Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
File: RhsmU4H0lIsYkofVpiySqpBU768.mft (raw, json)
Hash identifier: GppsGEe2rZ3e+qjLEtWIdQG1ELi0ZRlZo1DFhF5eFlE=
Subject key identifier: DE:95:73:7D:C4:DC:43:30:A4:10:12:64:51:98:EC:BB:B8:D6:C0:E0
Authority key identifier: 46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
Certificate issuer: /CN=461b265381f4948b189287d5a62c92aa9054efaf
Certificate serial: 019DD01A2E8B9D73BB6ED0F6BD34392DDD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
Manifest number: 83
Signing time: Mon 27 Apr 2026 18:01:09 +0000
Manifest this update: Mon 27 Apr 2026 18:01:09 +0000
Manifest next update: Tue 28 Apr 2026 18:01:09 +0000
Files and hashes: 1: RhsmU4H0lIsYkofVpiySqpBU768.crl (hash: zRW0xFhHAZOC5ovmiqFH9+npGuNePa7pnHqHQr60kso=)
2: Yz3FCqH3QHthq81f1DJuXfruXjM.roa (hash: EtlM1emQtHiqLpDRSd/JKMYJURZgwq+EqF92luYX6xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:1a:2e:8b:9d:73:bb:6e:d0:f6:bd:34:39:2d:dd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461b265381f4948b189287d5a62c92aa9054efaf
Validity
Not Before: Apr 27 18:01:09 2026 GMT
Not After : Apr 28 18:01:09 2026 GMT
Subject: CN=de95737dc4dc4330a41012645198ecbbb8d6c0e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0d:5e:6f:06:0e:69:26:a4:51:59:f6:bd:92:
b2:ba:88:b6:93:8a:d1:4a:2e:3c:2d:0d:82:68:d9:
9b:50:b9:63:39:40:ca:08:25:b9:60:71:2c:9f:9c:
9f:5f:7e:d5:0f:eb:8c:ad:c0:2f:98:f4:84:66:84:
e5:55:24:0a:2b:60:8b:da:b1:0c:5d:0e:74:59:b4:
e1:19:74:ff:cb:2c:b1:62:f6:12:42:19:66:60:e2:
d3:2f:c8:1e:8a:5e:7d:17:cc:51:d9:1b:4f:4a:10:
d2:a9:a8:22:9c:3d:0f:80:0a:0d:7c:04:e7:7f:fa:
e7:3f:12:c6:46:02:7a:c2:e1:40:db:5e:be:ca:01:
57:6c:df:3d:39:ac:5b:ff:a7:2d:a4:88:f6:f8:a2:
52:f1:bf:e6:b9:f7:66:90:4c:f8:92:c3:78:d3:d2:
94:60:8c:d8:bf:46:fd:fa:3b:22:ab:25:59:70:41:
35:5d:e2:be:73:ae:67:c4:e8:cb:1f:8a:c4:9b:d6:
63:48:36:30:b5:07:df:d1:8f:02:ac:e1:4c:75:9a:
f3:0b:bd:d3:56:1a:04:cd:94:24:fd:3a:c5:ac:cc:
c5:44:7a:0f:95:e5:f7:6a:5c:13:51:30:27:30:a6:
9f:6a:83:f0:71:6b:e9:38:19:bc:6d:6b:c0:39:ff:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:95:73:7D:C4:DC:43:30:A4:10:12:64:51:98:EC:BB:B8:D6:C0:E0
X509v3 Authority Key Identifier:
keyid:46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4a:e5:ac:08:99:5f:1e:b6:5e:24:74:04:13:78:67:e9:80:
e3:cb:09:a7:06:7b:7f:16:68:2b:d9:c0:7d:18:d9:3b:f8:d8:
aa:87:16:43:40:8b:a9:b4:ed:4d:6c:3b:80:db:83:c3:d8:ec:
00:7d:4a:70:d1:30:3e:d0:70:f1:c5:7d:c6:0d:c5:24:11:93:
a3:11:95:36:27:88:bc:fc:8b:d0:57:58:4f:ab:ff:cf:ec:8a:
47:22:c9:a1:97:09:59:e3:3c:41:59:c9:c5:49:ee:07:de:3b:
79:98:eb:16:0e:1b:cc:cc:39:77:bb:3d:06:ee:55:a1:e5:4f:
94:55:aa:e3:e8:b2:1e:cc:54:31:f6:c4:3c:e3:65:51:9e:08:
8d:ab:23:6d:7b:26:ff:01:a9:6a:a0:ad:25:49:d2:a6:a6:e2:
7b:25:7e:dd:ca:97:13:ae:1b:28:88:41:58:0f:7c:09:0a:30:
2d:23:11:87:52:0c:89:72:36:ee:cb:ce:b7:92:75:43:cb:60:
b6:77:ca:59:f9:12:cd:6c:79:a8:f5:bc:03:2e:af:fd:89:d9:
eb:d0:5f:fc:4d:d3:2b:9e:d7:77:b1:6a:8f:89:a6:60:5b:c7:
a3:11:f4:57:75:49:5e:dd:57:fe:9e:db:14:33:03:be:1c:be:
ed:fe:99:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QGi6LnXO7btD2vTQ5Ld1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MWIyNjUzODFmNDk0OGIxODkyODdkNWE2MmM5MmFhOTA1
NGVmYWYwHhcNMjYwNDI3MTgwMTA5WhcNMjYwNDI4MTgwMTA5WjAzMTEwLwYDVQQD
EyhkZTk1NzM3ZGM0ZGM0MzMwYTQxMDEyNjQ1MTk4ZWNiYmI4ZDZjMGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog1ebwYOaSakUVn2vZKyuoi2k4rR
Si48LQ2CaNmbULljOUDKCCW5YHEsn5yfX37VD+uMrcAvmPSEZoTlVSQKK2CL2rEM
XQ50WbThGXT/yyyxYvYSQhlmYOLTL8geil59F8xR2RtPShDSqaginD0PgAoNfATn
f/rnPxLGRgJ6wuFA216+ygFXbN89Oaxb/6ctpIj2+KJS8b/mufdmkEz4ksN409KU
YIzYv0b9+jsiqyVZcEE1XeK+c65nxOjLH4rEm9ZjSDYwtQff0Y8CrOFMdZrzC73T
VhoEzZQk/TrFrMzFRHoPleX3alwTUTAnMKafaoPwcWvpOBm8bWvAOf/gaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN6Vc33E3EMwpBASZFGY7Lu41sDgMB8GA1UdIwQY
MBaAFEYbJlOB9JSLGJKH1aYskqqQVO+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhzbVU0SDBsSXNZa29mVnBpeVNxcEJVNzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81M2ZiZTYtYzQxNS00NGExLTgzMTEt
Yzg2MjUzMzgwNzc5LzEvUmhzbVU0SDBsSXNZa29mVnBpeVNxcEJVNzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi81M2ZiZTYtYzQxNS00NGExLTgzMTEtYzg2MjUzMzgwNzc5
LzEvUmhzbVU0SDBsSXNZa29mVnBpeVNxcEJVNzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkrlrAiZ
Xx62XiR0BBN4Z+mA48sJpwZ7fxZoK9nAfRjZO/jYqocWQ0CLqbTtTWw7gNuDw9js
AH1KcNEwPtBw8cV9xg3FJBGToxGVNieIvPyL0FdYT6v/z+yKRyLJoZcJWeM8QVnJ
xUnuB947eZjrFg4bzMw5d7s9Bu5VoeVPlFWq4+iyHsxUMfbEPONlUZ4IjasjbXsm
/wGpaqCtJUnSpqbieyV+3cqXE64bKIhBWA98CQowLSMRh1IMiXI27svOt5J1Q8tg
tnfKWfkSzWx5qPW8Ay6v/YnZ69Bf/E3TK57Xd7Fqj4mmYFvHoxH0V3VJXt1X/p7b
FDMDvhy+7f6Z1A==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:50:04 2026 by rpki-client