Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: YvX4eiGx9qe6XE3GlnSZT+wM13ViS16WnXVKMdPNtv8=
Subject key identifier: 64:FE:0E:B1:09:20:A1:08:53:0D:C3:AA:14:75:1C:A5:EB:AD:BC:17
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 019EC4B8275F3C9E15702B708E239D201730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 195D
Signing time: Sun 14 Jun 2026 06:01:03 +0000
Manifest this update: Sun 14 Jun 2026 06:01:03 +0000
Manifest next update: Mon 15 Jun 2026 06:01:03 +0000
Files and hashes: 1: 1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa (hash: koOl6xvsjw0LPNpf6MfybPGCkgptrhSYthcGhLIG8iM=)
2: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: j0bs4GLCYOi22Z/NtE/At/8NtSeDMz1HIq1HRdcvaTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 04:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:b8:27:5f:3c:9e:15:70:2b:70:8e:23:9d:20:17:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Jun 14 06:01:03 2026 GMT
Not After : Jun 15 06:01:03 2026 GMT
Subject: CN=64fe0eb10920a108530dc3aa14751ca5ebadbc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:13:c4:f1:e6:b7:a1:17:03:c1:88:1d:c7:
e1:a7:36:d6:ce:7d:eb:23:15:83:b8:6c:79:18:68:
0a:43:91:51:4e:c6:e2:bf:17:0b:7f:80:2c:93:0f:
ae:a2:0d:cd:d4:95:ac:98:d9:b7:2a:fc:d0:68:e2:
55:72:33:d3:5a:50:33:17:41:c6:a5:33:66:8e:5a:
35:e8:49:60:23:47:b8:dd:1c:07:01:dc:cb:7b:84:
f3:01:36:3d:48:57:dd:7c:ea:35:c1:d7:26:81:15:
71:3a:ac:6f:00:a6:f4:b2:26:2e:0e:07:d5:72:35:
7a:bd:a2:f6:38:e6:17:c8:82:bc:e0:a8:a9:41:3e:
70:ef:32:b9:97:46:8b:60:de:b6:d7:50:47:6b:f6:
39:41:ae:70:e5:22:e1:c9:7a:26:88:87:fd:77:e2:
da:d5:0e:5d:9f:3c:24:50:29:ec:cb:5d:ea:2f:81:
c2:f0:12:06:83:64:00:ed:2f:08:58:d5:18:c0:9d:
84:d0:66:3a:ae:e5:dd:6a:c3:2b:16:f4:c0:10:51:
c3:3e:69:ba:d5:ed:3e:10:1b:ad:7e:88:23:e8:81:
dc:1d:74:9b:f6:db:b6:01:44:ad:4e:e6:77:29:a4:
6b:1e:7d:bf:7b:8a:c2:c8:d9:97:26:9f:fb:16:1e:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FE:0E:B1:09:20:A1:08:53:0D:C3:AA:14:75:1C:A5:EB:AD:BC:17
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ca:49:22:f1:ad:c4:a0:a5:a6:7e:57:3d:56:c0:d6:af:c0:
52:99:b7:13:e3:58:4d:10:1d:86:10:b5:55:b4:11:a4:5f:95:
e7:16:a1:3f:9a:c1:d9:22:8a:78:41:f6:de:f5:c9:6c:fd:9e:
64:df:9b:d7:ac:8a:c8:0b:a6:3a:a2:5e:5b:65:02:6c:1e:ac:
9a:b9:de:29:b5:23:4c:06:83:06:55:8c:53:2f:f2:06:67:10:
06:7f:a4:05:9c:04:09:d3:5b:d1:e5:b2:81:89:12:75:9a:f1:
49:14:88:f1:58:3d:01:28:36:77:f7:73:64:dc:f1:f5:e5:2c:
20:3a:7c:92:d8:09:1b:e2:2a:6c:bd:6c:81:ca:66:59:59:29:
59:ff:f9:4d:58:60:d2:d6:fa:3e:16:d2:71:5a:b6:5a:92:f3:
4b:73:6f:3a:b2:ad:d6:72:f1:70:af:73:27:8f:d3:3b:55:ba:
96:f1:f4:03:da:76:b6:c4:05:9c:fb:ef:ad:58:77:e3:97:9f:
34:75:19:54:50:00:6e:ef:9f:1d:24:0e:33:d1:48:ff:3d:b1:
2f:35:00:21:bf:a7:8d:55:5b:64:95:e7:8d:b5:28:15:32:e6:
ab:c3:a7:7a:c3:4a:24:90:92:cb:c0:ff:95:aa:26:66:16:ad:
7d:f9:9d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:16 2026 by rpki-client