
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
File: RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft (raw, json)
Hash identifier: PAfKHPH1ytrqthl2nVUxe5fnwGdTzHPP6pmIzFZtibA=
Subject key identifier: 18:FB:E6:A7:16:9A:AF:E9:65:DD:25:E0:A8:F0:4C:D4:47:6F:6F:0C
Authority key identifier: 44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
Certificate issuer: /CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Certificate serial: 01A180E2012F52AC271DD03C4B73DF9F29AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
Manifest number: 103F
Signing time: Wed 28 Oct 2026 05:00:57 +0000
Manifest this update: Wed 28 Oct 2026 05:00:57 +0000
Manifest next update: Thu 29 Oct 2026 05:00:57 +0000
Files and hashes: 1: 9YTD0v4Pt02y4exV-MpBb-Wfh1k.roa (hash: YbLvfyBoLoqzM19hDuxZK6dYyx9mo5iP+7ERQ+VwX54=)
2: E2G2DaM_iVvhrdSEngxZFvVRvnc.roa (hash: LdD2red6sZjJpRO6y5sRuNONGS0cYBfgalX1Z/ZkYTY=)
3: RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl (hash: 44QdPMCQJUTmLeN20utiRex0dSbqFX9lXVj+2C1UtyA=)
4: UAGodHDbqDWG49dYzPHaryAek6s.roa (hash: IDNqz8+zFoTt6NddKniF5Q+nKnzOcuUZxUaDBUCMp+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:e2:01:2f:52:ac:27:1d:d0:3c:4b:73:df:9f:29:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44728fb31c4ebdfb9bf129745b91bd2e2ee8ef31
Validity
Not Before: Oct 28 05:00:57 2026 GMT
Not After : Oct 29 05:00:57 2026 GMT
Subject: CN=18fbe6a7169aafe965dd25e0a8f04cd4476f6f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0c:f1:20:d9:39:5e:7a:65:f2:0c:6e:29:50:
10:ee:76:7e:1e:38:3f:3f:6c:84:66:9b:bf:6b:bd:
66:ee:9d:b7:ed:cc:16:02:af:68:41:01:fd:d7:56:
cf:68:ab:da:19:c9:81:a7:17:e0:67:c9:cd:a7:4d:
96:18:f6:43:a6:88:39:97:3a:00:0b:02:e9:1f:5c:
04:f9:01:4e:5c:56:38:ca:e2:07:6a:87:64:cb:68:
74:46:1f:68:88:83:d1:54:7b:1d:18:09:3f:43:5c:
59:9f:f4:63:0a:b7:54:18:85:6c:e7:4d:2e:40:55:
b9:dc:2d:b7:f6:66:3f:c3:6e:0d:9d:58:0a:f0:57:
22:a6:25:87:29:fa:67:ba:79:06:c0:db:9e:cb:45:
a1:97:24:ca:c2:1f:69:29:f0:f5:9c:f6:32:28:48:
94:19:8f:69:e0:26:93:03:74:12:ef:95:f0:4b:54:
d8:17:18:b6:77:3e:77:76:6f:d6:9d:3d:af:7f:41:
5c:e9:b1:74:b3:be:2e:80:a3:e9:b9:2c:a2:46:95:
25:4b:85:d1:cf:0a:1c:d5:73:9b:02:de:d1:bb:3d:
db:ab:25:3a:c4:ac:b9:90:be:2d:47:6c:aa:5f:22:
10:fa:41:b1:35:c8:d0:da:cf:21:44:ea:9a:b2:a2:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FB:E6:A7:16:9A:AF:E9:65:DD:25:E0:A8:F0:4C:D4:47:6F:6F:0C
X509v3 Authority Key Identifier:
keyid:44:72:8F:B3:1C:4E:BD:FB:9B:F1:29:74:5B:91:BD:2E:2E:E8:EF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHKPsxxOvfub8Sl0W5G9Li7o7zE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3ac761-9ad8-4513-8a32-1f55d9999eeb/1/RHKPsxxOvfub8Sl0W5G9Li7o7zE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:50:8a:0f:0f:1d:db:7c:ca:fa:b5:a4:66:df:95:43:78:b5:
7d:74:00:a6:87:ea:7d:c5:eb:cd:bf:af:69:29:bd:51:10:af:
20:11:7c:2c:71:7a:96:d8:86:d8:e0:23:8b:c2:11:a5:81:e2:
32:97:9e:82:b7:cf:04:3a:01:ba:06:0e:cc:4a:35:8a:a4:80:
d6:75:d3:b0:63:44:ad:8b:93:2f:e6:18:86:19:be:25:9a:bc:
78:35:59:c7:07:cb:a5:2a:a2:01:93:8d:f0:88:c6:aa:d6:c0:
92:38:de:33:78:75:8b:75:1c:42:a0:da:77:e5:78:67:3e:0c:
9e:45:39:b7:d8:2c:2b:e6:d3:c0:e1:a9:75:c5:5e:b4:eb:2b:
ed:ac:51:21:eb:12:96:73:89:6a:9d:2b:d0:e7:96:b8:4f:23:
f8:bf:29:bf:1f:18:61:60:33:c7:d3:cc:97:f9:5a:8a:68:ec:
04:f5:e9:1f:e9:0d:61:f0:e5:d7:c6:6e:86:67:47:12:c8:ed:
d9:4a:95:b4:7a:a1:20:74:a9:a5:6b:44:34:36:4b:d5:1f:4b:
69:87:9a:71:fc:b8:1d:07:75:03:f0:e3:d0:bf:4b:8d:08:5c:
f1:29:ee:9e:17:71:b3:8b:e7:61:31:d0:96:4a:02:4e:54:d5:
d1:3f:60:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:50:15 2026 by rpki-client