Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
File: THHp8j7qymjHIcvkKAYQC3XhV3A.mft (raw, json)
Hash identifier: tKikLYKyoaYjvEOqU94CcXmsqY5tPo3Jz9DJnmwvKfI=
Subject key identifier: 95:17:81:ED:D6:87:01:87:88:99:95:53:42:18:0A:09:B1:2D:48:2D
Authority key identifier: 4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
Certificate issuer: /CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Certificate serial: 019CAAC6223B64D476CBA514F4B893650B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
Manifest number: 0703
Signing time: Sun 01 Mar 2026 19:00:37 +0000
Manifest this update: Sun 01 Mar 2026 19:00:37 +0000
Manifest next update: Mon 02 Mar 2026 19:00:37 +0000
Files and hashes: 1: THHp8j7qymjHIcvkKAYQC3XhV3A.crl (hash: NNv2JK81/WmAMUSsR3f9YRFFxUSilaG6ZXavNyzXv1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:22:3b:64:d4:76:cb:a5:14:f4:b8:93:65:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Validity
Not Before: Mar 1 19:00:37 2026 GMT
Not After : Mar 2 19:00:37 2026 GMT
Subject: CN=951781edd68701878899955342180a09b12d482d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:bf:0d:cc:be:3a:13:33:45:7b:50:27:38:e3:
18:c7:f9:b0:cf:01:2b:de:3d:67:4d:28:a0:1c:f1:
16:f3:bf:45:57:d5:73:94:a9:ba:b8:1c:bf:42:0d:
20:2e:30:42:87:e9:5b:79:fa:82:90:e2:1a:33:bf:
f4:fa:c4:7a:a2:38:05:a4:c2:1e:c6:1e:7d:f6:c6:
88:2d:df:7f:17:0a:17:21:19:bc:2c:47:ff:cb:2f:
38:d1:04:77:21:b8:eb:ed:38:36:f0:23:1f:5e:bb:
16:6d:9c:e9:ae:a4:bb:e5:09:c6:f9:c1:48:f3:e3:
8b:7f:92:b2:60:05:75:a1:e0:bc:a1:73:0b:d8:2c:
5a:ac:10:4c:3c:f9:23:52:75:94:42:d1:f9:ee:52:
79:b1:c6:d6:c8:66:c6:66:fe:2c:30:d5:12:e6:8e:
6e:f4:3c:a4:ff:1d:02:d8:1b:94:05:ea:02:87:11:
b9:03:2c:a4:26:3c:e8:37:df:f8:04:b3:cc:6e:32:
c3:ac:b4:50:cf:34:2e:eb:64:e2:7c:49:49:b9:40:
ba:28:6f:86:3e:4d:14:05:01:7f:12:08:cb:da:aa:
03:4a:ce:58:13:5b:43:0a:a3:5c:ac:19:c3:70:33:
0e:ea:d3:28:27:f7:07:48:4b:07:52:e5:00:f1:0f:
77:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:17:81:ED:D6:87:01:87:88:99:95:53:42:18:0A:09:B1:2D:48:2D
X509v3 Authority Key Identifier:
keyid:4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:9e:06:ce:98:83:cd:0b:d9:5f:1e:b9:30:11:34:10:33:d2:
5d:d5:81:dc:37:0c:d5:60:8e:1c:99:7f:f0:ca:f1:cf:93:48:
b4:0d:a8:4d:75:d9:2c:d8:37:f9:52:49:80:22:a8:b0:f4:32:
b8:ab:8b:a8:20:c8:fd:ba:8a:df:89:c8:7a:e9:86:5c:67:d2:
94:3a:f9:09:ea:e3:a6:57:30:13:62:9a:22:24:f0:be:3d:af:
5e:b5:a9:5f:b3:f3:7e:a0:1f:0f:2b:25:e7:52:05:58:0d:f9:
81:f1:0a:76:c4:af:c9:e1:42:54:17:2e:e5:0c:ef:13:55:90:
eb:a4:b0:b1:53:22:e6:dd:5b:22:7f:fc:b3:9e:e2:60:15:73:
4d:e3:aa:53:07:7f:2d:c6:f8:03:5c:1f:1f:6b:a5:38:21:e2:
c0:98:48:ea:97:58:e3:64:7f:05:18:48:c3:83:47:9e:98:f7:
82:95:29:03:27:03:0c:b9:cb:c1:fd:4a:2d:75:c7:1f:b4:ca:
af:6b:2b:b5:b4:6d:74:f4:a3:8b:c2:e5:61:ad:99:7f:79:d2:
6b:0e:10:60:cb:91:65:56:5a:ce:4e:fd:ec:f1:f1:fe:66:e9:
7e:b7:62:58:2d:47:c5:35:29:f8:1d:ac:a2:e8:4b:2b:8b:e0:
3d:e5:bd:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxiI7ZNR2y6UU9LiTZQsAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzFlOWYyM2VlYWNhNjhjNzIxY2JlNDI4MDYxMDBiNzVl
MTU3NzAwHhcNMjYwMzAxMTkwMDM3WhcNMjYwMzAyMTkwMDM3WjAzMTEwLwYDVQQD
Eyg5NTE3ODFlZGQ2ODcwMTg3ODg5OTk1NTM0MjE4MGEwOWIxMmQ0ODJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh78NzL46EzNFe1AnOOMYx/mwzwEr
3j1nTSigHPEW879FV9VzlKm6uBy/Qg0gLjBCh+lbefqCkOIaM7/0+sR6ojgFpMIe
xh599saILd9/FwoXIRm8LEf/yy840QR3Ibjr7Tg28CMfXrsWbZzprqS75QnG+cFI
8+OLf5KyYAV1oeC8oXML2CxarBBMPPkjUnWUQtH57lJ5scbWyGbGZv4sMNUS5o5u
9Dyk/x0C2BuUBeoChxG5AyykJjzoN9/4BLPMbjLDrLRQzzQu62TifElJuUC6KG+G
Pk0UBQF/EgjL2qoDSs5YE1tDCqNcrBnDcDMO6tMoJ/cHSEsHUuUA8Q93VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJUXge3WhwGHiJmVU0IYCgmxLUgtMB8GA1UdIwQY
MBaAFExx6fI+6spoxyHL5CgGEAt14VdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhIcDhqN3F5bWpISWN2a0tBWVFDM1hoVjNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi85NGY2NjItNTA2Yi00ZWM5LWE3YWEt
YzliN2ViMmNlYTU3LzEvVEhIcDhqN3F5bWpISWN2a0tBWVFDM1hoVjNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi85NGY2NjItNTA2Yi00ZWM5LWE3YWEtYzliN2ViMmNlYTU3
LzEvVEhIcDhqN3F5bWpISWN2a0tBWVFDM1hoVjNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZ4GzpiD
zQvZXx65MBE0EDPSXdWB3DcM1WCOHJl/8Mrxz5NItA2oTXXZLNg3+VJJgCKosPQy
uKuLqCDI/bqK34nIeumGXGfSlDr5CerjplcwE2KaIiTwvj2vXrWpX7PzfqAfDysl
51IFWA35gfEKdsSvyeFCVBcu5QzvE1WQ66SwsVMi5t1bIn/8s57iYBVzTeOqUwd/
Lcb4A1wfH2ulOCHiwJhI6pdY42R/BRhIw4NHnpj3gpUpAycDDLnLwf1KLXXHH7TK
r2srtbRtdPSji8LlYa2Zf3nSaw4QYMuRZVZazk797PHx/mbpfrdiWC1HxTUp+B2s
ouhLK4vgPeW9NA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:13:34 2026 by rpki-client