Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
File: THGxR-uHN6vMM1-AIJUbJf8mVqY.mft (raw, json)
Hash identifier: ORuLxrDy13rSI9yGv84qmo7SahuA0GDoyFMzUEfoEXU=
Subject key identifier: 1B:9F:73:1E:F7:0A:29:77:92:18:DA:E8:B1:EB:0C:39:93:3B:08:E1
Authority key identifier: 4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
Certificate issuer: /CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Certificate serial: 01A08B68725D1ABF145739E19AF35318E800
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
Manifest number: 0EE2
Signing time: Thu 10 Sep 2026 13:01:12 +0000
Manifest this update: Thu 10 Sep 2026 13:01:12 +0000
Manifest next update: Fri 11 Sep 2026 13:01:12 +0000
Files and hashes: 1: THGxR-uHN6vMM1-AIJUbJf8mVqY.crl (hash: 7I3tFgcTxhziYnmSEXDFm4nVQxw1osPemOVscPDP514=)
2: WKQd_XI9jasbcvH0YlvhQLMhE5A.roa (hash: MurctqyZkA5732PmSwI/xARByexgnQrnz5ORl5ooO8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:72:5d:1a:bf:14:57:39:e1:9a:f3:53:18:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71b147eb8737abcc335f8020951b25ff2656a6
Validity
Not Before: Sep 10 13:01:12 2026 GMT
Not After : Sep 11 13:01:12 2026 GMT
Subject: CN=1b9f731ef70a29779218dae8b1eb0c39933b08e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:4f:aa:8a:6a:ba:10:d1:f0:b8:50:ca:91:
1e:8a:c7:fc:d8:06:ae:bc:24:ef:a2:9a:8f:0d:0f:
55:4b:aa:54:7e:3f:ff:1d:4d:4a:74:9e:4d:0a:8f:
08:91:6a:21:ef:d4:e2:d9:81:e5:40:46:59:0c:fe:
d1:30:ab:e2:f5:27:51:9c:f0:23:f3:4e:a3:d6:d5:
59:86:77:60:ab:5f:86:5d:28:dd:48:ee:f0:67:00:
a9:a2:eb:1f:c3:3d:fd:89:e1:fc:d5:64:f3:b1:f1:
60:a6:50:a5:4b:ca:7d:08:f0:0f:e1:5d:c6:89:48:
6d:c3:ce:d3:7c:04:bd:df:fa:4d:a5:1d:22:d6:be:
92:23:69:63:7d:b5:0a:0e:ec:5d:35:87:c0:6e:02:
62:ef:26:3e:55:94:cf:ef:ca:4d:32:51:5e:fd:0a:
5e:32:7d:78:89:24:94:78:30:d6:6b:1f:00:59:9b:
f9:65:c3:29:4c:6e:a3:6f:3b:7c:3a:49:2e:71:c2:
54:db:90:2f:08:83:6c:ea:04:d2:95:59:5b:77:60:
c7:fa:6d:2f:36:26:3a:a4:55:85:49:33:08:ec:6c:
b2:25:79:f4:9b:00:4e:30:c5:ea:8a:18:e9:41:71:
53:cf:48:c2:6d:97:bb:cc:c9:f5:df:56:20:3f:3b:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:9F:73:1E:F7:0A:29:77:92:18:DA:E8:B1:EB:0C:39:93:3B:08:E1
X509v3 Authority Key Identifier:
keyid:4C:71:B1:47:EB:87:37:AB:CC:33:5F:80:20:95:1B:25:FF:26:56:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THGxR-uHN6vMM1-AIJUbJf8mVqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f92871-0d3a-4d87-afdc-071b991af01f/1/THGxR-uHN6vMM1-AIJUbJf8mVqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:83:3d:a0:71:9a:6b:52:87:cd:9d:81:47:ec:57:f1:02:15:
90:b4:21:a9:58:56:cc:98:80:61:3e:f6:7f:76:4d:92:f6:63:
e8:20:4b:16:72:31:d9:1f:2d:bf:3f:7e:d7:f1:5d:c8:a0:96:
dd:9e:06:ec:1d:e4:4c:1f:62:d4:2e:bf:a6:e0:a2:52:5a:93:
4c:f2:2f:63:ed:f5:3e:dc:e9:4f:87:0b:63:eb:6b:45:48:10:
64:6e:f1:c7:97:58:6c:ca:22:ac:53:e7:30:e6:85:1a:b1:4d:
fd:14:c6:9d:bc:4c:ba:e9:a4:0b:70:d9:27:17:15:a0:d9:29:
17:27:51:6c:66:44:6a:1c:3a:50:8e:ac:81:ae:cb:f0:83:e0:
a2:ad:3d:7e:f5:a6:0a:46:86:f9:71:ce:16:f7:99:b6:e3:a3:
76:07:cb:5d:af:76:6a:ea:80:3e:70:0b:74:03:a5:7e:6a:7c:
fb:22:30:a1:14:36:5a:bc:e8:2b:c7:71:2c:1d:6f:ab:b8:5d:
f0:c4:f4:25:b8:5f:5f:ef:51:b6:2d:5a:b0:5b:89:52:44:5f:
40:b1:b1:a4:83:77:c4:b1:72:b0:e6:e8:ca:a6:77:31:07:68:
b7:3a:72:e6:c5:73:a9:ba:e0:98:59:4d:dd:82:b0:96:af:dc:
01:10:44:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCLaHJdGr8UVznhmvNTGOgAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNzFiMTQ3ZWI4NzM3YWJjYzMzNWY4MDIwOTUxYjI1ZmYy
NjU2YTYwHhcNMjYwOTEwMTMwMTEyWhcNMjYwOTExMTMwMTEyWjAzMTEwLwYDVQQD
EygxYjlmNzMxZWY3MGEyOTc3OTIxOGRhZThiMWViMGMzOTkzM2IwOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JBPqopquhDR8LhQypEeisf82Aau
vCTvopqPDQ9VS6pUfj//HU1KdJ5NCo8IkWoh79Ti2YHlQEZZDP7RMKvi9SdRnPAj
806j1tVZhndgq1+GXSjdSO7wZwCpousfwz39ieH81WTzsfFgplClS8p9CPAP4V3G
iUhtw87TfAS93/pNpR0i1r6SI2ljfbUKDuxdNYfAbgJi7yY+VZTP78pNMlFe/Qpe
Mn14iSSUeDDWax8AWZv5ZcMpTG6jbzt8OkkuccJU25AvCINs6gTSlVlbd2DH+m0v
NiY6pFWFSTMI7GyyJXn0mwBOMMXqihjpQXFTz0jCbZe7zMn131YgPzsFkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBufcx73Cil3khja6LHrDDmTOwjhMB8GA1UdIwQY
MBaAFExxsUfrhzerzDNfgCCVGyX/JlamMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEhHeFItdUhONnZNTTEtQUlKVWJKZjhtVnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mOTI4NzEtMGQzYS00ZDg3LWFmZGMt
MDcxYjk5MWFmMDFmLzEvVEhHeFItdUhONnZNTTEtQUlKVWJKZjhtVnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mOTI4NzEtMGQzYS00ZDg3LWFmZGMtMDcxYjk5MWFmMDFm
LzEvVEhHeFItdUhONnZNTTEtQUlKVWJKZjhtVnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIM9oHGa
a1KHzZ2BR+xX8QIVkLQhqVhWzJiAYT72f3ZNkvZj6CBLFnIx2R8tvz9+1/FdyKCW
3Z4G7B3kTB9i1C6/puCiUlqTTPIvY+31PtzpT4cLY+trRUgQZG7xx5dYbMoirFPn
MOaFGrFN/RTGnbxMuumkC3DZJxcVoNkpFydRbGZEahw6UI6sga7L8IPgoq09fvWm
CkaG+XHOFveZtuOjdgfLXa92auqAPnALdAOlfmp8+yIwoRQ2WrzoK8dxLB1vq7hd
8MT0JbhfX+9Rti1asFuJUkRfQLGxpIN3xLFysOboyqZ3MQdotzpy5sVzqbrgmFlN
3YKwlq/cARBE1Q==
-----END CERTIFICATE-----
Generated at Thu Sep 10 23:12:13 2026 by rpki-client