Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
File: rlhan3aCaNb60MyHxgPMCsJrgbQ.mft (raw, json)
Hash identifier: 1/TDIMrG4y+p28INToG+2JLT1fGS9kLk/HltWRSIVUk=
Subject key identifier: 84:A7:FF:72:1E:19:B0:C9:CD:50:4C:34:B8:04:D3:4D:30:A6:EB:26
Authority key identifier: AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
Certificate issuer: /CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Certificate serial: 01A08A8C7C5538D4D1DDB6B38F7C804394FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:00:57 +0000
Manifest this update: Thu 10 Sep 2026 09:00:57 +0000
Manifest next update: Fri 11 Sep 2026 09:00:57 +0000
Files and hashes: 1: GuoMB_zJywmocFJnKvWUYbJRa48.roa (hash: k2hTVb7JpoVzJihpxeGxTk4yLmmOezOpphzp2CNKQaI=)
2: Sv0eeuDrY0VnfeDOcJuJ3wgg3iQ.roa (hash: 8rSLnwJU4pBMw2vuCjNXLhmsmomCnLncEO3ROsppLCw=)
3: rlhan3aCaNb60MyHxgPMCsJrgbQ.crl (hash: /dmWQ0XSAKxfKTMMxxQ1B8/K4eAiLcBN7gR2fXtM774=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:7c:55:38:d4:d1:dd:b6:b3:8f:7c:80:43:94:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae585a9f768268d6fad0cc87c603cc0ac26b81b4
Validity
Not Before: Sep 10 09:00:57 2026 GMT
Not After : Sep 11 09:00:57 2026 GMT
Subject: CN=84a7ff721e19b0c9cd504c34b804d34d30a6eb26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:51:a9:85:f7:ba:3f:a4:b2:de:b6:0e:3b:
c7:3f:49:4f:13:57:6a:70:28:a7:c3:36:fc:c2:90:
2a:58:94:6a:93:50:a4:65:6d:d2:68:bb:ea:be:cc:
c5:1e:52:65:62:f5:37:88:04:92:d9:aa:e9:0b:1f:
25:f9:a2:d6:1e:9c:7d:c7:46:90:58:56:a6:6e:48:
53:3f:f3:7b:1d:0b:22:44:a1:ce:d0:76:33:e3:11:
5b:3d:51:73:07:1e:bc:36:d2:7e:42:c0:44:45:c7:
3f:39:4b:24:d7:42:6f:17:89:51:21:3b:51:b0:28:
db:57:fd:73:b4:28:4c:aa:20:75:0a:c5:fd:20:98:
e2:24:a1:5d:f3:fe:71:04:69:bb:04:33:3a:1d:75:
c0:36:4c:3c:66:14:9c:0f:b6:f0:c9:fb:84:fb:1d:
72:74:37:95:f1:b8:06:06:f0:a4:2a:0d:31:7e:e6:
3a:fe:b8:df:9e:ae:f5:37:dd:13:d1:59:82:f0:e6:
8c:73:c8:16:0f:e0:c9:76:93:30:1c:e0:8b:5e:4d:
f6:d5:b4:14:75:0b:5f:6a:e8:44:70:d2:43:ac:7e:
3f:7e:b3:b1:1a:af:50:d9:3a:9e:0f:55:34:66:e5:
4b:47:cc:c2:8c:cf:dd:60:f3:79:7a:ee:62:09:e2:
c7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A7:FF:72:1E:19:B0:C9:CD:50:4C:34:B8:04:D3:4D:30:A6:EB:26
X509v3 Authority Key Identifier:
keyid:AE:58:5A:9F:76:82:68:D6:FA:D0:CC:87:C6:03:CC:0A:C2:6B:81:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlhan3aCaNb60MyHxgPMCsJrgbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/rlhan3aCaNb60MyHxgPMCsJrgbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:0b:67:dc:61:4e:04:62:e8:f3:5b:b4:ad:15:bc:2e:96:4e:
f4:3b:bf:37:81:3f:f2:14:1f:7f:d9:19:3a:91:62:8f:a2:c6:
af:13:ce:07:64:97:41:80:69:d5:42:ad:aa:65:e5:fe:92:32:
7b:75:2c:49:b9:4d:99:bf:64:ae:a0:c3:1a:69:aa:cc:ca:c4:
72:82:80:4e:3c:a1:a5:d1:9f:a0:aa:8a:42:fe:59:f9:30:2d:
f2:58:99:7e:4a:fa:ac:6b:6c:69:7f:d8:54:f3:27:db:00:79:
f3:e3:14:96:44:da:57:1d:6b:3c:41:98:6c:87:57:e3:1e:be:
e7:f0:7d:d5:64:8f:79:e7:e9:af:de:3a:7d:9f:a0:48:0e:44:
e7:21:15:24:49:d0:b4:d1:3b:8c:b1:3a:1d:6e:27:f8:fe:48:
06:b7:98:0c:fc:b9:13:1b:ce:1b:8c:95:23:27:92:c4:79:50:
10:a1:37:a2:13:e0:53:00:a9:6c:d0:2f:31:e4:5a:25:7b:cf:
a9:25:9d:f9:ae:03:6e:51:b5:e4:84:83:5d:e6:8a:2e:98:2d:
33:d5:4d:c7:9c:0b:f6:86:8a:54:49:18:02:c1:83:e6:45:9f:
49:1b:74:4d:27:60:53:33:ee:f1:7e:ca:45:a7:52:0d:ea:8b:
67:48:9b:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjHxVONTR3bazj3yAQ5T+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNTg1YTlmNzY4MjY4ZDZmYWQwY2M4N2M2MDNjYzBhYzI2
YjgxYjQwHhcNMjYwOTEwMDkwMDU3WhcNMjYwOTExMDkwMDU3WjAzMTEwLwYDVQQD
Eyg4NGE3ZmY3MjFlMTliMGM5Y2Q1MDRjMzRiODA0ZDM0ZDMwYTZlYjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYpRqYX3uj+kst62DjvHP0lPE1dq
cCinwzb8wpAqWJRqk1CkZW3SaLvqvszFHlJlYvU3iASS2arpCx8l+aLWHpx9x0aQ
WFambkhTP/N7HQsiRKHO0HYz4xFbPVFzBx68NtJ+QsBERcc/OUsk10JvF4lRITtR
sCjbV/1ztChMqiB1CsX9IJjiJKFd8/5xBGm7BDM6HXXANkw8ZhScD7bwyfuE+x1y
dDeV8bgGBvCkKg0xfuY6/rjfnq71N90T0VmC8OaMc8gWD+DJdpMwHOCLXk321bQU
dQtfauhEcNJDrH4/frOxGq9Q2TqeD1U0ZuVLR8zCjM/dYPN5eu5iCeLHkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFISn/3IeGbDJzVBMNLgE000wpusmMB8GA1UdIwQY
MBaAFK5YWp92gmjW+tDMh8YDzArCa4G0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmxoYW4zYUNhTmI2ME15SHhnUE1Dc0pyZ2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAt
MjAxNjdjZDQyYjgyLzEvcmxoYW4zYUNhTmI2ME15SHhnUE1Dc0pyZ2JRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAtMjAxNjdjZDQyYjgy
LzEvcmxoYW4zYUNhTmI2ME15SHhnUE1Dc0pyZ2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3wtn3GFO
BGLo81u0rRW8LpZO9Du/N4E/8hQff9kZOpFij6LGrxPOB2SXQYBp1UKtqmXl/pIy
e3UsSblNmb9krqDDGmmqzMrEcoKATjyhpdGfoKqKQv5Z+TAt8liZfkr6rGtsaX/Y
VPMn2wB58+MUlkTaVx1rPEGYbIdX4x6+5/B91WSPeefpr946fZ+gSA5E5yEVJEnQ
tNE7jLE6HW4n+P5IBreYDPy5ExvOG4yVIyeSxHlQEKE3ohPgUwCpbNAvMeRaJXvP
qSWd+a4DblG15ISDXeaKLpgtM9VNx5wL9oaKVEkYAsGD5kWfSRt0TSdgUzPu8X7K
RadSDeqLZ0ibYA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:52:12 2026 by rpki-client