Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
File: RhsmU4H0lIsYkofVpiySqpBU768.mft (raw, json)
Hash identifier: o68o1krIPqtQbcgPMN4s8/pT8Qqsg35Ho1SSKj9D4u8=
Subject key identifier: F8:F2:30:16:32:56:18:A2:F2:BD:F8:06:4D:06:C0:FE:47:99:78:0B
Authority key identifier: 46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
Certificate issuer: /CN=461b265381f4948b189287d5a62c92aa9054efaf
Certificate serial: 019FA184BD2E1F5858F69798C5FBAE6D568E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
Manifest number: 0174
Signing time: Mon 27 Jul 2026 03:00:58 +0000
Manifest this update: Mon 27 Jul 2026 03:00:58 +0000
Manifest next update: Tue 28 Jul 2026 03:00:58 +0000
Files and hashes: 1: RhsmU4H0lIsYkofVpiySqpBU768.crl (hash: 6BH0ACI0p3ct6fC84GfJ3i0lm+DOQK/bUld0lkCpKzM=)
2: Yz3FCqH3QHthq81f1DJuXfruXjM.roa (hash: EtlM1emQtHiqLpDRSd/JKMYJURZgwq+EqF92luYX6xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:bd:2e:1f:58:58:f6:97:98:c5:fb:ae:6d:56:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461b265381f4948b189287d5a62c92aa9054efaf
Validity
Not Before: Jul 27 03:00:58 2026 GMT
Not After : Jul 28 03:00:58 2026 GMT
Subject: CN=f8f23016325618a2f2bdf8064d06c0fe4799780b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:5d:6e:36:a3:27:da:e1:7a:19:e7:d3:75:
a8:0b:d6:11:e9:22:11:54:a2:aa:a9:7a:50:b1:bf:
60:7c:a6:e3:00:44:e6:d5:bc:5f:9d:5d:7a:74:a5:
f4:f9:6b:8e:52:d2:33:a6:92:f5:7f:7e:63:06:48:
2a:16:2e:f3:09:71:67:fa:4a:36:e2:b3:f7:c6:bf:
27:3e:cf:fb:5f:e8:a7:13:3d:0e:9c:7a:a5:ee:ae:
c6:82:db:ef:14:e4:05:12:de:af:40:10:ae:e7:bd:
70:a7:c6:57:5e:79:b6:2b:3c:ed:cb:ce:a6:a2:b3:
aa:fd:1a:6f:4c:4a:24:4f:69:1e:e5:3a:98:45:be:
de:f6:a8:1c:14:b7:1d:28:c5:1e:d9:b2:ea:a0:c0:
62:43:7d:ed:99:ef:1d:69:93:61:20:8f:a2:1a:12:
a8:6a:95:a5:36:5b:b9:a6:5e:19:a2:1e:77:d9:ff:
bb:23:d2:3a:3a:0b:dc:a5:3c:99:8b:00:c4:f8:10:
12:d2:bc:ea:24:b4:e2:32:6b:81:b2:90:c0:5b:a9:
bd:d2:dc:17:b5:c0:3c:78:61:8e:47:34:44:24:b8:
80:f0:e1:fb:2f:cd:3b:e3:f2:0e:9f:e0:1d:3b:8e:
c2:bb:20:28:a9:5a:38:59:57:13:41:f7:c9:8e:1b:
09:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F2:30:16:32:56:18:A2:F2:BD:F8:06:4D:06:C0:FE:47:99:78:0B
X509v3 Authority Key Identifier:
keyid:46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:86:e5:e4:2c:a7:75:30:61:66:78:a1:65:3e:88:c9:67:8a:
a1:50:57:9f:d9:07:b9:ae:9d:97:35:ae:6b:25:5a:fe:27:a0:
7b:fc:31:62:62:b2:d9:a4:90:35:f5:7a:33:f4:55:dc:14:71:
12:b7:e2:fb:a0:86:d6:0d:f7:a9:12:53:19:8d:31:bc:ba:8f:
5c:09:6b:22:55:60:7a:bf:55:3c:cf:db:cc:17:2d:f7:7f:72:
93:bd:20:1a:23:eb:83:c2:f8:c9:8c:26:2d:f2:4e:de:97:94:
e9:30:74:cf:34:9d:61:4b:be:0a:6b:3f:8e:7e:db:ed:3f:b6:
4f:e2:58:d2:75:d4:7a:d7:05:82:b3:28:f5:ba:22:34:85:6e:
82:54:17:a7:62:c2:83:f9:12:6b:0b:ce:ba:44:0b:ab:b7:04:
32:93:bc:92:ee:8d:a1:13:db:00:78:9f:91:03:20:16:f2:cc:
a7:f9:05:5f:4c:e9:b2:25:39:db:e0:86:75:95:07:c2:df:19:
f3:62:aa:7f:37:70:3b:0e:49:25:14:ce:79:e9:f1:9d:bd:0d:
18:95:ca:ed:a3:e3:05:ad:05:6f:8d:5a:e2:90:b2:39:e9:c3:
35:c4:6e:e1:db:b9:23:71:90:9c:67:74:e5:b6:e4:4b:9a:e4:
e0:a1:60:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:57:56 2026 by rpki-client