Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
File: RhsmU4H0lIsYkofVpiySqpBU768.mft (raw, json)
Hash identifier: O/J0PsqkubkYW+AfyJLQ6cF6MEDkn2PuGZBbFfMWOvk=
Subject key identifier: 65:CE:76:B4:7C:BB:7E:A5:35:EB:5A:02:BE:47:90:3E:A0:97:EE:A6
Authority key identifier: 46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
Certificate issuer: /CN=461b265381f4948b189287d5a62c92aa9054efaf
Certificate serial: 01A17E8606D1D714AB0EA4B21484309FE311
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
Manifest number: 026B
Signing time: Tue 27 Oct 2026 18:01:15 +0000
Manifest this update: Tue 27 Oct 2026 18:01:15 +0000
Manifest next update: Wed 28 Oct 2026 18:01:15 +0000
Files and hashes: 1: RhsmU4H0lIsYkofVpiySqpBU768.crl (hash: LWSAy7b/QfStb7kjdos0zDPyGWFSJUrmu6mLpgzFc9s=)
2: Yz3FCqH3QHthq81f1DJuXfruXjM.roa (hash: EtlM1emQtHiqLpDRSd/JKMYJURZgwq+EqF92luYX6xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 18:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:86:06:d1:d7:14:ab:0e:a4:b2:14:84:30:9f:e3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461b265381f4948b189287d5a62c92aa9054efaf
Validity
Not Before: Oct 27 18:01:15 2026 GMT
Not After : Oct 28 18:01:15 2026 GMT
Subject: CN=65ce76b47cbb7ea535eb5a02be47903ea097eea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:8f:31:97:5a:d7:2a:5f:ec:12:9e:a4:f7:
aa:ca:8f:53:bc:97:f0:4d:41:c0:6c:ff:dd:1b:b0:
be:1c:36:48:c0:47:5a:47:c4:e2:f2:8f:78:4f:ff:
d5:f0:ee:7a:e4:50:b6:c4:95:10:a6:c7:66:74:ab:
46:52:6e:2a:21:a7:e6:55:83:8e:e1:31:c7:27:39:
22:1a:65:0c:16:e7:64:84:5e:53:49:0e:85:f6:47:
0d:0e:1f:b4:88:5b:16:e8:f4:da:00:fe:17:38:ef:
69:5f:31:de:d1:57:b6:f6:f4:de:b8:5f:29:66:80:
a5:0b:91:d4:2f:39:c0:28:5d:de:2a:f9:13:72:8d:
b2:32:c0:7e:5e:20:6a:ec:f1:14:dc:3d:8a:bc:e1:
46:c3:56:89:0b:b7:4f:67:fa:68:dc:26:c0:2e:b0:
5a:e5:8d:5f:1a:e6:94:96:0c:32:40:9d:81:ea:4d:
7e:5d:74:cf:e6:9a:8b:f1:9e:c8:9e:bc:85:dc:4e:
c5:50:da:8b:2f:2b:37:cb:15:74:2c:8d:99:26:7a:
1d:ca:e2:88:e4:68:d1:d5:fa:28:07:50:df:d5:ed:
8a:99:68:57:b9:83:77:ad:a9:74:49:5f:0c:bf:91:
14:30:a9:18:d5:71:d4:ed:a6:73:02:2f:90:ba:9c:
8e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CE:76:B4:7C:BB:7E:A5:35:EB:5A:02:BE:47:90:3E:A0:97:EE:A6
X509v3 Authority Key Identifier:
keyid:46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:db:de:cb:c4:53:85:12:e2:07:7f:1c:fc:52:6a:5a:1a:c1:
7b:c1:d1:38:ca:2e:00:01:e0:3b:98:08:60:9e:6c:1d:9f:ec:
fd:9a:27:e9:4b:33:5e:8d:cd:8b:8a:38:b7:13:ce:4b:c3:22:
74:67:29:1a:0e:b3:aa:16:23:48:d0:7e:b0:07:41:b2:c1:f8:
52:80:d1:6f:b5:9a:1f:a4:e3:ba:ae:62:2b:9a:03:25:e4:f0:
72:c0:04:e1:d8:df:8d:6d:df:05:e7:5c:78:ec:e6:7b:61:7d:
fc:91:27:7f:f9:ac:f9:71:93:8c:c4:59:ca:03:41:58:d2:7b:
5e:cf:e1:1e:b5:9a:4d:63:4d:89:8c:e2:51:82:c5:83:7f:df:
b0:07:63:32:63:75:89:c5:3c:68:a2:ff:5e:7e:ca:b8:7e:b7:
19:21:48:44:c7:52:d8:af:03:52:58:ba:f4:91:16:3e:c5:8d:
39:d8:74:77:10:0a:4a:b2:41:1a:cf:1a:b3:c6:e3:8a:16:9a:
56:d2:40:cc:6e:aa:fd:ab:3a:8b:47:3a:69:ac:6b:e7:45:d1:
2e:f4:85:81:b3:89:6d:8e:ac:c1:d3:70:27:2c:18:e2:20:51:
46:7e:78:fe:9c:07:13:f5:dc:0b:4a:5f:51:69:a0:f3:f8:4f:
6b:17:cc:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF+hgbR1xSrDqSyFIQwn+MRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MWIyNjUzODFmNDk0OGIxODkyODdkNWE2MmM5MmFhOTA1
NGVmYWYwHhcNMjYxMDI3MTgwMTE1WhcNMjYxMDI4MTgwMTE1WjAzMTEwLwYDVQQD
Eyg2NWNlNzZiNDdjYmI3ZWE1MzVlYjVhMDJiZTQ3OTAzZWEwOTdlZWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+yPMZda1ypf7BKepPeqyo9TvJfw
TUHAbP/dG7C+HDZIwEdaR8Ti8o94T//V8O565FC2xJUQpsdmdKtGUm4qIafmVYOO
4THHJzkiGmUMFudkhF5TSQ6F9kcNDh+0iFsW6PTaAP4XOO9pXzHe0Ve29vTeuF8p
ZoClC5HULznAKF3eKvkTco2yMsB+XiBq7PEU3D2KvOFGw1aJC7dPZ/po3CbALrBa
5Y1fGuaUlgwyQJ2B6k1+XXTP5pqL8Z7InryF3E7FUNqLLys3yxV0LI2ZJnodyuKI
5GjR1fooB1Df1e2KmWhXuYN3ral0SV8Mv5EUMKkY1XHU7aZzAi+QupyOIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXOdrR8u36lNetaAr5HkD6gl+6mMB8GA1UdIwQY
MBaAFEYbJlOB9JSLGJKH1aYskqqQVO+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhzbVU0SDBsSXNZa29mVnBpeVNxcEJVNzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81M2ZiZTYtYzQxNS00NGExLTgzMTEt
Yzg2MjUzMzgwNzc5LzEvUmhzbVU0SDBsSXNZa29mVnBpeVNxcEJVNzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi81M2ZiZTYtYzQxNS00NGExLTgzMTEtYzg2MjUzMzgwNzc5
LzEvUmhzbVU0SDBsSXNZa29mVnBpeVNxcEJVNzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHNvey8RT
hRLiB38c/FJqWhrBe8HROMouAAHgO5gIYJ5sHZ/s/Zon6UszXo3Ni4o4txPOS8Mi
dGcpGg6zqhYjSNB+sAdBssH4UoDRb7WaH6Tjuq5iK5oDJeTwcsAE4djfjW3fBedc
eOzme2F9/JEnf/ms+XGTjMRZygNBWNJ7Xs/hHrWaTWNNiYziUYLFg3/fsAdjMmN1
icU8aKL/Xn7KuH63GSFIRMdS2K8DUli69JEWPsWNOdh0dxAKSrJBGs8as8bjihaa
VtJAzG6q/as6i0c6aaxr50XRLvSFgbOJbY6swdNwJywY4iBRRn54/pwHE/XcC0pf
UWmg8/hPaxfMxA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 04:33:20 2026 by rpki-client