Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
File: THHp8j7qymjHIcvkKAYQC3XhV3A.mft (raw, json)
Hash identifier: EkWVWbKqcmhag7aCqCtLkClfeIkbUh8thFeop4SHbTA=
Subject key identifier: 4B:8B:F8:8A:90:EE:AB:E4:0F:81:3A:FA:20:61:2E:AA:2A:C3:56:BA
Authority key identifier: 4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
Certificate issuer: /CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Certificate serial: 019D9A3E1CE7AFDB601D01D52673C0337EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
Manifest number: 077F
Signing time: Fri 17 Apr 2026 07:00:54 +0000
Manifest this update: Fri 17 Apr 2026 07:00:54 +0000
Manifest next update: Sat 18 Apr 2026 07:00:54 +0000
Files and hashes: 1: THHp8j7qymjHIcvkKAYQC3XhV3A.crl (hash: 7kPqpEv6z8tZChkijhfPpuB5SPf2edxgZ7Dmi1up7VQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:1c:e7:af:db:60:1d:01:d5:26:73:c0:33:7e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Validity
Not Before: Apr 17 07:00:54 2026 GMT
Not After : Apr 18 07:00:54 2026 GMT
Subject: CN=4b8bf88a90eeabe40f813afa20612eaa2ac356ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:09:ff:b9:a4:3d:f5:79:f2:cb:44:79:66:9b:
86:d4:bc:4e:5b:0e:ec:6f:41:3f:e6:b5:b4:e7:7e:
a1:19:57:1e:67:30:41:56:9e:a7:c3:d9:cd:bc:9b:
16:9d:0a:5e:40:15:4f:c9:ee:f6:c1:cf:8c:64:18:
6e:19:50:20:37:46:76:0f:c7:92:dd:08:5a:67:c3:
77:28:7e:09:13:31:bb:76:19:b6:97:8a:0b:93:fa:
96:ca:26:eb:4e:75:ef:59:ae:90:ed:86:7b:9e:81:
5c:5e:94:25:ab:d5:4c:5b:4e:02:4e:f9:17:c6:35:
e6:44:9b:8b:9c:1c:46:4b:9e:23:a2:23:35:d6:b6:
a6:ee:98:4c:ec:4c:bf:d9:55:0e:3a:4e:87:1f:51:
28:08:67:17:da:a7:9d:5a:42:59:70:12:5f:0c:22:
5f:ab:51:11:a2:4e:87:ce:19:ae:fd:b4:e2:7d:d6:
f0:a1:9e:af:9f:a1:0d:8f:4f:31:79:d9:42:4f:93:
f0:24:75:76:7a:c8:aa:68:1d:58:93:93:7c:22:5a:
e3:4a:2c:0c:48:81:12:de:61:4d:ae:07:83:49:2c:
a3:64:64:e9:07:7e:47:5a:fd:bc:28:31:b6:ca:f1:
b6:f5:02:d0:a2:57:09:bc:34:26:98:c7:8b:97:f1:
14:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8B:F8:8A:90:EE:AB:E4:0F:81:3A:FA:20:61:2E:AA:2A:C3:56:BA
X509v3 Authority Key Identifier:
keyid:4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:26:28:f8:45:7e:a4:0b:50:c4:ee:62:b4:af:79:f4:01:cf:
75:8b:70:57:35:34:b9:a1:77:44:57:77:e2:bc:e0:d6:bd:a1:
b8:ab:10:a3:61:c7:31:33:c4:bb:dd:d0:e5:1e:1c:e7:38:32:
bc:dc:69:75:42:74:0c:0e:10:87:3c:c0:f0:88:e5:d8:5a:3e:
70:f4:9d:9b:16:f6:08:9d:23:cb:e7:cc:52:8a:0b:ab:7b:89:
69:d3:d2:de:9a:8d:c6:ea:97:5a:fc:26:01:e1:24:3b:4f:1c:
1b:c4:f0:6b:76:36:5e:84:6e:64:55:a4:11:95:b3:62:63:a3:
40:69:67:f5:6b:e6:18:d4:6c:83:dd:66:69:3d:42:60:c0:2f:
c3:0b:fd:9a:90:29:6f:ea:29:3f:fd:f4:0a:e3:41:91:7c:1a:
c9:87:10:07:7d:78:c4:0d:1a:dd:69:cc:85:45:c6:40:ed:b0:
19:e2:04:c8:89:09:ec:01:7a:db:5d:96:dd:35:c9:a3:9c:c2:
56:e8:1f:a8:30:24:c5:59:ac:f5:73:bc:05:d5:03:b7:e6:90:
93:95:dc:f3:a4:a5:c5:e5:7f:3b:52:0a:45:3f:fc:7b:ae:91:
83:8d:8f:4f:6d:19:b6:0b:ea:fb:9f:00:7c:46:ac:51:be:af:
91:31:ef:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:00 2026 by rpki-client