Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: ZmWp2HS14eDxOdrWcg/pwdTC6sJq8ZxVxOovqwiepZo=
Subject key identifier: 5D:B0:DC:44:B4:04:7E:9E:BE:58:A9:4D:19:9B:9C:5E:3C:F8:76:05
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 019D9773CA1CD25758DAE73F0EE8C829EED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 18:00:41 +0000
Manifest this update: Thu 16 Apr 2026 18:00:41 +0000
Manifest next update: Fri 17 Apr 2026 18:00:41 +0000
Files and hashes: 1: 1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa (hash: koOl6xvsjw0LPNpf6MfybPGCkgptrhSYthcGhLIG8iM=)
2: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: QcXU/0jn3LN6Dzg3Me9qPp/fJAmdE5XhwAoAnT0j7fk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:ca:1c:d2:57:58:da:e7:3f:0e:e8:c8:29:ee:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Apr 16 18:00:41 2026 GMT
Not After : Apr 17 18:00:41 2026 GMT
Subject: CN=5db0dc44b4047e9ebe58a94d199b9c5e3cf87605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:c8:6d:0d:f9:63:10:16:2d:59:63:ab:f6:
64:26:9e:cd:d8:45:be:d5:fe:fc:6f:91:94:4e:ce:
e6:79:5c:5b:97:ed:30:67:c0:c5:f0:f4:06:61:62:
32:c0:3b:ff:6a:1f:95:f9:66:f8:4f:1e:24:cf:36:
df:26:9c:de:3e:fc:44:ea:30:d6:0b:b0:47:17:85:
6f:5c:3f:52:72:6f:33:32:80:42:e9:ca:69:0d:65:
f8:a3:d9:8b:7a:21:ed:5d:57:bc:05:4e:67:d7:8e:
5c:70:5a:59:c6:d2:ce:42:dd:e4:f7:c1:f6:7a:17:
b6:93:5f:7f:a3:54:81:e6:4e:0e:4d:c1:df:4c:9e:
73:41:8c:55:df:23:c4:7c:e9:f3:91:b3:62:53:3d:
d5:4c:42:2f:8a:1f:b2:06:50:d4:93:48:78:9d:94:
60:1e:fa:64:8e:12:46:9a:2e:0b:55:56:c1:6a:c8:
ad:f9:c2:67:36:55:32:a8:4d:2b:98:bb:b9:4d:c9:
3b:6a:cd:8e:b4:92:f1:b1:2d:07:57:b7:52:21:6d:
b6:d1:58:ea:e0:8a:34:a7:26:ac:49:8c:3f:e1:ac:
c0:ae:fd:96:a7:77:4d:8d:7c:25:64:0b:64:5d:28:
b4:56:76:7a:6b:cf:e2:f7:58:e3:de:0f:b8:9a:5a:
d4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B0:DC:44:B4:04:7E:9E:BE:58:A9:4D:19:9B:9C:5E:3C:F8:76:05
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:18:c2:02:6b:36:bb:34:b0:58:0a:27:84:6b:d2:31:43:d7:
90:a8:d0:1f:ff:8b:ab:00:60:c3:06:67:45:c2:82:b0:4d:4c:
b6:42:a1:9b:7d:fd:26:00:2f:52:ca:ad:83:f4:dd:c6:ab:02:
3b:06:32:06:4f:6d:93:cc:c5:6f:f3:c4:7d:e4:05:61:e5:05:
64:d2:b4:0a:6e:da:af:9f:f8:35:1a:52:ba:40:78:10:8a:02:
ba:89:c1:cf:61:8d:64:51:15:e6:c7:9c:b9:e9:cb:df:bd:91:
52:8a:d7:d3:8c:87:91:01:b4:ae:2f:a7:79:5b:ce:b5:97:da:
df:b5:46:0a:b0:48:4f:82:ea:91:8a:8b:04:ec:20:5c:d1:3a:
c3:d8:bc:fd:a1:70:4e:a2:83:f0:ac:aa:a5:6e:a2:7b:d2:7f:
f1:7d:07:28:31:ff:33:73:55:81:56:c6:3b:d8:c5:6b:ae:89:
9b:c8:0b:1b:38:3f:f4:8f:d3:cf:31:90:37:88:7f:24:6f:53:
0e:00:d0:86:32:52:c4:00:d5:6d:86:e1:8c:73:ce:37:84:b9:
d2:01:bb:0f:f1:ac:ee:04:f6:6b:46:8f:8a:5f:0d:bd:48:9d:
52:0b:74:75:78:f8:1d:1e:9f:50:90:c7:ac:43:d9:da:a8:3c:
c2:7f:e7:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Xc8oc0ldY2uc/DujIKe7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Nzg0MTAyMjQ5MDQ0OTRlOWMwZjdkMzU2NTBhMjYwZTVm
YjYxOTMwHhcNMjYwNDE2MTgwMDQxWhcNMjYwNDE3MTgwMDQxWjAzMTEwLwYDVQQD
Eyg1ZGIwZGM0NGI0MDQ3ZTllYmU1OGE5NGQxOTliOWM1ZTNjZjg3NjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNbIbQ35YxAWLVljq/ZkJp7N2EW+
1f78b5GUTs7meVxbl+0wZ8DF8PQGYWIywDv/ah+V+Wb4Tx4kzzbfJpzePvxE6jDW
C7BHF4VvXD9Scm8zMoBC6cppDWX4o9mLeiHtXVe8BU5n145ccFpZxtLOQt3k98H2
ehe2k19/o1SB5k4OTcHfTJ5zQYxV3yPEfOnzkbNiUz3VTEIvih+yBlDUk0h4nZRg
HvpkjhJGmi4LVVbBasit+cJnNlUyqE0rmLu5Tck7as2OtJLxsS0HV7dSIW220Vjq
4Io0pyasSYw/4azArv2Wp3dNjXwlZAtkXSi0VnZ6a8/i91jj3g+4mlrU7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2w3ES0BH6evlipTRmbnF48+HYFMB8GA1UdIwQY
MBaAFLR4QQIkkESU6cD301ZQomDl+2GTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUt
ZGU3ZDNiYmZlZTg4LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUtZGU3ZDNiYmZlZTg4
LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALRjCAms2
uzSwWAonhGvSMUPXkKjQH/+LqwBgwwZnRcKCsE1MtkKhm339JgAvUsqtg/TdxqsC
OwYyBk9tk8zFb/PEfeQFYeUFZNK0Cm7ar5/4NRpSukB4EIoCuonBz2GNZFEV5sec
uenL372RUorX04yHkQG0ri+neVvOtZfa37VGCrBIT4LqkYqLBOwgXNE6w9i8/aFw
TqKD8KyqpW6ie9J/8X0HKDH/M3NVgVbGO9jFa66Jm8gLGzg/9I/TzzGQN4h/JG9T
DgDQhjJSxADVbYbhjHPON4S50gG7D/Gs7gT2a0aPil8NvUidUgt0dXj4HR6fUJDH
rEPZ2qg8wn/nJA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:10:10 2026 by rpki-client