Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: g+wfeFI8rK24pRyLcQvmNP2sfCa8K6b2hM4LMsJSTOc=
Subject key identifier: 8B:40:24:EE:85:4F:E2:58:1E:C5:ED:72:2B:25:1F:F9:16:14:14:DA
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 019F19B10A6146551BEBA3F4697F179E0140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 18:01:00 +0000
Manifest this update: Tue 30 Jun 2026 18:01:00 +0000
Manifest next update: Wed 01 Jul 2026 18:01:00 +0000
Files and hashes: 1: 1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa (hash: koOl6xvsjw0LPNpf6MfybPGCkgptrhSYthcGhLIG8iM=)
2: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: P5slDrzboE8CxBGiHnoDT4i3jwBrRoGleaX4nuOmHd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:b1:0a:61:46:55:1b:eb:a3:f4:69:7f:17:9e:01:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Jun 30 18:01:00 2026 GMT
Not After : Jul 1 18:01:00 2026 GMT
Subject: CN=8b4024ee854fe2581ec5ed722b251ff9161414da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b6:91:37:e3:9d:bc:2b:ce:07:c4:09:06:e4:
c2:4d:fa:fa:7a:98:db:82:a1:ab:12:dc:77:cb:19:
50:47:87:d9:75:a6:b6:18:43:c3:b3:c8:7a:8f:40:
bd:13:62:85:6c:5e:15:45:a0:86:2e:ea:05:42:3f:
13:d6:88:d5:94:b8:e8:ed:60:f1:4d:4f:0a:34:0c:
a7:f7:59:dd:92:b9:3c:d1:e6:1c:03:97:33:2e:5a:
0b:10:4e:7e:ff:6b:41:72:f4:9d:24:01:35:ea:d6:
71:a5:e3:a3:89:a0:f9:cc:74:c1:07:d7:ef:84:76:
bd:e8:bc:6b:53:9b:81:1d:63:4a:5c:a8:a3:cd:8c:
09:c0:51:1e:8e:16:7a:f8:f4:74:69:7b:3e:41:44:
d2:ed:76:fe:21:76:58:60:84:39:ef:ef:8b:a1:63:
41:1e:cd:21:77:9a:9f:c8:a6:ac:68:79:14:e0:70:
a8:f4:ce:7b:6f:ce:ec:19:fa:f5:79:83:02:58:f5:
1a:7e:1e:6c:30:8a:9b:49:53:1d:2b:6f:e3:17:17:
30:59:b5:bb:76:c9:e1:ad:72:bc:be:54:8c:dd:5c:
7a:80:f9:25:24:0d:e9:a8:6b:b8:1c:8e:c6:ea:68:
9c:80:cd:dc:54:3b:5e:e2:2f:3c:93:5f:42:12:9a:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:40:24:EE:85:4F:E2:58:1E:C5:ED:72:2B:25:1F:F9:16:14:14:DA
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:85:d4:b6:8c:4e:18:68:9c:46:b3:d1:d5:e9:bf:f8:9c:b1:
0e:0f:bc:a1:2e:0d:3d:ba:e1:61:01:f2:fb:08:13:be:48:86:
fb:aa:04:c8:70:ff:17:7a:15:85:2a:2f:de:81:bb:f2:16:2a:
1d:a6:20:65:f7:99:02:c8:34:b2:94:1f:28:13:6c:df:fa:ed:
5f:a8:47:a2:63:9f:67:64:bb:a9:b2:11:94:60:69:77:42:93:
bc:b0:1f:64:2f:07:3b:bb:b2:60:bb:3a:72:48:37:17:fc:3e:
99:79:5b:6c:95:7e:ba:26:c4:46:58:19:d5:ae:f7:3a:62:39:
91:c6:9f:0f:8c:9d:d9:d2:15:2f:e1:91:29:3a:81:59:b9:20:
e3:dd:93:6e:1a:eb:c3:75:1e:47:ec:49:0c:ca:ac:67:db:4e:
38:0d:5d:e3:ef:0d:b8:cb:17:cd:90:05:0b:40:e6:20:57:ec:
9f:3d:35:2f:81:7b:9c:cd:ef:91:98:3b:26:44:40:17:26:83:
0e:76:6e:f7:ef:72:bb:b8:91:be:78:1e:b4:2c:7c:c4:84:d9:
bd:bd:48:25:86:40:0a:ef:2f:7a:05:77:55:25:9e:62:7a:31:
b5:97:df:ad:05:84:b8:62:8e:a0:50:a2:9d:61:52:85:68:2d:
f1:47:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:39:59 2026 by rpki-client