Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
File: RhsmU4H0lIsYkofVpiySqpBU768.mft (raw, json)
Hash identifier: 9QLatuTFwh6i/VzvNbjz2R2hpCloHxfzWVvGdqpLZNw=
Subject key identifier: B2:4F:C9:0E:3D:3C:21:3A:1D:C1:4A:88:27:89:11:AB:CA:FF:BC:1E
Authority key identifier: 46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
Certificate issuer: /CN=461b265381f4948b189287d5a62c92aa9054efaf
Certificate serial: 01A08B314C9F8E7A5FC3F7200E2757D81DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
Manifest number: 01ED
Signing time: Thu 10 Sep 2026 12:00:58 +0000
Manifest this update: Thu 10 Sep 2026 12:00:58 +0000
Manifest next update: Fri 11 Sep 2026 12:00:58 +0000
Files and hashes: 1: RhsmU4H0lIsYkofVpiySqpBU768.crl (hash: ojNOCXzDK8/0j68Bg29eqG7ckj2seO0YCNTu3rlulnk=)
2: Yz3FCqH3QHthq81f1DJuXfruXjM.roa (hash: EtlM1emQtHiqLpDRSd/JKMYJURZgwq+EqF92luYX6xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:4c:9f:8e:7a:5f:c3:f7:20:0e:27:57:d8:1d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=461b265381f4948b189287d5a62c92aa9054efaf
Validity
Not Before: Sep 10 12:00:58 2026 GMT
Not After : Sep 11 12:00:58 2026 GMT
Subject: CN=b24fc90e3d3c213a1dc14a88278911abcaffbc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:60:ff:16:10:cd:56:27:32:1b:ab:37:6b:
05:20:55:2b:40:d0:82:4a:1c:ae:e4:35:6c:cd:1d:
e5:e6:e7:0f:f3:99:4d:19:53:f2:c0:d9:d4:28:65:
4f:8a:06:82:b4:96:9e:ce:4f:8e:8e:f8:9d:e1:08:
72:d3:a6:00:89:de:82:15:42:7b:70:07:1c:eb:57:
66:dd:11:93:90:5c:88:c2:e3:41:31:ba:94:54:c9:
ea:8d:08:60:ed:a9:b7:9b:66:bb:cb:07:70:e9:f4:
85:20:3e:23:a1:d7:23:8d:3e:f5:e9:2a:eb:68:85:
d6:6c:07:64:2c:3e:fb:ef:38:26:ef:ef:aa:da:1c:
b3:40:35:16:fa:cd:e9:32:26:25:6f:57:46:37:15:
d1:6e:88:c7:f2:ac:a1:79:47:cf:71:cb:2c:7a:53:
96:6a:0d:4d:cd:eb:fd:e1:fa:7d:0d:94:b4:c9:a0:
78:f9:e2:a5:29:3b:12:78:68:08:11:3a:e2:91:d7:
fb:35:5b:b2:34:6f:d5:4f:4c:5b:ac:90:50:a5:45:
65:84:47:43:8e:e8:95:7f:a7:bd:2d:ff:de:cf:91:
15:47:62:c7:f1:63:d8:57:53:c7:35:02:23:09:78:
a4:fb:ce:2e:20:d3:0c:26:62:c2:8a:fd:db:83:f8:
11:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4F:C9:0E:3D:3C:21:3A:1D:C1:4A:88:27:89:11:AB:CA:FF:BC:1E
X509v3 Authority Key Identifier:
keyid:46:1B:26:53:81:F4:94:8B:18:92:87:D5:A6:2C:92:AA:90:54:EF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhsmU4H0lIsYkofVpiySqpBU768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/53fbe6-c415-44a1-8311-c86253380779/1/RhsmU4H0lIsYkofVpiySqpBU768.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c0:8f:e5:c9:f4:05:93:d4:46:f3:21:39:8e:0b:cb:2e:75:
70:28:a6:26:85:61:22:b8:13:d3:d0:62:76:8f:29:0d:53:19:
92:80:4a:c0:30:7f:e3:75:d4:99:3d:26:35:ba:f9:98:3c:d4:
d1:4d:7e:bd:56:85:71:99:44:0b:70:3a:e8:d2:86:0b:08:ad:
ba:bc:d0:1f:a5:f5:ea:6d:cb:db:1e:23:ff:1b:b7:86:d5:4d:
12:e3:be:06:4f:26:b5:80:c2:20:cc:48:e3:08:71:17:22:96:
44:51:ee:19:2f:11:6d:fc:e9:39:b3:c5:c6:2d:2b:02:60:d1:
b3:b0:3b:2e:38:fa:3d:d7:c8:95:fc:8f:e8:56:05:19:6b:25:
43:c7:47:00:27:b3:c3:9b:be:39:67:f5:1a:7f:8e:64:39:fe:
6c:9c:c4:8c:be:d6:7d:ee:64:40:af:99:8c:f0:00:35:ef:ca:
63:d2:ae:a6:e3:56:b7:3b:ba:39:2a:4a:8d:84:a5:9d:52:eb:
8d:b4:8e:ce:99:18:b4:bc:57:66:f2:6a:ff:98:31:a3:65:fd:
f5:f5:07:df:d7:65:4a:6b:67:eb:01:79:1f:8c:aa:fc:e2:94:
ab:2e:f0:68:01:79:1f:e9:a8:b1:b5:4e:bd:a0:16:98:5f:24:
e5:4d:ff:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLMUyfjnpfw/cgDidX2B37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MWIyNjUzODFmNDk0OGIxODkyODdkNWE2MmM5MmFhOTA1
NGVmYWYwHhcNMjYwOTEwMTIwMDU4WhcNMjYwOTExMTIwMDU4WjAzMTEwLwYDVQQD
EyhiMjRmYzkwZTNkM2MyMTNhMWRjMTRhODgyNzg5MTFhYmNhZmZiYzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq51g/xYQzVYnMhurN2sFIFUrQNCC
Shyu5DVszR3l5ucP85lNGVPywNnUKGVPigaCtJaezk+Ojvid4Qhy06YAid6CFUJ7
cAcc61dm3RGTkFyIwuNBMbqUVMnqjQhg7am3m2a7ywdw6fSFID4jodcjjT716Srr
aIXWbAdkLD777zgm7++q2hyzQDUW+s3pMiYlb1dGNxXRbojH8qyheUfPccsselOW
ag1Nzev94fp9DZS0yaB4+eKlKTsSeGgIETrikdf7NVuyNG/VT0xbrJBQpUVlhEdD
juiVf6e9Lf/ez5EVR2LH8WPYV1PHNQIjCXik+84uINMMJmLCiv3bg/gRcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJPyQ49PCE6HcFKiCeJEavK/7weMB8GA1UdIwQY
MBaAFEYbJlOB9JSLGJKH1aYskqqQVO+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmhzbVU0SDBsSXNZa29mVnBpeVNxcEJVNzY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81M2ZiZTYtYzQxNS00NGExLTgzMTEt
Yzg2MjUzMzgwNzc5LzEvUmhzbVU0SDBsSXNZa29mVnBpeVNxcEJVNzY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi81M2ZiZTYtYzQxNS00NGExLTgzMTEtYzg2MjUzMzgwNzc5
LzEvUmhzbVU0SDBsSXNZa29mVnBpeVNxcEJVNzY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMCP5cn0
BZPURvMhOY4Lyy51cCimJoVhIrgT09Bido8pDVMZkoBKwDB/43XUmT0mNbr5mDzU
0U1+vVaFcZlEC3A66NKGCwiturzQH6X16m3L2x4j/xu3htVNEuO+Bk8mtYDCIMxI
4whxFyKWRFHuGS8RbfzpObPFxi0rAmDRs7A7Ljj6PdfIlfyP6FYFGWslQ8dHACez
w5u+OWf1Gn+OZDn+bJzEjL7Wfe5kQK+ZjPAANe/KY9KupuNWtzu6OSpKjYSlnVLr
jbSOzpkYtLxXZvJq/5gxo2X99fUH39dlSmtn6wF5H4yq/OKUqy7waAF5H+mosbVO
vaAWmF8k5U3/KQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:40:39 2026 by rpki-client