Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
File: rlhan3aCaNb60MyHxgPMCsJrgbQ.mft (raw, json)
Hash identifier: hYmt1d3PlCaa6lmFJFlkJdYzGl5yLd86fBaW7CMSTFg=
Subject key identifier: 53:F5:73:CC:1D:F8:26:49:E8:65:5E:31:D2:E7:2F:EF:C4:F7:33:8D
Authority key identifier: AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
Certificate issuer: /CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Certificate serial: 01A17A038EE0A0C7BE78A244AFBD05792201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
Manifest number: 013D
Signing time: Mon 26 Oct 2026 21:00:15 +0000
Manifest this update: Mon 26 Oct 2026 21:00:15 +0000
Manifest next update: Tue 27 Oct 2026 21:00:15 +0000
Files and hashes: 1: GuoMB_zJywmocFJnKvWUYbJRa48.roa (hash: k2hTVb7JpoVzJihpxeGxTk4yLmmOezOpphzp2CNKQaI=)
2: Sv0eeuDrY0VnfeDOcJuJ3wgg3iQ.roa (hash: 8rSLnwJU4pBMw2vuCjNXLhmsmomCnLncEO3ROsppLCw=)
3: rlhan3aCaNb60MyHxgPMCsJrgbQ.crl (hash: 2ORkpRxIKgVr07Jgeh/v/AZ+gU+I7i2eeUE4JshGVWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:03:8e:e0:a0:c7:be:78:a2:44:af:bd:05:79:22:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Validity
Not Before: Oct 26 21:00:15 2026 GMT
Not After : Oct 27 21:00:15 2026 GMT
Subject: CN=53f573cc1df82649e8655e31d2e72fefc4f7338d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:c2:aa:30:47:02:f2:99:3c:3e:dc:20:4a:
21:b2:48:b3:8d:3a:36:36:a5:6e:27:c7:57:ff:6c:
ad:8b:1c:4a:4e:21:0a:0d:97:e0:c6:e0:98:fd:9c:
ed:82:6e:a9:d1:99:4c:27:3e:f3:9d:bf:68:98:71:
2c:0b:13:6e:b7:8f:91:62:7f:a2:a7:67:af:62:15:
ab:60:54:f0:33:ff:a0:46:3c:c0:75:1e:2f:87:2a:
c8:6c:cd:dd:99:1f:32:6f:c8:a4:70:34:3c:36:7d:
6c:28:53:33:14:43:00:a6:19:b7:b9:f0:bb:a9:f1:
da:e8:68:70:d1:ce:7c:cb:aa:a8:aa:1b:20:4e:eb:
e0:f2:67:60:39:48:a7:ef:71:38:d6:26:c1:1a:bc:
20:84:97:ed:36:bd:34:c2:86:32:4f:68:98:59:36:
c7:9f:34:d1:9d:ee:90:8e:52:bb:07:4e:30:e3:2f:
5e:2a:e5:e3:34:8a:b7:f0:9a:71:f2:7c:a5:43:ea:
d8:00:51:aa:21:c7:53:ef:55:28:09:4d:5f:53:07:
5f:d3:17:fc:9a:d1:68:27:2d:b7:ab:8f:e8:02:8c:
3d:32:1c:00:ae:87:e0:88:b9:78:d9:b9:22:c0:fd:
3c:dc:7a:b6:f8:e4:4a:ef:b0:0e:b1:94:17:66:e5:
a0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F5:73:CC:1D:F8:26:49:E8:65:5E:31:D2:E7:2F:EF:C4:F7:33:8D
X509v3 Authority Key Identifier:
keyid:AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:37:13:f5:62:99:2f:d6:5f:25:2a:9f:8e:46:65:ab:ef:4f:
54:ee:fe:fc:72:6c:c1:d4:d1:64:01:6f:7c:bd:ff:a9:da:dd:
1f:77:98:b7:a3:09:3e:d0:92:04:2a:ee:3b:7b:53:57:8c:03:
6c:d1:fa:30:07:1d:0b:e8:51:79:38:69:8e:75:57:38:0b:43:
3d:69:99:65:9d:df:65:f3:23:cd:3e:b8:d1:e1:21:0c:80:ef:
b5:4d:24:2c:65:04:64:c2:f1:b6:e0:f3:44:f4:da:fc:69:52:
b5:6e:df:1c:73:71:0c:7d:d4:aa:6e:93:f5:f8:3a:e4:61:8e:
b5:62:ce:22:c3:3f:bb:49:59:3a:c1:5d:3a:64:d6:a3:75:67:
03:b7:26:b9:21:64:49:36:27:eb:77:d3:fb:38:80:5e:ed:0b:
b3:cc:50:b9:9d:38:c8:3c:97:db:4a:1e:ae:fb:4e:1b:06:fa:
eb:32:e4:84:86:13:51:b0:28:ff:5d:20:56:95:c5:95:02:d9:
eb:f1:b2:f4:d3:42:22:87:56:7e:27:7a:f2:57:ee:11:90:18:
a2:2c:23:67:21:51:b2:d0:c9:cc:d2:a2:e5:7a:c5:90:19:18:
7b:e3:f0:c9:1c:21:8d:bc:6f:da:25:bd:4c:2b:8a:a5:bd:04:
09:70:2e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:37:47 2026 by rpki-client