Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
File: RhsmU4H0lIsYkofVpiySqpBU768.mft (raw, json)
Hash identifier: sclsF19eeTAeKfKu1KSmweyUXavzTC4D4JUPlYDrz+I=
Subject key identifier: 2A:D9:29:F5:6D:94:7E:24:C5:53:0D:F6:73:53:C1:88:E2:77:11:90
Authority key identifier: 46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
Certificate issuer: /CN=461b265381f4948b189287d5a62c92aa9054efaf
Certificate serial: 019EB7D7AEA744D09C722B70DC788E76409B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
Manifest number: FB
Signing time: Thu 11 Jun 2026 18:00:25 +0000
Manifest this update: Thu 11 Jun 2026 18:00:25 +0000
Manifest next update: Fri 12 Jun 2026 18:00:25 +0000
Files and hashes: 1: RhsmU4H0lIsYkofVpiySqpBU768.crl (hash: oIJ2xorFcSoQZ+Bh+JRKg1FN8EpIB3cWvhELxtGEyuI=)
2: Yz3FCqH3QHthq81f1DJuXfruXjM.roa (hash: EtlM1emQtHiqLpDRSd/JKMYJURZgwq+EqF92luYX6xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d7:ae:a7:44:d0:9c:72:2b:70:dc:78:8e:76:40:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461b265381f4948b189287d5a62c92aa9054efaf
Validity
Not Before: Jun 11 18:00:25 2026 GMT
Not After : Jun 12 18:00:25 2026 GMT
Subject: CN=2ad929f56d947e24c5530df67353c188e2771190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:61:ce:37:16:26:e8:d8:59:39:c1:44:fe:85:
f4:be:e8:16:98:a4:c7:ac:e9:a7:7b:86:e4:dd:64:
f1:22:1e:83:20:1e:92:7f:a2:83:37:ef:29:34:28:
e8:c7:c6:1d:07:5b:51:69:4a:6a:2e:19:b5:d1:fe:
45:3e:b7:03:26:1d:3d:3a:5f:c2:d9:d5:33:08:d3:
59:8a:38:bb:cc:6b:28:54:4b:f7:ab:d9:62:8b:0d:
27:35:41:4a:bf:f9:5b:1f:b8:38:e4:de:a9:0d:df:
13:8b:e3:4e:e0:6b:a4:4f:17:65:24:23:82:e2:24:
4e:7e:cc:15:69:b4:45:85:f5:9c:a6:4c:95:4c:bf:
fc:a8:1f:64:0b:bb:bd:c5:7a:1e:df:91:16:13:fd:
20:00:ce:b4:26:ba:ee:ca:58:55:0d:ae:5b:ca:76:
82:76:ed:5c:20:08:fa:c3:1b:86:96:e2:ba:ad:c1:
b4:a6:9d:28:c8:9a:24:18:19:30:28:7d:74:62:8d:
dd:9a:b2:8f:d7:9d:9c:61:5e:e5:cf:10:f4:91:28:
8c:5f:1a:8c:22:0c:d8:cd:11:ce:bf:b7:23:32:59:
07:f6:bc:9f:3f:7e:b8:e8:2c:9f:6a:f7:10:da:e5:
68:e5:c0:ab:ab:d4:d5:ad:e8:cb:8c:6f:3c:63:50:
da:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D9:29:F5:6D:94:7E:24:C5:53:0D:F6:73:53:C1:88:E2:77:11:90
X509v3 Authority Key Identifier:
keyid:46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cf:44:ca:dd:c8:45:8c:46:ed:e7:f0:7b:fd:6a:70:a8:01:
e2:b2:b7:a0:a7:6a:fc:02:73:a5:da:a2:5d:00:ea:53:35:76:
80:7b:50:73:ab:88:79:70:fe:53:1a:fc:93:7d:de:e4:24:b7:
7e:6a:45:aa:53:58:6a:95:e4:89:3d:19:0b:26:9c:b7:07:6e:
2d:1b:65:7e:13:87:64:05:80:ee:f9:b7:7b:df:4e:3c:d0:67:
14:86:73:16:a5:6c:f3:f7:60:c1:9c:6b:a3:2f:53:0c:0f:2e:
cc:87:59:26:49:ed:cf:ec:2d:c2:30:1b:8c:4d:2d:85:10:46:
3f:a0:dc:06:56:fe:ce:e8:a1:00:24:18:93:4e:82:75:42:40:
a6:e0:a9:a9:46:6b:07:c3:b6:29:36:3d:8b:e5:ab:ef:67:45:
d4:8e:fa:08:c5:ff:e7:a9:63:f5:23:a9:2a:e7:62:d4:34:1c:
30:e9:88:0b:b0:d0:13:0a:79:a2:fb:16:e9:05:cf:34:49:f4:
0c:eb:f3:a4:50:de:fc:10:fa:f7:13:d2:38:a8:24:19:42:92:
e9:94:2a:37:54:af:49:f0:30:e3:68:84:90:4e:06:4e:35:1f:
b6:6f:b0:fc:db:a1:4d:4c:9a:51:5d:c4:10:7c:8c:d0:1d:27:
7f:6b:0e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:58:13 2026 by rpki-client