Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
File: rlhan3aCaNb60MyHxgPMCsJrgbQ.mft (raw, json)
Hash identifier: /2GwUkm/QdxVSmEH1nff+idV7mN/mg4vammV/TQCz44=
Subject key identifier: 4B:0F:6A:DD:49:64:3E:10:AF:11:A5:99:D7:CA:EA:16:37:DD:AB:54
Authority key identifier: AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
Certificate issuer: /CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Certificate serial: 019F85D5E73A8FB2737A0842C5F0199A610B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
Manifest number: 3A
Signing time: Tue 21 Jul 2026 18:00:15 +0000
Manifest this update: Tue 21 Jul 2026 18:00:15 +0000
Manifest next update: Wed 22 Jul 2026 18:00:15 +0000
Files and hashes: 1: GuoMB_zJywmocFJnKvWUYbJRa48.roa (hash: k2hTVb7JpoVzJihpxeGxTk4yLmmOezOpphzp2CNKQaI=)
2: Sv0eeuDrY0VnfeDOcJuJ3wgg3iQ.roa (hash: 8rSLnwJU4pBMw2vuCjNXLhmsmomCnLncEO3ROsppLCw=)
3: rlhan3aCaNb60MyHxgPMCsJrgbQ.crl (hash: oQilKWdVIxEdDVLmqxjSP6xOVMKkzy5PXsJjSFAE5FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d5:e7:3a:8f:b2:73:7a:08:42:c5:f0:19:9a:61:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Validity
Not Before: Jul 21 18:00:15 2026 GMT
Not After : Jul 22 18:00:15 2026 GMT
Subject: CN=4b0f6add49643e10af11a599d7caea1637ddab54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:04:ad:0f:65:76:01:e1:6a:32:00:b7:90:
80:67:9a:27:b7:93:71:95:59:d6:58:46:67:9c:56:
62:e6:89:ac:66:8d:d0:c0:8b:bf:0d:09:fa:4a:d1:
37:e3:9e:14:44:ab:fa:f9:c1:b5:57:4a:76:97:c8:
91:56:5e:9a:5f:76:7c:1c:46:0d:a1:f7:80:60:ca:
51:4d:d9:9a:35:3b:c3:8f:0a:d4:1b:93:58:d1:b5:
96:b3:26:87:d1:67:09:aa:06:b3:a4:2c:04:cc:e2:
5b:95:95:df:16:94:7b:62:66:8c:21:35:87:52:b9:
f9:cb:a7:b8:de:46:1f:0b:cc:e8:c1:c4:a1:3a:2b:
f4:b8:48:02:5e:74:57:8c:52:f8:89:bb:d4:41:31:
3b:7b:17:de:74:f1:69:fd:46:d2:a8:16:cb:7b:7c:
c8:8c:89:0c:63:ac:2d:8d:3d:a6:e2:5d:66:29:79:
02:5e:a7:c7:cc:79:a5:99:4f:73:ec:40:1f:ce:6f:
f5:f0:ac:70:3c:cd:18:a4:79:a8:48:8f:39:2f:55:
a9:1c:32:df:06:61:14:ca:3c:6a:ec:70:37:1a:a2:
ae:f8:11:62:ec:c4:c7:ac:36:8a:41:45:f9:0f:f4:
fd:f1:53:07:34:24:b5:dc:0b:63:db:ad:9f:a4:4b:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0F:6A:DD:49:64:3E:10:AF:11:A5:99:D7:CA:EA:16:37:DD:AB:54
X509v3 Authority Key Identifier:
keyid:AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a8:6d:3d:82:07:71:c1:d3:7d:17:80:fa:4b:12:e5:2a:01:
2e:8b:0a:c7:35:c3:ed:51:3c:4d:9c:6e:54:b1:1b:ff:88:f1:
d9:07:9b:57:81:cb:17:5c:66:cc:21:30:a7:70:ff:7b:c3:e4:
7d:22:15:8f:20:00:4f:b1:35:b8:57:19:d7:d4:e7:ce:87:8d:
ed:8e:c3:25:2d:89:09:7a:cd:5e:6d:95:a0:44:5b:47:05:4e:
69:d1:17:f7:a6:8c:a1:e2:e6:82:5e:24:5c:3d:1b:93:87:93:
51:df:b6:83:bf:5f:f8:d1:03:70:f9:0c:c0:e2:67:40:48:84:
8e:b4:52:46:0e:7b:05:f7:02:7b:0c:de:34:c5:5f:f4:f7:a8:
28:21:89:29:75:37:6e:ea:95:dd:85:ce:43:da:dc:4d:d8:b9:
f4:93:f2:a6:74:50:59:38:1b:72:b7:1d:3a:d0:9a:eb:2a:a4:
22:b0:85:ed:60:a9:d5:ba:b7:56:6d:93:f6:67:5a:98:d5:18:
c0:d4:ce:85:6d:21:b7:2a:c4:06:11:ce:8e:69:8c:c5:c3:73:
9a:75:26:ce:0e:16:e6:c6:dc:4c:d6:d4:d9:42:1c:71:ed:5a:
b1:51:6c:20:65:b2:5c:85:a6:37:5b:99:7f:4a:6a:1e:02:41:
22:90:5f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:36:52 2026 by rpki-client