Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: 8DBKT75M5MOhGDLAW6rRjMvWARrqGNn5gJccCh4BIiw=
Subject key identifier: 00:D4:DC:C6:4F:C6:FE:C8:1B:D8:D3:5F:75:2D:CC:E7:E1:AC:30:E2
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 019CA9EAFB1ED938F01D507136A8E8E69DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 15:01:15 +0000
Manifest this update: Sun 01 Mar 2026 15:01:15 +0000
Manifest next update: Mon 02 Mar 2026 15:01:15 +0000
Files and hashes: 1: 1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa (hash: koOl6xvsjw0LPNpf6MfybPGCkgptrhSYthcGhLIG8iM=)
2: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: JIqtV5vXuUHvIPFKIGWzgl4h2hAuJORZNUkQpZYhsL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:fb:1e:d9:38:f0:1d:50:71:36:a8:e8:e6:9d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Mar 1 15:01:15 2026 GMT
Not After : Mar 2 15:01:15 2026 GMT
Subject: CN=00d4dcc64fc6fec81bd8d35f752dcce7e1ac30e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:6d:95:53:db:2f:fb:5b:ca:39:e1:b3:eb:
da:2b:0b:7b:fd:7f:b3:25:bc:f6:03:7e:d2:ff:83:
36:65:1c:b3:56:bd:c4:18:a7:3e:6f:a8:2a:b5:6d:
c4:8e:c2:6e:b9:7f:18:8b:ad:9a:93:7a:50:5e:dd:
64:0f:a2:a5:48:fb:3c:e2:6c:20:18:2e:49:06:81:
3d:33:91:76:5c:f8:0e:38:20:4d:cf:dc:d8:03:db:
bb:47:7a:48:87:72:b1:82:72:34:6f:04:5b:14:45:
ed:36:6e:bb:77:74:d3:c3:d4:9a:a8:59:b2:46:2a:
84:02:e5:45:2e:59:a6:af:aa:6d:0e:37:60:52:2b:
3d:2e:dc:fa:ad:fe:e2:a5:3b:4a:ca:b9:39:ad:51:
dc:9b:4c:79:d6:53:d2:93:e6:76:f9:2b:02:a8:02:
4c:cf:bc:37:91:60:0e:84:bd:ff:9b:7e:f6:a4:26:
94:f0:9a:f2:b8:ea:bd:00:e7:21:59:b1:d2:69:30:
e1:4e:5a:a6:2a:40:d5:4e:24:2d:6e:96:b9:e3:75:
38:40:a8:73:46:bd:d7:2b:0e:1a:9f:a8:a3:2b:0d:
59:ac:eb:3d:b2:26:dd:e2:84:ca:fa:49:f7:6a:39:
3d:ab:2e:98:2b:83:99:a3:30:75:1b:28:43:fd:bf:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:D4:DC:C6:4F:C6:FE:C8:1B:D8:D3:5F:75:2D:CC:E7:E1:AC:30:E2
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f5:3b:cb:7d:b4:ed:0a:85:a4:57:6d:c9:f4:86:f4:ef:a0:
f6:4e:ec:18:24:ee:94:70:9b:3d:b6:a4:f7:83:fb:ed:30:c3:
91:7b:ba:46:ca:95:7f:b7:cc:39:51:4a:64:21:14:04:41:e7:
9d:0a:34:03:9b:6c:fd:ab:24:f7:6a:36:2f:2a:d7:65:fb:71:
0e:cb:cd:2b:89:1d:c4:81:2d:96:8a:ed:a2:06:ad:eb:2b:64:
d3:7a:50:f4:42:b9:bf:44:99:44:60:15:9a:c8:64:56:af:df:
bf:74:c9:c1:04:bd:f5:b1:89:e3:64:f5:46:11:d8:63:9d:8b:
1e:28:24:7f:8b:c1:69:ce:ee:fb:c0:f2:60:8b:a7:d8:ef:ba:
76:5f:34:bd:09:74:64:c2:94:7e:36:e9:2d:e3:df:a1:a0:a3:
84:c1:11:80:fc:8e:56:bf:c5:4e:82:ae:ac:f7:17:a1:91:9c:
86:d5:cc:51:63:83:aa:46:e3:c3:57:bc:2f:90:b9:ab:91:d4:
7e:f0:20:a5:cc:3d:eb:d0:7a:48:b2:8b:28:21:76:2e:21:f3:
33:68:da:d5:87:b7:c8:f4:d0:f9:ed:3e:9e:48:b6:00:11:87:
0e:97:b9:22:6d:be:19:24:3f:95:e9:02:26:56:e4:37:2d:45:
a2:12:cc:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:29 2026 by rpki-client