Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
File: tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json)
Hash identifier: +raJUDWr3U2L/zxyr68w/ghLu+/jeG6oCFgSxy4EVxo=
Subject key identifier: 67:A9:D8:0B:28:E2:62:83:00:64:72:15:56:48:37:9B:8D:B6:24:AB
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial: 019D390A2061843F6D62DF504962D6C17567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
Manifest number: 15B7
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: sqJAuTtHjJofashtrpYrfv2Lqkc.roa (hash: tKvEHWVGuDg8Tn8ekoHOsKqzA2uvyPQd/TrrxC4QRzA=)
2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: lpODTiPcfRlAhthqGkDWgw3DqS56IEx4y1mOPdqiuMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:20:61:84:3f:6d:62:df:50:49:62:d6:c1:75:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=67a9d80b28e26283006472155648379b8db624ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ee:6e:9a:9c:e5:8d:19:52:ee:d0:f4:9a:5f:
82:d8:ab:2e:9c:6d:5e:21:5d:53:4e:cd:e7:d2:ec:
74:37:fa:92:a2:25:82:9e:fb:03:0a:37:ee:db:5b:
ea:9e:37:a9:07:e5:bd:95:84:14:71:c4:63:d7:d8:
cd:34:8f:d5:3b:b4:ba:3d:20:56:10:7f:40:0b:ee:
7c:09:18:06:56:5d:a8:6d:24:f1:af:e1:03:0f:b7:
32:3d:16:d4:f6:be:c4:a7:e9:a0:29:47:76:a0:71:
f6:c1:7e:1e:15:f0:e1:e9:6d:55:a3:cf:18:d7:2e:
53:b6:58:6e:61:52:ae:b1:c9:d5:45:35:71:78:14:
a6:d8:87:d4:87:dd:c3:16:c5:38:dc:e2:0b:41:1e:
6c:94:54:6f:b6:4d:36:f9:b7:dd:5d:42:c6:a9:87:
f2:23:c4:9e:1e:aa:83:e5:27:ef:b3:95:3d:6d:d4:
3d:1d:f1:90:16:49:f1:d2:fd:9a:89:8f:15:65:01:
e8:d6:c2:c4:83:cd:54:a1:04:ed:bf:7c:68:9d:e8:
ff:ed:01:a9:8e:ea:7a:b0:82:f5:3c:4e:88:c4:97:
d0:bd:cf:51:af:bc:9a:ed:c3:d5:ba:f3:3c:57:3f:
0f:ce:53:0d:2e:81:87:4e:2e:b2:52:83:41:d5:3d:
59:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A9:D8:0B:28:E2:62:83:00:64:72:15:56:48:37:9B:8D:B6:24:AB
X509v3 Authority Key Identifier:
keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9b:ce:88:ee:ea:c2:3a:40:66:9e:53:34:b5:ac:d7:a7:69:
54:3d:55:2f:71:83:0c:8d:a5:52:e0:c1:88:9d:0d:55:d8:3c:
a0:51:99:a4:a3:f2:f9:ad:74:8a:56:bd:44:9b:79:db:1d:ec:
c8:99:f4:2e:24:21:bc:2c:87:10:20:57:13:ec:65:c5:34:90:
cf:ac:b8:31:b3:70:21:7c:aa:00:86:e5:62:f5:2a:c6:b6:45:
87:6f:54:36:c7:4f:38:da:8a:ec:e6:4b:b0:47:e7:ac:61:01:
ea:f6:5d:b8:ae:5a:a9:c6:f1:15:4a:8e:6f:05:97:db:97:32:
b5:c8:fd:43:ac:93:75:bc:eb:9b:fe:63:a2:7c:0e:b5:09:9d:
55:91:69:5f:9c:d5:bd:d8:1f:3b:86:2f:a0:0a:48:90:22:c2:
47:64:3a:a5:50:bc:e8:09:56:eb:ea:e8:cc:05:0b:bf:cb:7e:
56:15:58:dd:43:ca:25:21:47:c6:3d:c9:16:98:f7:4d:82:dd:
89:27:65:bd:c3:24:86:15:ec:e5:43:08:c8:33:03:07:f6:f6:
42:d5:d0:9a:21:9b:6b:b9:51:33:27:32:8b:7e:68:b1:11:88:
36:dc:7c:27:05:d8:a7:f7:16:33:d4:a0:a5:82:a2:17:06:39:
18:79:47:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CiBhhD9tYt9QSWLWwXVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0NzE0YmZkOTgyZWQyOTdlNWM3M2VjZTc0ZDIyMmU1Mjc0
YzFmYjUwHhcNMjYwMzI5MTAwMDU3WhcNMjYwMzMwMTAwMDU3WjAzMTEwLwYDVQQD
Eyg2N2E5ZDgwYjI4ZTI2MjgzMDA2NDcyMTU1NjQ4Mzc5YjhkYjYyNGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2e5umpzljRlS7tD0ml+C2KsunG1e
IV1TTs3n0ux0N/qSoiWCnvsDCjfu21vqnjepB+W9lYQUccRj19jNNI/VO7S6PSBW
EH9AC+58CRgGVl2obSTxr+EDD7cyPRbU9r7Ep+mgKUd2oHH2wX4eFfDh6W1Vo88Y
1y5TtlhuYVKuscnVRTVxeBSm2IfUh93DFsU43OILQR5slFRvtk02+bfdXULGqYfy
I8SeHqqD5Sfvs5U9bdQ9HfGQFknx0v2aiY8VZQHo1sLEg81UoQTtv3xonej/7QGp
jup6sIL1PE6IxJfQvc9Rr7ya7cPVuvM8Vz8PzlMNLoGHTi6yUoNB1T1ZIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGep2Aso4mKDAGRyFVZIN5uNtiSrMB8GA1UdIwQY
MBaAFLRxS/2YLtKX5cc+znTSIuUnTB+1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9jZjc3MTgtMjc0ZC00MTJiLWI3NTUt
NjJlYTFlN2U4ZmM2LzEvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9jZjc3MTgtMjc0ZC00MTJiLWI3NTUtNjJlYTFlN2U4ZmM2
LzEvdEhGTF9aZ3UwcGZseHo3T2ROSWk1U2RNSDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJvOiO7q
wjpAZp5TNLWs16dpVD1VL3GDDI2lUuDBiJ0NVdg8oFGZpKPy+a10ila9RJt52x3s
yJn0LiQhvCyHECBXE+xlxTSQz6y4MbNwIXyqAIblYvUqxrZFh29UNsdPONqK7OZL
sEfnrGEB6vZduK5aqcbxFUqObwWX25cytcj9Q6yTdbzrm/5jonwOtQmdVZFpX5zV
vdgfO4YvoApIkCLCR2Q6pVC86AlW6+rozAULv8t+VhVY3UPKJSFHxj3JFpj3TYLd
iSdlvcMkhhXs5UMIyDMDB/b2QtXQmiGba7lRMycyi35osRGINtx8JwXYp/cWM9Sg
pYKiFwY5GHlHGg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:25 2026 by rpki-client