Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
File: T0HFbqBp7nscHfZoa9NuDhRSiiA.mft (raw, json)
Hash identifier: a1g5uHAbnIopF8a8sGbHCWhbaY1BIAe0uTiNzBh3vpw=
Subject key identifier: 43:92:05:CD:A7:8E:97:A4:9F:9B:56:C9:E9:83:11:D4:66:04:70:99
Authority key identifier: 4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
Certificate issuer: /CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Certificate serial: 019D9A075E6C80768CDEE6A4D5E0D93FC651
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
Manifest number: 0FE8
Signing time: Fri 17 Apr 2026 06:01:07 +0000
Manifest this update: Fri 17 Apr 2026 06:01:07 +0000
Manifest next update: Sat 18 Apr 2026 06:01:07 +0000
Files and hashes: 1: 8OKd3CQc6i0WS5lvDDNOUjLhw3g.roa (hash: 2r6wcq8Rpn3z2tzFav+stYWE1p2kymIXK4N4fPkqcPo=)
2: T0HFbqBp7nscHfZoa9NuDhRSiiA.crl (hash: x8Qvf1aWzx2wYFc0HmnX19H0/T/+kmIuZpiSy0Kp6+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:5e:6c:80:76:8c:de:e6:a4:d5:e0:d9:3f:c6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f41c56ea069ee7b1c1df6686bd36e0e14528a20
Validity
Not Before: Apr 17 06:01:07 2026 GMT
Not After : Apr 18 06:01:07 2026 GMT
Subject: CN=439205cda78e97a49f9b56c9e98311d466047099
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:03:97:0e:fa:6b:4f:9b:6e:7c:a6:63:0b:
16:8b:d0:0c:0e:51:ba:b8:76:97:3d:15:ee:a7:04:
7c:19:41:06:b3:2d:4a:c2:c4:de:00:a8:9e:b5:de:
91:d3:c9:70:a3:00:1f:e5:13:c9:f1:94:d5:b6:bc:
30:a5:38:42:d4:a7:ce:58:a7:5f:7e:2c:20:df:e2:
49:5f:74:d5:26:ea:8b:eb:2a:52:d7:d0:6b:2b:c5:
d0:8b:31:22:0a:b1:b3:e8:ae:76:9e:97:82:94:80:
02:8d:17:d1:0a:a9:1b:17:58:45:9a:ea:70:cb:de:
e3:7a:62:f8:8f:c3:1a:7d:b9:a0:50:fb:e3:c8:12:
d4:6c:04:ee:9a:13:c4:63:3a:96:4c:5a:96:63:24:
e4:42:f2:bd:e6:79:c6:25:43:35:85:23:a3:ba:6a:
57:9c:bf:25:49:55:bf:5a:fa:2e:0a:88:7e:fa:27:
a7:91:b8:87:04:0f:bf:18:d7:cd:d6:30:ec:51:42:
f0:9d:e2:71:41:31:ce:7f:ec:e9:c5:af:6b:a7:90:
1e:9a:82:c3:2c:a9:62:e0:ba:64:85:c4:50:ce:ab:
00:33:36:f0:ea:c7:b7:ac:43:64:32:43:f3:e5:ab:
de:13:f1:a4:e2:61:86:54:38:39:57:f8:68:5e:5f:
2e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:92:05:CD:A7:8E:97:A4:9F:9B:56:C9:E9:83:11:D4:66:04:70:99
X509v3 Authority Key Identifier:
keyid:4F:41:C5:6E:A0:69:EE:7B:1C:1D:F6:68:6B:D3:6E:0E:14:52:8A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0HFbqBp7nscHfZoa9NuDhRSiiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/8a140b-0e51-4fc7-9c01-d67b9aca6417/1/T0HFbqBp7nscHfZoa9NuDhRSiiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:74:6f:41:ab:a7:6f:50:99:41:20:2a:68:ef:be:0a:f3:82:
f2:6a:09:23:57:e1:a5:0a:45:4d:4c:de:f8:71:23:ba:3b:42:
78:7c:b1:9e:d3:ff:5f:7c:f9:85:92:b3:89:70:5f:8d:21:16:
f8:b7:15:4e:2a:23:e2:24:fc:43:b0:0d:a5:fa:1a:f3:76:da:
f1:e9:1d:bf:ba:35:8b:16:ca:75:08:a7:e2:45:71:b5:57:83:
8a:ac:08:40:1d:30:0b:bd:de:4c:b3:56:d6:5e:f5:56:0a:9d:
8a:11:16:d0:d7:d9:cd:39:99:fd:f3:ef:dc:0e:d1:d8:65:b0:
54:ba:6f:d4:dc:3e:e8:48:86:ba:2e:3c:09:ac:3c:4d:7d:d5:
9d:81:67:46:52:3c:6a:29:c0:85:f3:84:a2:02:e6:da:14:f8:
33:3f:10:7b:69:23:2d:a6:8a:38:42:bd:fa:84:ce:e7:b6:30:
56:59:b2:eb:13:4f:c0:ef:44:24:59:db:a2:5e:72:22:e7:04:
b7:a8:62:3c:05:72:d4:79:99:20:87:a9:f5:61:ed:4d:84:3e:
f2:42:23:17:7c:06:ee:e2:db:fa:53:d5:6f:d3:dd:38:39:7c:
ed:ca:3c:ff:50:0d:94:2b:a1:a5:6c:11:75:be:7e:ca:97:b8:
ad:4b:9e:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aB15sgHaM3uak1eDZP8ZRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNDFjNTZlYTA2OWVlN2IxYzFkZjY2ODZiZDM2ZTBlMTQ1
MjhhMjAwHhcNMjYwNDE3MDYwMTA3WhcNMjYwNDE4MDYwMTA3WjAzMTEwLwYDVQQD
Eyg0MzkyMDVjZGE3OGU5N2E0OWY5YjU2YzllOTgzMTFkNDY2MDQ3MDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3x4Dlw76a0+bbnymYwsWi9AMDlG6
uHaXPRXupwR8GUEGsy1KwsTeAKietd6R08lwowAf5RPJ8ZTVtrwwpThC1KfOWKdf
fiwg3+JJX3TVJuqL6ypS19BrK8XQizEiCrGz6K52npeClIACjRfRCqkbF1hFmupw
y97jemL4j8MafbmgUPvjyBLUbATumhPEYzqWTFqWYyTkQvK95nnGJUM1hSOjumpX
nL8lSVW/WvouCoh++ienkbiHBA+/GNfN1jDsUULwneJxQTHOf+zpxa9rp5AemoLD
LKli4LpkhcRQzqsAMzbw6se3rENkMkPz5aveE/Gk4mGGVDg5V/hoXl8uVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOSBc2njpekn5tWyemDEdRmBHCZMB8GA1UdIwQY
MBaAFE9BxW6gae57HB32aGvTbg4UUoogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDBIRmJxQnA3bnNjSGZab2E5TnVEaFJTaWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi84YTE0MGItMGU1MS00ZmM3LTljMDEt
ZDY3YjlhY2E2NDE3LzEvVDBIRmJxQnA3bnNjSGZab2E5TnVEaFJTaWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi84YTE0MGItMGU1MS00ZmM3LTljMDEtZDY3YjlhY2E2NDE3
LzEvVDBIRmJxQnA3bnNjSGZab2E5TnVEaFJTaWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHRvQaun
b1CZQSAqaO++CvOC8moJI1fhpQpFTUze+HEjujtCeHyxntP/X3z5hZKziXBfjSEW
+LcVTioj4iT8Q7ANpfoa83ba8ekdv7o1ixbKdQin4kVxtVeDiqwIQB0wC73eTLNW
1l71VgqdihEW0NfZzTmZ/fPv3A7R2GWwVLpv1Nw+6EiGui48Caw8TX3VnYFnRlI8
ainAhfOEogLm2hT4Mz8Qe2kjLaaKOEK9+oTO57YwVlmy6xNPwO9EJFnbol5yIucE
t6hiPAVy1HmZIIep9WHtTYQ+8kIjF3wG7uLb+lPVb9PdODl87co8/1ANlCuhpWwR
db5+ype4rUue+w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:52 2026 by rpki-client