Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
File: RhsmU4H0lIsYkofVpiySqpBU768.mft (raw, json)
Hash identifier: JrHosf3r1TWSYJOwJVMM5i0D0QdaCPZGF0CTLSL71bU=
Subject key identifier: 53:26:18:48:AD:91:46:34:CB:8A:C8:39:81:E8:71:FD:2E:8D:B3:BF
Authority key identifier: 46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
Certificate issuer: /CN=461b265381f4948b189287d5a62c92aa9054efaf
Certificate serial: 019CE66D3D0DB78D59647DA1E790199C561D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
Manifest number: 0A
Signing time: Fri 13 Mar 2026 09:00:44 +0000
Manifest this update: Fri 13 Mar 2026 09:00:44 +0000
Manifest next update: Sat 14 Mar 2026 09:00:44 +0000
Files and hashes: 1: RhsmU4H0lIsYkofVpiySqpBU768.crl (hash: IYBzyIgoXMBfGTjBRAEc9Q2IN9ymBT5J5+5utnMqask=)
2: Yz3FCqH3QHthq81f1DJuXfruXjM.roa (hash: EtlM1emQtHiqLpDRSd/JKMYJURZgwq+EqF92luYX6xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:3d:0d:b7:8d:59:64:7d:a1:e7:90:19:9c:56:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461b265381f4948b189287d5a62c92aa9054efaf
Validity
Not Before: Mar 13 09:00:44 2026 GMT
Not After : Mar 14 09:00:44 2026 GMT
Subject: CN=53261848ad914634cb8ac83981e871fd2e8db3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:87:94:c8:e4:66:a7:53:14:eb:f4:f0:aa:
40:ba:06:9c:96:95:16:f3:be:4e:b5:49:cc:a5:e1:
32:03:28:20:0f:0a:1f:d9:73:d1:59:f3:40:6d:7d:
85:6b:97:27:86:a4:10:74:8f:89:51:14:89:22:16:
aa:ce:0a:76:0f:52:68:5e:50:18:11:44:9b:12:9e:
05:d8:a5:79:98:25:65:9c:3c:8f:0a:7e:83:37:40:
f4:72:76:ab:b0:5f:4b:68:f8:c8:ae:ea:d9:34:8b:
80:4b:e9:ba:04:cf:88:1f:4a:d1:a4:4a:50:3d:d5:
09:33:a6:d1:16:29:6f:aa:3e:ff:f6:02:02:24:92:
b5:6c:27:c6:d0:32:f9:aa:63:1d:10:6f:2b:8a:c9:
12:2f:14:68:25:61:d6:95:05:4d:25:4a:50:d4:57:
41:0e:7f:28:26:c5:10:1c:cd:45:e5:5f:8b:44:39:
63:ae:10:71:5b:2e:b9:32:25:43:74:bb:38:15:0a:
0d:f2:3f:7c:95:f4:b5:0c:64:9f:b8:f4:a1:17:ae:
0a:2a:ad:fe:39:ba:c2:fb:8a:b6:1f:47:9e:e7:34:
0c:f3:ce:00:92:87:c1:d8:9c:e6:ab:c1:ad:10:35:
bc:e3:1d:d5:7c:1f:ed:76:e0:39:c3:54:41:8b:c2:
41:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:26:18:48:AD:91:46:34:CB:8A:C8:39:81:E8:71:FD:2E:8D:B3:BF
X509v3 Authority Key Identifier:
keyid:46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:14:b7:58:6d:f6:ae:e2:3b:b6:01:e3:9c:fe:6f:d7:96:b9:
36:03:fb:0b:30:f2:3b:fa:ac:5f:c1:03:25:f4:a3:3a:1c:df:
73:6a:b2:2d:b1:93:0e:20:b9:38:d2:98:ec:69:a8:6e:e6:8e:
cd:89:6f:6f:c1:06:ee:30:ec:a8:45:75:eb:6d:d1:4c:87:5a:
8e:92:2c:7b:e2:64:ee:3f:94:2b:6d:76:af:01:11:2c:90:b8:
75:6d:bb:47:ad:a4:1c:7c:ba:3a:6e:f2:56:d3:53:9d:67:32:
ea:87:c8:5a:d0:ca:89:98:04:8e:00:e3:23:f4:cb:0a:d0:5f:
4c:58:46:8d:74:5f:c3:92:52:7c:57:61:d8:cb:65:a9:b6:6e:
7f:de:91:9a:cc:32:b0:7a:4d:7f:43:67:0c:d9:5c:54:9e:de:
b7:05:b8:5f:6e:c2:89:7a:e5:4d:19:bc:4a:d9:d8:fb:cb:df:
45:7c:bc:30:8c:4b:93:e7:62:d8:dd:75:6d:4b:8c:b0:04:b6:
56:73:7a:a5:78:90:9c:f8:de:4a:60:1f:bf:48:81:6a:b1:ec:
32:35:30:12:6a:96:52:4e:2a:59:e1:36:0d:bc:cb:79:d8:84:
64:08:78:a6:d7:60:6d:e0:22:a3:af:bb:10:ee:55:45:08:b2:
a0:7f:c0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:53:49 2026 by rpki-client