Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: BEgu0k7k6NqE8EWShwlD5OncfyzIBGydyidjpV+Ohm0=
Subject key identifier: 25:19:D6:3C:0D:BD:1F:86:DE:0D:76:34:8E:D8:A6:2D:EB:6E:29:01
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 01A1592F7E5D840725B06E8707835191264D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 1AB3
Signing time: Tue 20 Oct 2026 12:00:47 +0000
Manifest this update: Tue 20 Oct 2026 12:00:47 +0000
Manifest next update: Wed 21 Oct 2026 12:00:47 +0000
Files and hashes: 1: 1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa (hash: koOl6xvsjw0LPNpf6MfybPGCkgptrhSYthcGhLIG8iM=)
2: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: pDxEAOcuwJyuV/Ht99q+tvhYTG3xfiXEqOu4ZWGWqEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:2f:7e:5d:84:07:25:b0:6e:87:07:83:51:91:26:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Oct 20 12:00:47 2026 GMT
Not After : Oct 21 12:00:47 2026 GMT
Subject: CN=2519d63c0dbd1f86de0d76348ed8a62deb6e2901
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:df:02:ed:1b:f2:82:9c:47:56:4a:50:03:
d6:0e:f4:ab:d0:69:2f:98:6c:86:03:98:b4:13:6d:
43:19:6e:d1:c2:3c:04:c8:32:f5:68:fa:56:17:57:
69:3e:45:4a:c4:47:be:67:05:ce:91:f7:13:6e:71:
d2:0c:cc:c2:d7:a4:d0:1a:9a:13:20:ee:08:46:76:
98:1f:7e:40:5a:86:af:fd:6d:7d:48:81:fb:0f:ac:
ca:71:b2:e2:4b:e3:f3:45:e1:f9:e0:fb:7f:94:23:
c4:89:4f:fa:0d:d2:2c:15:d4:65:87:69:1e:0a:04:
da:94:b6:65:b3:3a:38:32:59:16:3e:1f:c6:4e:ef:
5c:02:fc:f3:18:0d:9e:b9:9d:73:c9:ec:0e:e1:c6:
c3:c3:95:ac:47:70:4a:75:4f:1e:4f:3b:73:5f:3a:
ae:ac:9d:70:23:f6:df:c8:c9:f9:dc:60:71:44:23:
be:80:07:53:4e:d4:1e:d1:8b:64:21:cf:fc:03:5e:
b5:2f:d7:3c:38:02:77:43:d0:d6:30:da:65:49:80:
3e:0d:61:16:ee:d8:c9:3e:10:fd:7b:39:af:57:99:
12:8d:ef:3d:49:fc:71:52:24:c6:a9:a7:8c:44:53:
a7:c0:a2:a6:74:ab:5a:8e:54:f6:5b:c0:c0:6a:f2:
fd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:19:D6:3C:0D:BD:1F:86:DE:0D:76:34:8E:D8:A6:2D:EB:6E:29:01
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:66:51:c9:4c:4e:28:ec:dd:8c:d9:22:35:3c:50:56:90:a4:
e8:48:19:37:20:b3:5a:66:2e:ae:be:8d:01:c5:10:a9:ef:73:
6a:b6:22:c0:d6:4a:c1:31:f9:a9:64:e1:62:a3:70:ef:36:c2:
85:6d:fa:c9:5d:5d:aa:7c:6d:0f:69:c6:b2:f0:d2:3b:3b:bd:
f5:8e:e7:75:39:20:b7:2b:58:68:81:83:3d:3a:55:bd:3e:2d:
d5:ca:bd:c6:a8:35:e0:85:e1:1f:0c:7b:eb:cb:f7:f8:39:14:
e9:6b:9f:1e:5e:a0:f3:3d:36:ed:7d:b7:0b:71:64:ac:bb:fc:
cb:55:92:f3:1f:0c:5f:b0:4e:7f:9e:a0:64:bf:78:9d:67:42:
50:9a:ab:f1:05:bb:35:5f:b1:a6:35:6f:fb:bf:29:08:61:9d:
ac:98:59:86:e0:02:3a:6c:7b:2a:5d:45:1d:63:f0:a3:4a:fa:
21:8a:32:ee:75:30:a6:e0:f6:a1:bc:e9:2e:05:a5:1a:bd:49:
99:35:86:4a:fb:87:a8:45:f0:67:85:d3:d5:b1:96:ea:81:ce:
7e:21:d3:ee:a5:f5:d9:e6:16:ee:25:02:47:0f:ed:fc:74:f2:
42:f9:bd:da:1e:a2:f2:a9:14:76:56:f0:f6:ff:b4:6d:f9:2f:
a7:9b:aa:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:46:03 2026 by rpki-client