI=)
2: Sv0eeuDrY0VnfeDOcJuJ3wgg3iQ.roa (hash: 8rSLnwJU4pBMw2vuCjNXLhmsmomCnLncEO3ROsppLCw=)
3: rlhan3aCaNb60MyHxgPMCsJrgbQ.crl (hash: Hs4yEsbpWuopXPWZsr3yyxDpGVvUKsWxiDEcTA7EmFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:cd:ec:98:c8:8d:71:f5:d0:71:a5:34:07:21:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Validity
Not Before: Jul 24 00:00:54 2026 GMT
Not After : Jul 25 00:00:54 2026 GMT
Subject: CN=2c010df6235ee1a3b95512a629042f3c437a5f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:3e:f6:5a:1a:c6:f5:50:fa:b4:3d:ce:3e:
9c:a3:f0:bb:ba:0f:94:c9:da:7c:51:a7:7b:96:33:
db:45:b9:e2:ff:bb:a4:6e:c1:79:ee:7c:82:4b:7c:
85:17:8f:50:ec:05:fe:3c:f0:3b:d5:0e:16:84:ad:
c7:6a:86:26:6b:76:51:51:d0:0f:75:f2:46:d6:bd:
7c:54:12:93:ca:24:6b:6a:fd:39:53:ab:63:c0:6d:
64:b7:a1:93:14:04:f5:16:de:5c:27:db:88:ad:6c:
86:77:c2:da:5d:67:13:dd:fb:89:a4:fc:9c:59:0b:
ce:f0:86:1a:33:fc:88:15:19:c7:08:51:07:fc:62:
3e:f1:8c:b7:85:88:8d:f4:a3:9f:ee:8a:35:7f:0b:
bf:e6:2b:73:fb:27:71:fc:73:c2:42:97:c7:e1:1a:
69:21:f2:53:f4:59:01:4f:b7:a9:9f:d1:6c:c4:e5:
91:a8:7a:81:95:bf:59:df:e7:11:fa:48:7b:36:9c:
9d:73:40:c7:02:3e:26:d4:3a:7e:33:6d:60:73:4a:
c0:92:ac:31:07:b3:9e:47:63:9c:28:7f:86:a9:cb:
c8:92:31:75:f4:4a:e4:1c:94:84:5c:72:39:1a:5c:
95:21:df:29:40:5a:29:93:81:68:54:4c:f1:9d:d0:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:01:0D:F6:23:5E:E1:A3:B9:55:12:A6:29:04:2F:3C:43:7A:5F:88
X509v3 Authority Key Identifier:
keyid:AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:36:ea:8b:3e:61:fc:13:22:2f:4d:ff:c6:98:4b:04:89:7a:
5b:f9:f9:b3:02:0e:ef:4f:5c:d0:d1:46:07:84:50:02:be:97:
4b:3e:d7:5f:1c:9f:66:3c:7b:4b:92:f5:66:e1:ea:8c:da:fe:
fc:81:3e:d2:c8:68:c9:03:1b:81:ca:36:4e:65:ae:1f:a3:05:
90:88:97:f0:7f:66:d5:7e:b5:d9:4b:cd:71:b8:eb:a2:6c:f4:
c6:6d:5c:0a:45:d9:f5:92:65:55:b9:23:78:e2:32:93:ca:67:
a6:a2:b7:cc:19:a4:96:41:2b:1e:8c:3f:02:f2:b0:91:d5:ad:
58:8c:31:fe:8a:ed:46:84:ea:8e:c6:89:70:9f:f7:92:de:cb:
d2:ab:3f:3e:1b:2e:b4:85:34:87:f7:f3:d2:67:da:05:e9:18:
83:47:bb:5b:6e:50:1a:a6:34:ae:1f:92:b7:c5:b0:50:46:6a:
e2:eb:4c:2e:ea:cf:77:6f:3b:9e:c1:43:4a:c9:a1:aa:e8:72:
c5:dc:1e:f1:e9:d3:f1:6a:27:11:a7:22:96:a7:b0:de:e4:c8:
12:f4:a8:23:f1:89:ab:41:ae:73:3c:c7:dc:fd:ce:e0:e3:bc:
21:8e:89:db:13:c0:78:6e:aa:66:42:5f:5c:38:f2:d8:18:de:
6c:a4:e9:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:26:56 2026 by rpki-client