Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
File: RhU-isRttc5XS6fjnoforwlsGok.mft (raw, json)
Hash identifier: CQEjEFSiG7YAwyQIMNc1lLSBLG+HEcfmQ4TGvXnWtOA=
Subject key identifier: F9:B4:D3:C6:FE:47:66:25:FC:FD:EE:6E:45:0C:8A:3B:15:9D:16:6C
Authority key identifier: 46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
Certificate issuer: /CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Certificate serial: 019D3A53F33945770971802B81D46E1EB7F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
Manifest number: 0768
Signing time: Sun 29 Mar 2026 16:01:13 +0000
Manifest this update: Sun 29 Mar 2026 16:01:13 +0000
Manifest next update: Mon 30 Mar 2026 16:01:13 +0000
Files and hashes: 1: LH31eWblzc9N88J9ihjcAEm2GSU.roa (hash: aA7SpWPZXBL5dHzOmD7+zSVA2s9TImnC5p7oJrbvDXA=)
2: RhU-isRttc5XS6fjnoforwlsGok.crl (hash: pVC3gkEr/1KExvlk/VtKdsLvl75QIpJqs9XlZxpT0cE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:f3:39:45:77:09:71:80:2b:81:d4:6e:1e:b7:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46153e8ac46db5ce574ba7e39e87e8af096c1a89
Validity
Not Before: Mar 29 16:01:13 2026 GMT
Not After : Mar 30 16:01:13 2026 GMT
Subject: CN=f9b4d3c6fe476625fcfdee6e450c8a3b159d166c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:15:c5:f0:0d:20:14:30:4a:93:56:ef:6f:
e1:17:cb:74:21:98:f8:4f:36:1f:fc:ec:65:fe:88:
45:e6:25:c2:0c:99:e7:81:e8:3f:f5:a5:30:a7:c1:
df:e3:c7:47:0e:ba:c9:02:c5:6e:cf:25:06:f2:19:
b2:9f:45:d7:b0:5e:6b:d3:cb:0d:37:81:94:97:e1:
21:a6:6f:c6:df:77:eb:d3:df:ed:6b:2c:f8:26:e9:
12:fd:ce:86:09:e8:78:ab:dc:2f:14:fc:ed:4b:68:
01:a1:ad:29:85:9f:d6:f6:62:70:b5:7e:5b:49:f0:
0a:b1:79:12:54:1c:43:65:db:db:92:42:56:5b:69:
28:7e:30:f1:ae:41:41:93:da:db:bc:e6:92:49:64:
00:ae:52:1b:40:b9:4b:2a:9a:f8:74:ef:39:a2:bd:
ff:3f:3f:b5:d9:ad:02:5f:bf:c1:a9:65:04:44:09:
27:3c:95:3d:65:a3:77:f7:6b:c6:47:96:8f:3d:35:
1d:7b:55:96:f1:4c:4f:cf:d4:39:fe:63:5d:b0:99:
cd:08:65:09:86:fc:3b:00:5c:47:52:74:32:64:02:
81:24:2a:5e:2a:f9:36:92:78:1e:b8:ab:ef:ad:d7:
7b:18:61:a6:89:6e:a0:df:ba:3e:ea:d9:17:41:9c:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:B4:D3:C6:FE:47:66:25:FC:FD:EE:6E:45:0C:8A:3B:15:9D:16:6C
X509v3 Authority Key Identifier:
keyid:46:15:3E:8A:C4:6D:B5:CE:57:4B:A7:E3:9E:87:E8:AF:09:6C:1A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhU-isRttc5XS6fjnoforwlsGok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/0d1172-4bb2-492c-b511-78dc7b2c3e88/1/RhU-isRttc5XS6fjnoforwlsGok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:95:bf:04:04:d5:d2:e9:dd:f1:e2:57:56:53:df:45:e0:c8:
8b:8c:02:7c:74:ef:50:ad:2d:b8:0e:0d:85:68:af:23:42:2c:
10:30:f7:9c:eb:89:5f:19:c7:b0:97:5c:31:e9:10:7c:8b:33:
d8:ba:eb:c4:4e:b1:d1:16:76:3f:dd:0d:24:f4:ea:d0:52:9a:
4c:f8:30:67:18:ea:e1:ad:17:5c:ad:e9:8c:49:87:aa:14:38:
08:51:19:3b:76:87:50:88:36:b9:0f:87:ce:74:77:00:af:48:
b2:3b:fc:39:0c:37:0a:47:62:d3:36:79:92:90:30:f9:63:95:
2b:74:18:e0:dc:79:a0:96:f8:0b:a8:55:8d:ed:3b:7f:56:b0:
08:b6:a1:bc:2e:ef:9d:f3:c7:06:09:f3:c4:4a:78:af:aa:54:
2e:2d:cc:ac:c4:4f:19:48:2d:f5:55:2a:e4:61:03:3b:73:9b:
26:ab:45:d2:38:5b:35:ca:05:a0:fa:74:2f:8b:15:32:8b:6e:
dc:78:50:67:3b:e9:f8:43:70:e6:4e:93:8d:b0:ae:80:e0:64:
32:42:f1:b3:6e:85:c6:f4:c4:c9:23:57:ea:c6:0a:08:9e:9a:
05:ba:31:e6:b1:9e:fe:46:6a:04:bc:92:e7:a8:9e:6a:93:48:
be:e3:84:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:23 2026 by rpki-client