Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
File: RHxS2B7cEklkSteUvgKK-Q4CShY.mft (raw, json)
Hash identifier: h4OMiyur8N3fSABA98etMWFZyaq6KReSxXvCXDkda8Q=
Subject key identifier: A3:A5:3B:24:54:1E:16:DD:E1:51:0F:FA:06:D0:ED:79:94:98:FD:0E
Authority key identifier: 44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16
Certificate issuer: /CN=447c52d81edc1249644ad794be028af90e024a16
Certificate serial: 019D389BFF96B6E0530BA79BA5A3199E0C51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
Manifest number: 0C3B
Signing time: Sun 29 Mar 2026 08:00:40 +0000
Manifest this update: Sun 29 Mar 2026 08:00:40 +0000
Manifest next update: Mon 30 Mar 2026 08:00:40 +0000
Files and hashes: 1: RHxS2B7cEklkSteUvgKK-Q4CShY.crl (hash: u3a/sXV+l5KsdFNAhW//5dFdNXO0H6IYDFmrDz/CspY=)
2: h365B8J9B4DFbAHHt2ZmHfhJ99c.roa (hash: VWLHq5YqZtdAEyTbF2keQuk4CUJ4I0RVEyzvXX4IBXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ff:96:b6:e0:53:0b:a7:9b:a5:a3:19:9e:0c:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=447c52d81edc1249644ad794be028af90e024a16
Validity
Not Before: Mar 29 08:00:40 2026 GMT
Not After : Mar 30 08:00:40 2026 GMT
Subject: CN=a3a53b24541e16dde1510ffa06d0ed799498fd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:34:bb:71:62:13:49:36:c9:0b:0c:ae:f1:81:
55:b9:62:b4:8a:80:40:d3:1a:35:40:1e:77:4d:e3:
7d:38:71:b0:e7:25:24:e6:46:a9:f7:bc:af:2a:93:
cf:c8:e2:83:e2:76:da:99:3c:02:56:c2:a9:b8:28:
ac:96:cb:6a:ed:96:14:d2:96:88:af:cd:a3:cb:95:
e7:21:21:d0:42:56:33:4d:01:a3:23:c8:89:9d:05:
f2:39:11:56:a3:81:de:44:3b:bd:b8:2e:67:9f:df:
64:25:13:50:35:0d:c2:24:fe:09:2d:ad:7f:37:66:
ca:ac:a4:4d:71:3b:e6:e4:11:02:b3:00:83:a9:a0:
65:3a:cd:13:89:56:e7:89:25:62:c1:e7:dc:6d:29:
a3:ce:75:9e:4f:32:6b:b1:cc:12:00:a9:3d:46:28:
11:2f:10:c3:25:10:98:3d:d1:d0:f7:0b:db:17:b9:
95:be:06:8b:33:aa:e6:98:35:bd:73:53:3c:85:a9:
cc:c6:4d:02:23:69:35:e1:0a:a4:5b:41:ee:82:09:
90:a0:b7:9b:45:1b:34:b7:09:02:a8:83:8b:6a:8d:
45:23:14:2b:3b:16:a9:ce:23:dc:cc:9d:6f:ab:37:
84:b4:4a:56:a9:6f:7d:7b:83:50:81:bd:fa:7b:58:
dd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A5:3B:24:54:1E:16:DD:E1:51:0F:FA:06:D0:ED:79:94:98:FD:0E
X509v3 Authority Key Identifier:
keyid:44:7C:52:D8:1E:DC:12:49:64:4A:D7:94:BE:02:8A:F9:0E:02:4A:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHxS2B7cEklkSteUvgKK-Q4CShY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/761b17-6cb5-47fd-8c4f-efa6789fd972/1/RHxS2B7cEklkSteUvgKK-Q4CShY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d6:f0:fd:a4:af:87:03:0e:d6:ab:2d:4e:23:92:0f:c1:8e:
26:6a:42:b6:88:1e:09:30:cb:bc:b2:10:57:db:52:53:75:3d:
4c:40:4e:e1:c1:b6:09:07:cc:ea:82:4c:bf:0b:8f:04:c2:30:
20:33:b3:de:4b:66:80:31:3e:7c:ed:de:5c:1a:fd:db:fa:cf:
18:20:42:1b:d1:b5:bc:a8:30:e1:df:b3:21:6f:45:27:92:9b:
16:92:3a:aa:6c:a9:1f:d9:c1:52:c3:6b:64:70:7f:cc:c9:50:
b5:9d:88:cf:93:35:72:73:e7:f9:c2:c4:21:34:0b:8b:d1:a4:
f1:db:41:d8:98:2e:15:98:61:9c:d3:77:29:f1:92:d2:c2:8f:
8a:8f:81:88:bd:e2:d0:f5:27:51:a4:9b:2a:c5:dd:82:e1:ed:
7c:43:b9:35:01:b5:fa:d7:2d:4b:c5:5c:70:dd:5d:a2:e4:d3:
f8:e7:6e:a7:1f:f7:7c:d9:29:e9:2b:93:89:37:84:7e:3c:e4:
3f:29:6a:ec:d6:c8:39:03:67:b8:89:31:05:04:04:d5:ea:53:
aa:53:af:7b:a3:21:e2:44:b2:61:90:b1:4a:9f:84:66:fb:34:
9e:32:68:81:dd:7a:10:a4:4d:52:17:cc:ba:45:bf:2a:6e:56:
35:a2:a6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:45 2026 by rpki-client