Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
File: tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft (raw, json)
Hash identifier: fefBkbx/Eq6AHFgymYH0XD9ywZOcPHyaxsHbsrkuhWo=
Subject key identifier: F5:A7:9C:15:24:9D:2A:58:77:AE:FD:58:48:56:77:E2:43:A1:5B:60
Authority key identifier: B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
Certificate issuer: /CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Certificate serial: 019CAA59181962B55236D0B350E525268DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
Manifest number: 1299
Signing time: Sun 01 Mar 2026 17:01:31 +0000
Manifest this update: Sun 01 Mar 2026 17:01:31 +0000
Manifest next update: Mon 02 Mar 2026 17:01:31 +0000
Files and hashes: 1: 0hNitkHNxqHDc_18OnXBaZgItKQ.roa (hash: NObu/X6pwO5Ig/Stu2qJfJzgTwRgKUDuC69hOBPSYtc=)
2: tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl (hash: MJiJfhr7zMW4h0Dftdvew3B4OMyVlhd/VnCEPZG42yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:18:19:62:b5:52:36:d0:b3:50:e5:25:26:8d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Validity
Not Before: Mar 1 17:01:31 2026 GMT
Not After : Mar 2 17:01:31 2026 GMT
Subject: CN=f5a79c15249d2a5877aefd58485677e243a15b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:1c:a1:96:37:fd:b1:fb:89:31:73:72:33:
71:88:11:f5:de:f9:26:7a:99:37:38:39:d1:23:1a:
5c:ff:68:20:77:89:e2:47:ad:36:be:26:eb:3f:7f:
b9:06:76:9a:56:15:ab:95:82:bd:e0:38:25:42:62:
7a:ba:d3:30:07:21:2b:38:0e:2b:97:5d:28:99:4e:
bf:d3:14:91:73:53:bd:5e:27:85:db:0b:f1:0c:c8:
42:90:41:f4:5f:e1:7d:77:7e:45:59:10:32:07:bd:
d8:c9:1b:53:84:70:be:93:28:55:5e:b7:df:c2:dd:
fb:52:07:18:82:a9:91:c5:32:d7:a3:61:38:78:b5:
26:19:66:df:91:39:8d:94:bd:cf:bf:cb:71:ef:f2:
02:49:a0:6e:7b:4a:e1:b6:db:13:df:2b:44:e2:48:
c3:7e:f6:f5:9c:f1:53:2d:43:99:98:6f:8e:f8:fd:
97:34:50:3c:9a:81:b9:9e:fd:90:07:a5:e7:fa:ef:
15:53:81:9f:3c:f7:3c:19:f7:a5:a4:e9:6c:59:55:
f2:ea:14:9e:b6:2f:42:3a:99:5d:05:c9:61:2d:07:
2c:ab:73:c7:18:12:2b:19:b8:2c:a1:af:9c:2b:24:
8c:35:03:70:62:1a:f6:fa:17:63:7b:78:63:fe:43:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A7:9C:15:24:9D:2A:58:77:AE:FD:58:48:56:77:E2:43:A1:5B:60
X509v3 Authority Key Identifier:
keyid:B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c8:f8:5c:01:5f:cc:66:f2:df:09:c5:56:7d:a6:4f:b7:60:
0c:50:4b:36:52:51:f8:c6:89:02:f3:e5:cf:3c:e7:3a:fc:c2:
4d:d3:2a:8f:5d:f6:ef:16:be:df:74:4b:8c:04:b9:f7:6f:1c:
10:4c:da:a8:49:8d:74:73:25:ed:19:6a:5a:f2:a9:0b:78:c9:
36:b3:83:62:d4:97:17:51:ac:45:3d:f3:9c:07:34:61:b0:52:
6d:3d:96:52:37:b6:0f:ab:b7:cd:3d:ae:61:95:c7:28:42:11:
68:c4:0f:70:ae:2a:fb:5b:dc:82:eb:1e:cb:2e:af:52:91:d0:
ae:8b:9e:70:92:f0:fc:ab:51:14:cd:3c:c0:50:1d:b1:2a:c4:
14:ae:42:ee:ab:dd:1b:e4:f9:bd:11:aa:4c:1a:91:d0:2c:4e:
b6:45:9b:72:00:6d:55:5e:66:df:c6:e2:9f:cb:19:25:c6:08:
be:d6:ff:9e:11:ed:9d:5d:92:16:14:b4:9c:8d:95:b1:58:f1:
c5:b8:87:a6:2b:74:9f:bb:39:1b:a7:47:7b:ca:46:02:93:b6:
62:42:a5:fc:49:f5:16:a5:43:f1:4d:83:28:5e:fd:c8:60:4f:
1e:ea:d2:e5:2b:dd:f7:27:a5:f9:d0:30:1d:0b:91:d8:d2:42:
7b:8a:2f:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWRgZYrVSNtCzUOUlJo25MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MWI3OTc0ZTk3YWI5Mzc5MTI0MDczNGExOWZiOWFlNzQ0
NWNiZDkwHhcNMjYwMzAxMTcwMTMxWhcNMjYwMzAyMTcwMTMxWjAzMTEwLwYDVQQD
EyhmNWE3OWMxNTI0OWQyYTU4NzdhZWZkNTg0ODU2NzdlMjQzYTE1YjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfocoZY3/bH7iTFzcjNxiBH13vkm
epk3ODnRIxpc/2ggd4niR602vibrP3+5BnaaVhWrlYK94DglQmJ6utMwByErOA4r
l10omU6/0xSRc1O9XieF2wvxDMhCkEH0X+F9d35FWRAyB73YyRtThHC+kyhVXrff
wt37UgcYgqmRxTLXo2E4eLUmGWbfkTmNlL3Pv8tx7/ICSaBue0rhttsT3ytE4kjD
fvb1nPFTLUOZmG+O+P2XNFA8moG5nv2QB6Xn+u8VU4GfPPc8GfelpOlsWVXy6hSe
ti9COpldBclhLQcsq3PHGBIrGbgsoa+cKySMNQNwYhr2+hdje3hj/kOx2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWnnBUknSpYd679WEhWd+JDoVtgMB8GA1UdIwQY
MBaAFLYbeXTperk3kSQHNKGfua50RcvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MWQyMTMtMmEwZi00MzQ4LTg5M2Mt
ZTcyNjM3NDMzMGNlLzEvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82MWQyMTMtMmEwZi00MzQ4LTg5M2MtZTcyNjM3NDMzMGNl
LzEvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMj4XAFf
zGby3wnFVn2mT7dgDFBLNlJR+MaJAvPlzzznOvzCTdMqj1327xa+33RLjAS5928c
EEzaqEmNdHMl7RlqWvKpC3jJNrODYtSXF1GsRT3znAc0YbBSbT2WUje2D6u3zT2u
YZXHKEIRaMQPcK4q+1vcguseyy6vUpHQrouecJLw/KtRFM08wFAdsSrEFK5C7qvd
G+T5vRGqTBqR0CxOtkWbcgBtVV5m38bin8sZJcYIvtb/nhHtnV2SFhS0nI2VsVjx
xbiHpit0n7s5G6dHe8pGApO2YkKl/En1FqVD8U2DKF79yGBPHurS5Svd9yel+dAw
HQuR2NJCe4ov4A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:35 2026 by rpki-client