Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
File: RhX5mPdHJp43r32hEIBhJMmX3Fc.mft (raw, json)
Hash identifier: WNSatLqjorLAUM7v5Ku0Rp1GIRX4sQ1c2pWkCIkRFQM=
Subject key identifier: 1A:14:FE:23:BF:04:CC:B8:9E:70:FC:3D:C0:02:15:3D:69:B3:03:B4
Authority key identifier: 46:15:F9:98:F7:47:26:9E:37:AF:7D:A1:10:80:61:24:C9:97:DC:57
Certificate issuer: /CN=4615f998f747269e37af7da110806124c997dc57
Certificate serial: 01A129C393C54E5D81D1D601AECA8D23A65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RhX5mPdHJp43r32hEIBhJMmX3Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
Manifest number: 0172
Signing time: Sun 11 Oct 2026 07:00:45 +0000
Manifest this update: Sun 11 Oct 2026 07:00:45 +0000
Manifest next update: Mon 12 Oct 2026 07:00:45 +0000
Files and hashes: 1: RhX5mPdHJp43r32hEIBhJMmX3Fc.crl (hash: BDH3CB5IZ6K0rLn7KlgWL15kMx1ZIiRnNFv0IPactEg=)
2: dLlLozq_LxYh46bnmgkvjvoWmpw.roa (hash: h2aFWt98BJV3iCLAz94s4Esgtecs4nrZqTq2dKOirQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RhX5mPdHJp43r32hEIBhJMmX3Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:c3:93:c5:4e:5d:81:d1:d6:01:ae:ca:8d:23:a6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4615f998f747269e37af7da110806124c997dc57
Validity
Not Before: Oct 11 07:00:45 2026 GMT
Not After : Oct 12 07:00:45 2026 GMT
Subject: CN=1a14fe23bf04ccb89e70fc3dc002153d69b303b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f8:6e:b3:f5:98:40:0e:fa:b9:66:5b:ef:d5:
5f:44:f4:41:b9:fd:d2:2c:02:6e:4b:0f:79:ca:6a:
2e:7b:51:76:f2:6b:e7:1c:e2:f3:0d:b2:a4:3b:08:
6d:c6:9f:89:8c:86:0f:cc:06:d0:0a:4c:94:87:b1:
d7:5e:01:f2:52:44:fb:d5:88:9d:32:93:e4:fe:0e:
54:4e:3c:a4:ec:26:79:11:62:32:c0:35:9d:8c:31:
7e:0c:08:23:5b:c2:2c:37:8e:b4:86:59:88:8b:2f:
d3:e8:f0:fc:c5:2b:3c:ca:f6:f7:07:b9:16:9f:0f:
d3:88:7d:21:39:c2:2a:fa:7a:5a:31:56:3d:79:1c:
a5:3b:38:ac:f8:c8:33:a5:74:b7:c6:8e:76:68:62:
7c:96:b5:52:37:6b:c4:d6:79:02:55:b5:8a:c3:5e:
dd:2b:93:07:f1:7d:8e:59:88:a9:2b:85:1f:7c:5c:
32:90:65:90:48:98:65:a7:bd:18:2a:c0:57:ba:1d:
e8:e7:1c:2d:52:e0:e8:15:5f:8d:78:29:47:08:b6:
86:3b:8f:e8:bf:de:1f:a3:42:2f:ff:de:91:26:2d:
8d:bc:45:c6:c2:75:6a:63:2b:a7:a9:3e:01:59:fc:
03:e6:db:30:9a:b4:6b:e8:0e:5d:22:99:d2:37:b5:
e8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:14:FE:23:BF:04:CC:B8:9E:70:FC:3D:C0:02:15:3D:69:B3:03:B4
X509v3 Authority Key Identifier:
keyid:46:15:F9:98:F7:47:26:9E:37:AF:7D:A1:10:80:61:24:C9:97:DC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhX5mPdHJp43r32hEIBhJMmX3Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2a0d24-6262-4c3f-b2fe-6398efa3edc5/1/RhX5mPdHJp43r32hEIBhJMmX3Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:b3:81:b7:08:66:37:6d:c4:a8:7d:f4:eb:74:94:32:0b:ce:
7d:f5:cf:27:4d:c4:3c:d2:9f:a3:c0:98:ac:d1:d8:87:5d:a1:
db:82:25:b1:d9:3e:53:52:2c:65:23:7d:e9:db:a8:63:3f:db:
59:15:b8:aa:b4:f9:7e:9e:ec:92:bd:c7:c5:ab:b3:2c:9e:84:
ee:66:01:54:77:25:6c:65:cf:19:2e:3e:67:1e:4a:87:87:be:
c4:ff:7a:0d:5f:cf:11:ce:04:69:a8:8d:db:9d:97:f5:fa:af:
9f:e3:ea:76:62:6b:87:a2:d5:c1:01:76:93:53:bc:20:61:6a:
02:f8:3a:43:54:6a:0f:3e:e7:c2:71:9c:64:c7:ae:32:4d:aa:
fe:57:ab:5d:4c:c6:93:db:a1:d2:aa:67:0f:64:e5:9f:39:5a:
82:71:41:69:34:c8:96:73:ff:a1:d5:bb:7d:3c:78:3c:b7:7f:
de:e6:c2:9c:27:9a:2f:93:f0:73:10:e6:46:35:9d:b4:37:bd:
56:ed:7c:9f:99:c6:2d:08:f4:ed:16:b1:d0:b2:1d:92:15:28:
65:21:68:79:01:e4:0b:6a:2b:1b:31:77:5a:55:76:47:b0:e8:
53:62:57:e1:3d:e5:90:58:a4:6d:3e:a5:13:7c:f1:31:be:97:
91:24:28:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:08:15 2026 by rpki-client