Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
File: tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft (raw, json)
Hash identifier: YQgmvFd8Xgi/TY+uapjdiZMD2jjq3qaIbpvwI7acq3Q=
Subject key identifier: 4C:AA:85:3A:E1:C0:CF:68:38:DD:53:7B:63:E9:B7:CA:DC:6E:5E:0E
Authority key identifier: B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
Certificate issuer: /CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Certificate serial: 019D3941AF88D4308F10FE512FAC23E27B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
Manifest number: 12E3
Signing time: Sun 29 Mar 2026 11:01:39 +0000
Manifest this update: Sun 29 Mar 2026 11:01:39 +0000
Manifest next update: Mon 30 Mar 2026 11:01:39 +0000
Files and hashes: 1: 0hNitkHNxqHDc_18OnXBaZgItKQ.roa (hash: NObu/X6pwO5Ig/Stu2qJfJzgTwRgKUDuC69hOBPSYtc=)
2: tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl (hash: mopkJtlIHBI2dWGdBl20vGQQ4AvQGPKQpXX/IMYUg9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:af:88:d4:30:8f:10:fe:51:2f:ac:23:e2:7b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Validity
Not Before: Mar 29 11:01:39 2026 GMT
Not After : Mar 30 11:01:39 2026 GMT
Subject: CN=4caa853ae1c0cf6838dd537b63e9b7cadc6e5e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:d2:58:99:b2:ed:54:40:c1:e0:74:d9:fb:
ff:62:9c:76:f7:5c:b9:cc:0a:56:9d:30:c9:a3:62:
3a:b7:c6:1a:f0:83:f9:a7:c1:13:ed:e9:a1:f9:0f:
56:ed:40:64:ed:db:6f:d2:44:c6:0a:3f:1e:06:73:
2e:ed:58:85:04:21:d7:10:97:4d:e0:be:a0:cd:4d:
f1:13:af:de:b2:08:19:8a:98:81:32:22:be:36:68:
f4:09:05:21:80:16:7e:68:e4:bb:18:90:ff:d1:fd:
38:f9:04:f0:da:54:bb:e1:80:b5:92:9e:f3:8b:d2:
fd:4e:73:85:c7:cf:f6:38:10:00:9d:db:25:58:fb:
49:8d:81:2c:ca:e3:71:fd:3c:b0:61:e0:14:3b:f2:
8e:a3:b7:06:cd:cd:dd:a8:27:a4:54:07:6c:de:03:
1d:17:c9:35:58:8c:01:f4:95:46:da:47:14:9f:4e:
1b:1e:27:5a:6f:8f:92:c6:9f:bb:58:98:15:ad:ed:
46:09:39:01:49:5d:f1:9a:2a:74:0b:ee:e7:c2:78:
d3:90:d9:60:a2:5a:d5:bc:8a:22:b0:de:d3:11:31:
05:58:a7:cb:1a:20:ef:0f:61:bc:10:c1:05:00:26:
6b:a5:17:4c:be:e4:cb:d1:ba:c3:20:9f:a3:b1:20:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AA:85:3A:E1:C0:CF:68:38:DD:53:7B:63:E9:B7:CA:DC:6E:5E:0E
X509v3 Authority Key Identifier:
keyid:B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:18:51:c5:08:62:b7:96:92:90:c6:d8:5c:63:e2:1f:61:e1:
a8:1b:74:c7:22:7a:5e:c5:db:65:83:8f:c9:f1:a3:ae:39:4a:
74:e5:f8:9a:20:47:68:dc:9f:f5:60:76:1a:7b:0a:f5:44:6d:
79:c0:3a:66:66:a5:fc:4c:a8:c4:47:c0:c5:79:25:56:b0:2b:
5f:3a:85:9d:12:13:dd:bf:d9:f2:b3:c4:f7:43:08:a3:a7:28:
4c:0f:f8:3c:7d:ed:8c:33:68:e4:93:99:c8:5b:25:fe:0f:10:
23:af:20:d1:21:b7:e4:10:d8:8c:42:ac:2b:f1:44:58:24:91:
24:97:df:12:aa:82:3d:7f:c8:ee:bd:ab:4b:5a:28:b6:4a:81:
ec:4a:5c:74:a3:43:92:b3:af:ec:90:64:bb:ba:be:6c:0c:74:
52:ac:e0:09:88:20:99:15:c7:65:cf:b0:94:e4:fa:88:d6:78:
ce:fc:13:8c:5a:73:c8:79:31:be:e0:f7:ce:45:05:71:0d:ff:
d9:37:46:41:51:99:23:41:f6:7b:9a:4e:da:2a:e6:47:93:bb:
2f:73:0f:81:3d:c9:cd:6a:d3:27:ad:1b:79:f5:f8:fe:a3:16:
13:df:e7:66:1a:fc:0f:cf:51:10:d1:19:81:5a:94:a6:9a:06:
62:bd:85:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Qa+I1DCPEP5RL6wj4nsIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MWI3OTc0ZTk3YWI5Mzc5MTI0MDczNGExOWZiOWFlNzQ0
NWNiZDkwHhcNMjYwMzI5MTEwMTM5WhcNMjYwMzMwMTEwMTM5WjAzMTEwLwYDVQQD
Eyg0Y2FhODUzYWUxYzBjZjY4MzhkZDUzN2I2M2U5YjdjYWRjNmU1ZTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulPSWJmy7VRAweB02fv/Ypx291y5
zApWnTDJo2I6t8Ya8IP5p8ET7emh+Q9W7UBk7dtv0kTGCj8eBnMu7ViFBCHXEJdN
4L6gzU3xE6/esggZipiBMiK+Nmj0CQUhgBZ+aOS7GJD/0f04+QTw2lS74YC1kp7z
i9L9TnOFx8/2OBAAndslWPtJjYEsyuNx/TywYeAUO/KOo7cGzc3dqCekVAds3gMd
F8k1WIwB9JVG2kcUn04bHidab4+Sxp+7WJgVre1GCTkBSV3xmip0C+7nwnjTkNlg
olrVvIoisN7TETEFWKfLGiDvD2G8EMEFACZrpRdMvuTL0brDIJ+jsSBcUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEyqhTrhwM9oON1Te2Ppt8rcbl4OMB8GA1UdIwQY
MBaAFLYbeXTperk3kSQHNKGfua50RcvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MWQyMTMtMmEwZi00MzQ4LTg5M2Mt
ZTcyNjM3NDMzMGNlLzEvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82MWQyMTMtMmEwZi00MzQ4LTg5M2MtZTcyNjM3NDMzMGNl
LzEvdGh0NWRPbDZ1VGVSSkFjMG9aLTVyblJGeTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhhRxQhi
t5aSkMbYXGPiH2HhqBt0xyJ6XsXbZYOPyfGjrjlKdOX4miBHaNyf9WB2GnsK9URt
ecA6Zmal/EyoxEfAxXklVrArXzqFnRIT3b/Z8rPE90MIo6coTA/4PH3tjDNo5JOZ
yFsl/g8QI68g0SG35BDYjEKsK/FEWCSRJJffEqqCPX/I7r2rS1ootkqB7EpcdKND
krOv7JBku7q+bAx0UqzgCYggmRXHZc+wlOT6iNZ4zvwTjFpzyHkxvuD3zkUFcQ3/
2TdGQVGZI0H2e5pO2irmR5O7L3MPgT3JzWrTJ60befX4/qMWE9/nZhr8D89RENEZ
gVqUppoGYr2FqQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:41:57 2026 by rpki-client