Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
File: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft (raw, json)
Hash identifier: 6Em0Jwn4QsWwrmPVnWAIN7VPVymYbkAA25SAXAocHLA=
Subject key identifier: F1:8E:A2:63:6D:AA:5F:EE:22:A3:C6:37:E4:72:D2:F0:A3:B2:45:77
Authority key identifier: 44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
Certificate issuer: /CN=447f9143ea55358fbd62fa5644547460172e1afd
Certificate serial: 01A17EBCB4A7BF8FCF48E6231B4472C146B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
Manifest number: 089C
Signing time: Tue 27 Oct 2026 19:00:58 +0000
Manifest this update: Tue 27 Oct 2026 19:00:58 +0000
Manifest next update: Wed 28 Oct 2026 19:00:58 +0000
Files and hashes: 1: 5TB32dEiFrDCOhmncS_By-MXI5g.roa (hash: nEn2khZ7HTIKhK7IdrNN/UAq+nwAT5kuCFekds2YcnY=)
2: RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl (hash: sbNCWb36xiW8V5edYVabjzOEIGojl0xTbcEiFxq9hYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:b4:a7:bf:8f:cf:48:e6:23:1b:44:72:c1:46:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447f9143ea55358fbd62fa5644547460172e1afd
Validity
Not Before: Oct 27 19:00:58 2026 GMT
Not After : Oct 28 19:00:58 2026 GMT
Subject: CN=f18ea2636daa5fee22a3c637e472d2f0a3b24577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:8b:a2:7a:19:a4:f8:87:69:59:9b:45:67:
54:d3:3d:a8:91:37:9f:e2:60:f7:77:b0:bd:16:12:
5d:31:8f:62:99:cf:0d:21:78:0b:23:d1:3a:6f:84:
9d:39:07:30:46:1c:10:5e:3c:b3:41:2d:e2:8a:55:
98:a7:df:4c:e0:ce:45:06:08:f5:b2:54:8c:bb:ff:
2f:fb:8b:f3:1a:0c:7f:55:14:40:00:9f:1a:8d:d0:
d8:f3:0c:af:de:3b:c6:ed:64:56:91:9e:2b:5c:4a:
01:78:de:7d:a6:c6:17:8e:42:93:d6:c2:0f:23:a2:
00:3d:e4:2d:d6:52:c5:82:ea:c6:4c:af:05:ef:e2:
fe:62:2f:e5:5d:f5:9a:1e:97:ec:ad:1f:f2:80:3d:
14:e5:aa:b7:83:b3:b9:71:79:0b:77:ba:e5:1b:9e:
12:89:78:8a:46:09:cc:fc:ab:ee:24:90:56:8e:c1:
d4:f9:8f:3b:88:c0:de:71:2b:00:e8:b8:2b:ee:e9:
55:e1:59:75:64:d2:0f:f5:9f:96:7b:eb:9c:25:de:
9c:85:58:26:b1:7f:52:6b:86:22:d6:31:05:86:44:
18:e0:8d:9a:10:21:16:c3:65:0f:a6:c1:88:f5:15:
27:8a:23:19:54:43:80:cb:f7:93:f5:d3:9d:17:5a:
82:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8E:A2:63:6D:AA:5F:EE:22:A3:C6:37:E4:72:D2:F0:A3:B2:45:77
X509v3 Authority Key Identifier:
keyid:44:7F:91:43:EA:55:35:8F:BD:62:FA:56:44:54:74:60:17:2E:1A:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/9ea369-a28c-4c7e-9a15-c4292fac9be8/1/RH-RQ-pVNY-9YvpWRFR0YBcuGv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:a3:ed:91:20:d8:fd:35:10:e1:c2:67:da:ae:5d:2e:43:8a:
d0:a2:82:b0:45:af:c5:cd:fb:97:d5:59:1f:16:61:ad:f5:99:
8f:30:52:d5:b8:a6:27:a8:2b:3f:96:b2:a7:9a:df:48:d0:ff:
33:58:e5:0f:08:c8:af:49:76:2d:e6:19:55:63:58:3e:3d:5a:
47:4f:8e:7d:c5:bc:9c:9e:de:1f:b1:ac:c4:7c:2e:84:66:a7:
3c:8e:e6:dd:7d:a7:09:66:13:af:98:2c:4e:95:c0:13:0f:0c:
55:98:7d:d8:0c:a8:29:53:51:a3:da:5e:53:7e:4f:a8:52:2e:
ff:86:76:98:e9:56:86:2a:d4:e1:ca:ce:a1:fa:e2:c1:6c:cf:
20:ca:fb:aa:f7:ab:9f:8e:8f:61:64:ad:ec:bb:22:45:19:76:
b5:2e:6a:11:3a:31:51:fd:20:21:69:ff:26:09:17:2e:9f:38:
8e:45:d0:08:d0:6a:0d:76:b4:94:e1:73:70:60:b5:5f:c3:1f:
62:d0:c4:34:a2:d0:a5:2b:a7:f3:c5:bb:3c:fb:9d:14:1c:a1:
1b:d7:81:ce:cd:84:52:f7:75:68:0b:63:0c:8c:34:7b:73:c0:
2b:bc:25:49:7c:ca:4a:9b:a0:60:4a:43:54:d2:56:89:37:a0:
09:3a:68:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:29 2026 by rpki-client