Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: 2oBYTJVoG46zIg6hzpDoT+lCCbA+FJKNECYIBOjofoM=
Subject key identifier: BB:35:1E:FB:6A:4F:A4:2D:62:6E:CD:7E:D1:76:05:98:5E:B5:6C:20
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 01A10BF0F2401A45A5A548CD61BC6356BA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 1A8B
Signing time: Mon 05 Oct 2026 12:01:42 +0000
Manifest this update: Mon 05 Oct 2026 12:01:42 +0000
Manifest next update: Tue 06 Oct 2026 12:01:42 +0000
Files and hashes: 1: 1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa (hash: koOl6xvsjw0LPNpf6MfybPGCkgptrhSYthcGhLIG8iM=)
2: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: RyUAS8UbERbekrkWQtGqRDLCHiaspt7g1MnHO3D70+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 12:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:f0:f2:40:1a:45:a5:a5:48:cd:61:bc:63:56:ba:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Oct 5 12:01:42 2026 GMT
Not After : Oct 6 12:01:42 2026 GMT
Subject: CN=bb351efb6a4fa42d626ecd7ed17605985eb56c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:98:ff:aa:81:91:7c:58:40:e7:24:cd:6c:
16:4d:c6:97:05:ae:96:f7:59:21:e6:b0:de:05:a0:
64:23:9b:9f:95:00:93:36:78:5f:a9:ae:4a:e9:39:
56:b0:75:c1:5e:56:ec:a9:27:a8:0b:03:44:04:89:
d5:53:54:d0:6d:fa:b7:0b:9b:b9:b8:7a:bd:bd:c2:
fd:6d:89:eb:85:cc:11:19:33:e0:7c:90:7b:2d:ed:
01:44:d9:0c:ef:fc:f4:5c:63:50:d6:72:ac:c5:94:
59:ab:28:e0:e5:f0:62:9d:5e:ed:1f:d5:79:c9:3e:
89:f7:d7:85:be:fd:cf:62:e0:51:78:5e:9a:7e:9b:
7a:ea:c3:d5:b6:28:ab:b1:6b:5e:c9:da:f0:93:d4:
90:30:9e:cd:01:6d:67:7e:0b:17:58:f3:c3:4f:7b:
5d:01:6b:e0:fc:43:ac:e6:81:fe:7a:78:04:74:60:
cd:e9:82:db:55:f1:df:73:e6:33:36:da:53:69:32:
d5:d0:2b:8d:56:0b:0e:bb:d7:71:86:f9:f3:ff:bd:
82:0a:2e:ce:74:18:fa:34:77:33:51:3b:8e:c1:82:
30:2e:6c:fb:24:4c:bc:fb:88:f6:98:cb:91:83:83:
e5:ca:44:92:06:b3:60:8b:88:13:a8:06:41:7c:2f:
36:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:35:1E:FB:6A:4F:A4:2D:62:6E:CD:7E:D1:76:05:98:5E:B5:6C:20
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:7e:d7:61:c8:1f:36:f8:e3:81:1e:33:3a:5c:5e:10:d2:17:
b2:74:d0:7d:8a:eb:74:ba:50:46:e3:32:44:bb:1e:13:88:55:
23:3a:fc:1a:60:c1:6d:29:27:42:f8:af:20:13:6b:28:86:c0:
66:71:3a:12:37:f5:16:32:19:3b:38:4a:e7:25:29:3c:65:13:
d6:e0:bf:76:ba:7f:b8:6f:ff:e9:71:d0:38:ea:a5:a0:17:91:
51:ef:dd:97:24:52:59:35:2e:70:cc:e7:be:cf:af:84:12:6a:
d1:bf:30:b7:97:00:0a:b6:ff:d8:82:aa:2a:c3:89:e9:24:f8:
4a:3a:9f:69:f0:49:01:7c:02:c8:33:18:d4:e2:72:93:95:cf:
b7:3a:e3:f9:d7:86:af:d7:73:46:ee:fd:3d:a9:6d:38:a3:4b:
0a:79:b0:21:48:51:81:c8:a6:8b:d5:49:c6:12:21:c0:41:0d:
2d:37:57:a6:39:29:81:03:cf:d3:0e:51:d6:6b:c9:d3:2c:79:
8d:cd:ba:65:b6:be:33:f5:73:a5:88:e4:f3:99:6c:74:d7:45:
12:be:92:40:40:08:f1:2e:5b:c2:d1:58:a6:79:04:fa:fe:e6:
25:90:db:0a:e6:e5:21:f3:c4:18:ab:b1:4e:13:12:b0:9a:8e:
5b:5d:12:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 23:48:52 2026 by rpki-client