Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
File: tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json)
Hash identifier: hQiCMlAyAfwjc/QYD8fs3wgDL1NtRGs9LiQOrNotEUc=
Subject key identifier: 43:DD:A5:F0:94:8E:80:D5:FA:D7:B0:EA:EC:0B:21:86:E6:35:9E:1A
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial: 01A1084A7596BBD68C6B301B3D85493A560A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
Manifest number: 17B0
Signing time: Sun 04 Oct 2026 19:00:59 +0000
Manifest this update: Sun 04 Oct 2026 19:00:59 +0000
Manifest next update: Mon 05 Oct 2026 19:00:59 +0000
Files and hashes: 1: sqJAuTtHjJofashtrpYrfv2Lqkc.roa (hash: tKvEHWVGuDg8Tn8ekoHOsKqzA2uvyPQd/TrrxC4QRzA=)
2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: tLgsTJcCWJnyOK8e6LuCXLTHVsf+g4E8wWVYWMR2Syk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:4a:75:96:bb:d6:8c:6b:30:1b:3d:85:49:3a:56:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Validity
Not Before: Oct 4 19:00:59 2026 GMT
Not After : Oct 5 19:00:59 2026 GMT
Subject: CN=43dda5f0948e80d5fad7b0eaec0b2186e6359e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:ad:dc:bf:78:cc:6b:67:cd:f7:f9:34:57:
aa:95:df:07:55:43:bc:28:ae:cf:04:ad:f5:f7:a2:
3c:2d:2b:fc:2a:99:be:70:30:53:7a:ac:38:db:5a:
9d:f8:0c:ee:bc:d0:92:29:e5:f7:2f:22:95:85:db:
25:a0:98:51:a6:9e:b3:8f:a3:c9:5e:5d:b6:99:64:
8c:a9:e2:a0:ef:16:55:59:8c:f9:98:d7:7e:8d:32:
5d:04:d0:fd:66:fc:7d:69:25:bb:69:2a:33:7f:71:
6d:49:e3:ea:58:93:de:6b:69:76:18:33:a4:81:41:
19:97:99:23:4f:ba:74:90:6f:1e:90:48:13:c0:6d:
4c:f4:77:5c:65:1b:00:0d:b6:82:3f:d2:fb:db:aa:
4e:4d:ce:5b:07:e2:57:f3:ae:4f:ab:d9:4b:2d:f6:
3a:fb:f3:3b:00:cc:ec:fa:19:38:60:67:26:50:1f:
22:48:65:e4:46:bf:64:d0:63:df:11:f6:a3:ab:d7:
40:1b:d7:e5:c9:72:cc:67:c1:9a:ab:27:dd:a3:65:
fa:81:b6:98:20:97:c7:db:8c:d9:4e:e4:a8:a0:e4:
85:6c:a6:d6:2a:24:f1:b7:1c:4b:9b:ed:07:dc:0f:
46:eb:ac:28:bb:1b:2b:c8:03:1a:8d:0c:39:e9:fd:
df:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DD:A5:F0:94:8E:80:D5:FA:D7:B0:EA:EC:0B:21:86:E6:35:9E:1A
X509v3 Authority Key Identifier:
keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:37:6f:6a:78:24:a6:cf:05:cf:1b:3d:13:1e:80:53:fa:f8:
f6:b9:54:e1:9e:31:36:c2:7e:4b:74:32:c7:83:40:d9:dc:a2:
69:56:62:f2:79:e6:54:9d:26:22:85:07:08:7a:3c:55:83:e3:
92:25:51:a7:d0:57:c5:f4:a2:b3:3e:77:7c:9d:67:3a:93:70:
89:ac:76:3a:78:ca:9e:6b:96:3f:a4:42:01:2a:6b:f8:dd:e8:
f4:0f:af:44:0b:3c:0d:72:d4:cd:2e:1f:46:57:5c:8c:0a:67:
41:9c:57:da:3b:06:65:ee:2e:9c:e9:4a:22:b2:d5:ad:e4:3c:
e8:3e:21:47:5a:3a:2e:bf:ba:4a:d9:e2:88:0f:98:a9:ac:dd:
2a:63:a5:01:85:f7:f8:fd:b7:f5:54:cb:bb:3f:39:26:ea:c1:
56:4d:4f:68:fa:17:c3:cb:bd:cb:fd:97:9a:53:15:70:da:4b:
8d:0b:ee:a3:c1:b0:89:ba:d6:72:a6:3c:80:50:bb:a0:e5:04:
b5:6d:ee:06:2d:dc:5c:e8:b9:13:41:b6:73:3d:47:da:f3:bf:
d9:a6:a4:e6:20:2f:b7:d1:f0:c5:3a:0a:b7:e6:c5:54:38:c6:
52:c9:3a:d1:ee:50:2d:b0:84:3b:52:31:6d:f8:bc:3c:1f:83:
d3:2c:5c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:09:05 2026 by rpki-client