Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
File: _rhNn4-eMxVliaXr9yIgOomeClE.mft (raw, json)
Hash identifier: 4FB1Yvkeszlnp7RwbdUuVqaA2B4jtLQfjSZdDJLnb4k=
Subject key identifier: F5:98:EA:5A:22:31:54:F4:92:0E:AE:50:1D:3B:4A:0E:7C:8B:C1:D4
Authority key identifier: FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
Certificate issuer: /CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Certificate serial: 01A1803DC7D91F3CBAB87CB12FB2CC02B784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
Manifest number: 148B
Signing time: Wed 28 Oct 2026 02:01:34 +0000
Manifest this update: Wed 28 Oct 2026 02:01:34 +0000
Manifest next update: Thu 29 Oct 2026 02:01:34 +0000
Files and hashes: 1: 1-s2FwRU1cILMfQySWQfwcbHn_7o.roa (hash: UgSoVXkhi39b02jH0/DTm5YU1hz+Ulacw53OQOOrWw0=)
2: 2IHxfDPgXpqFUuW2HHMtTesRlVk.roa (hash: 6i0KTZ22dHSsBD0sAIXWyUQ8dif7FeqnVvrlTF59RFs=)
3: 4QIYNLjhyvhK4DwD1cHr9Pj0R58.roa (hash: XPr5OKAgKFKe1eZm26Sq5h71zoMCowi3Bq7tv1xOx7I=)
4: IxunR-Pdcuvk1jm6CIfNmD9FR0A.roa (hash: /ZeIN8hMhU2WBWfg67KgPG/YjL9Vb0bRB9lW2bQsIk8=)
5: _rhNn4-eMxVliaXr9yIgOomeClE.crl (hash: GBMAk4/7lQGanFbkswhdLzKp3i5lZtb6Vk2unmyiWIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 02:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:c7:d9:1f:3c:ba:b8:7c:b1:2f:b2:cc:02:b7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feb84d9f8f9e33156589a5ebf722203a899e0a51
Validity
Not Before: Oct 28 02:01:34 2026 GMT
Not After : Oct 29 02:01:34 2026 GMT
Subject: CN=f598ea5a223154f4920eae501d3b4a0e7c8bc1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3e:79:9a:26:84:f9:a0:6a:5b:87:35:fc:45:
7c:c5:00:66:b1:61:ae:a1:94:43:cd:89:b9:45:26:
a0:d7:fc:ad:ce:ac:50:61:76:cb:2f:06:01:35:0b:
42:50:5e:84:e5:b3:31:e7:78:b0:10:24:44:90:1e:
b9:9f:1a:14:a2:dc:7a:69:a5:6f:3c:f2:0d:21:4f:
3d:10:66:94:8b:83:38:43:f2:08:6f:5c:6d:a7:6e:
0c:cd:69:ea:72:2f:a5:f5:eb:3c:41:33:fd:47:4a:
6a:07:16:32:cb:ee:0d:c7:93:e1:ac:ae:e5:53:73:
53:41:1b:bc:63:e4:75:c1:45:6d:c7:f0:f5:15:7f:
fa:90:0b:88:bd:e1:71:a8:d6:66:49:88:5b:70:cc:
75:b9:74:3e:e5:4d:57:7c:3a:ca:e1:8d:34:6f:74:
a7:83:14:a5:22:9b:c1:b3:36:08:60:0e:5a:99:8b:
fe:7e:09:c0:ec:3a:28:26:c7:b5:97:53:48:34:6b:
5c:e6:c4:a5:e7:2c:61:16:8f:29:de:1e:87:cf:50:
73:78:eb:5f:12:7e:01:97:89:e3:bb:d7:0d:82:bf:
1a:ff:68:8a:28:18:94:1b:83:43:d9:b0:65:9f:9d:
fa:b7:8d:8b:c2:58:19:79:9c:ff:29:81:a2:40:7c:
02:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:98:EA:5A:22:31:54:F4:92:0E:AE:50:1D:3B:4A:0E:7C:8B:C1:D4
X509v3 Authority Key Identifier:
keyid:FE:B8:4D:9F:8F:9E:33:15:65:89:A5:EB:F7:22:20:3A:89:9E:0A:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_rhNn4-eMxVliaXr9yIgOomeClE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/614e5c-299b-4fd4-a0bc-af1cc2317e39/1/_rhNn4-eMxVliaXr9yIgOomeClE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:a9:40:d7:a2:cd:08:b6:1d:28:32:9d:73:fa:d0:53:08:d3:
46:50:7b:8a:19:7c:ad:0b:46:5e:22:79:ed:b1:3a:76:b0:61:
b4:da:2a:95:ea:ac:cb:b0:e1:de:22:00:b3:80:4f:ee:91:6c:
cc:cf:13:cc:03:74:c5:0a:f4:22:a8:a9:92:9a:8f:70:b4:b9:
0c:93:b2:e2:67:4d:27:e3:47:17:78:64:0b:2e:2c:a8:1f:64:
2b:60:d8:fb:97:d1:80:de:4f:22:45:87:8c:f2:36:ce:5f:19:
6c:27:c0:51:2e:e3:48:e8:9f:c5:2d:32:f4:eb:38:98:a0:d2:
a3:81:0a:57:7b:56:f5:5a:fc:1a:31:a0:99:ab:84:b1:9e:35:
d6:b2:79:00:10:cf:75:5e:a5:55:ae:78:58:40:17:62:70:96:
fd:52:f4:7b:51:45:c4:6e:42:21:fe:f3:e9:59:4b:e8:cb:f1:
f2:d5:72:60:60:85:16:3c:82:11:ab:a0:95:b5:b7:e5:48:7b:
83:48:8d:da:62:cb:b8:b5:63:ad:b0:40:c0:c1:4a:a9:27:eb:
72:1b:a9:a1:0c:3e:d1:41:10:fb:5b:bd:84:4c:f2:75:30:25:
37:0e:62:4f:14:3e:95:f3:5c:09:c7:d6:06:fb:c4:4d:5b:fa:
87:cc:03:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:45:36 2026 by rpki-client