
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File: RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier: sIyrwnYc50Bs9a4ZunCwb7OlwEyVP7JznrqM/Zjc1Io=
Subject key identifier: 8B:1B:67:99:3A:10:C4:CB:D8:8B:1E:C3:4A:15:46:0D:86:A9:14:BE
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer: /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial: 01A18CE60B408F04CBA682BFB17162EB7A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number: 1A15
Signing time: Fri 30 Oct 2026 13:00:48 +0000
Manifest this update: Fri 30 Oct 2026 13:00:48 +0000
Manifest next update: Sat 31 Oct 2026 13:00:48 +0000
Files and hashes: 1: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: zrJ8C5gFK8OnJNJtVC60Ct1rk5Q8sPEIo49SLdjXGxk=)
2: cyldzaN5uMb66fkP-hiffFjw-IE.roa (hash: Gj1kHwBLzSGp/dgWtzh7IJONH/VWApAr2xjaYZ7+1iY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:e6:0b:40:8f:04:cb:a6:82:bf:b1:71:62:eb:7a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Validity
Not Before: Oct 30 13:00:48 2026 GMT
Not After : Oct 31 13:00:48 2026 GMT
Subject: CN=8b1b67993a10c4cbd88b1ec34a15460d86a914be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:82:11:75:70:52:8b:f1:73:fe:56:a5:ba:
df:0e:8d:1d:21:5f:07:fd:6c:87:07:c7:b7:fd:92:
0f:ec:82:42:30:50:f7:2c:6a:5f:5c:ff:6d:9a:30:
ff:ae:a6:78:b3:be:fb:29:2b:fd:2e:9f:20:99:14:
91:32:82:e6:02:73:40:86:fd:69:cd:30:3a:3d:2d:
ce:25:84:14:97:68:4b:7e:fe:9a:01:3e:45:eb:04:
1f:6b:f2:5a:45:8b:d8:11:3f:2a:ce:4f:8a:ca:39:
b0:e4:4b:a6:87:d6:3d:c3:23:38:13:43:a1:8d:ec:
a5:11:15:47:e4:2c:b5:cb:14:a6:01:2c:f2:e7:1e:
84:19:06:3e:cd:0c:1f:d3:34:48:ad:ad:71:86:6a:
57:88:f4:1e:26:7d:55:f3:fe:f6:53:ff:c1:3e:9f:
49:0d:44:7c:b8:23:67:b9:95:65:e6:49:a8:e0:f8:
f1:c1:7a:9e:5b:fb:5a:5d:cb:28:9c:9a:9f:17:d0:
56:a1:93:07:62:05:89:2f:ba:01:c8:7d:5a:6b:1b:
de:36:06:f2:28:05:0c:11:79:a3:b9:71:58:40:8e:
2a:27:da:4a:d7:14:ce:73:7f:66:f3:8c:72:e0:3f:
ae:a6:8f:3b:96:19:a3:b0:b0:57:e8:ff:f7:89:2a:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1B:67:99:3A:10:C4:CB:D8:8B:1E:C3:4A:15:46:0D:86:A9:14:BE
X509v3 Authority Key Identifier:
keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:fc:02:1a:17:6c:99:5d:93:0e:ee:e8:ab:15:7e:00:75:ba:
f9:6c:0c:96:0b:99:c5:d9:ad:04:ec:41:97:1f:1c:6c:72:38:
9e:8b:0e:71:79:ab:17:07:72:97:d2:a1:a3:da:67:18:83:80:
59:61:48:98:f2:92:c3:4a:26:45:26:55:6b:5d:cf:49:c0:d0:
2e:fc:ae:09:a9:fa:72:83:9d:18:f5:06:dd:79:95:eb:bd:f9:
c6:fe:eb:b6:b1:8c:7d:e4:4a:81:93:cf:4f:06:c3:38:cc:3e:
a1:d5:cd:c1:34:00:7f:3d:fb:64:31:fe:d2:c6:97:fd:a5:93:
38:43:94:a9:bb:bb:b0:56:f6:45:52:91:72:90:80:a4:a6:8a:
57:aa:dd:22:07:e9:4f:a9:de:1a:04:9a:f8:61:ad:7a:f6:36:
98:b1:9b:34:07:d0:1f:b7:52:15:4c:a7:69:90:14:da:a5:05:
4b:68:52:71:5f:7e:e8:82:18:fe:70:ab:8f:b0:be:d5:df:1c:
a9:c1:e3:de:a7:10:7c:dc:ce:af:2f:65:00:11:0e:f2:be:8b:
b0:2c:58:ff:81:52:45:7c:e4:54:63:83:92:02:fa:be:8d:29:
51:c0:4a:d3:3f:a9:8c:aa:db:d3:bd:a3:33:73:d2:2a:30:b7:
c8:a1:98:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:03:13 2026 by rpki-client