Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: 0S+RNMhAhNrw1mWjUEBnqmNvOpkxpbmAdwCzoyeB1is=
Subject key identifier: 9F:B3:37:E8:73:4E:B8:97:FD:04:B4:E3:55:C6:A4:9C:4A:9E:3C:E8
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 019D38D2A6552A30F896F3CDF0CB275143AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:22 +0000
Manifest this update: Sun 29 Mar 2026 09:00:22 +0000
Manifest next update: Mon 30 Mar 2026 09:00:22 +0000
Files and hashes: 1: 1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa (hash: koOl6xvsjw0LPNpf6MfybPGCkgptrhSYthcGhLIG8iM=)
2: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: flsAvkM1ApmY7jXPqoy/FvcArnonp+32vclplX0jaPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:a6:55:2a:30:f8:96:f3:cd:f0:cb:27:51:43:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Mar 29 09:00:22 2026 GMT
Not After : Mar 30 09:00:22 2026 GMT
Subject: CN=9fb337e8734eb897fd04b4e355c6a49c4a9e3ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:88:10:e5:62:67:7d:05:b9:9a:25:19:53:
c1:7e:e8:ac:df:b3:43:e1:e1:d2:49:71:16:6d:32:
71:4b:cd:3c:09:c6:d9:86:90:48:0e:8a:4b:56:c3:
97:94:c7:27:6b:ac:93:b7:5e:05:a0:01:8b:10:9f:
67:99:c7:76:c4:48:38:71:c8:35:8f:78:1e:69:5d:
a0:a4:ec:f8:51:00:63:94:03:f9:f6:37:6b:b1:6e:
18:e9:74:ab:73:d9:b0:1e:a9:69:df:b3:9c:3f:ee:
9b:24:33:e8:0b:91:5d:e5:5f:ba:11:95:e8:c7:8f:
4a:21:6c:77:11:85:09:f9:2f:07:07:15:53:b0:21:
a9:aa:4a:86:77:4c:11:f5:bf:8d:c1:62:20:70:36:
ba:69:fe:47:f5:fe:0c:66:36:7b:61:32:2d:7e:e5:
2d:06:06:6d:f6:c2:24:05:1a:16:4f:3d:be:cb:c4:
ab:c0:7b:c8:2c:5e:21:18:1c:0d:fd:79:fb:ec:ff:
4a:b7:24:90:de:2d:05:75:68:8d:85:4e:9a:cd:5e:
5e:ff:b1:1f:b2:ce:0d:cf:9c:21:34:9f:6b:15:72:
e1:73:a2:26:2e:cd:02:da:b5:89:f8:3a:99:42:57:
7d:84:98:0a:c0:1b:bb:20:e2:24:14:d8:08:fd:81:
8c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B3:37:E8:73:4E:B8:97:FD:04:B4:E3:55:C6:A4:9C:4A:9E:3C:E8
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d6:a3:25:10:17:c7:48:c2:72:86:c4:be:9e:85:db:04:14:
7d:c9:69:89:9b:73:06:93:1d:29:d3:49:07:e4:a2:63:fb:15:
5a:73:00:cd:8d:ee:98:59:92:2f:ee:a0:26:e6:9f:43:52:90:
f2:c8:0b:6c:e6:e5:e6:63:b7:49:fe:f2:cb:7a:40:f0:ed:27:
71:28:4d:f4:12:7e:d0:f2:04:65:88:81:c2:05:90:16:84:f5:
cd:61:7b:73:6e:e0:d7:1f:46:df:8b:66:bf:ab:ab:06:ec:7d:
89:4f:05:83:b7:0d:45:ab:32:36:d8:f7:9d:4b:df:ed:30:48:
08:67:16:fc:f9:84:1a:c2:93:41:a3:0c:b4:cb:84:5f:00:88:
02:f8:04:82:96:43:8f:41:d8:e5:e4:a5:c0:16:1f:9e:f6:9f:
b1:e5:31:89:d7:72:5e:31:bc:4e:9a:e9:fe:b8:8c:47:ca:bb:
31:d7:6e:d6:73:f3:7f:aa:13:19:1f:56:cd:48:4c:5d:48:d8:
9a:11:da:4d:e4:b9:91:17:57:66:12:a2:b1:d3:48:ed:b8:63:
8b:56:22:54:2f:fa:24:36:53:f7:b9:da:e8:c8:d5:28:1e:d8:
98:60:23:29:e8:c0:d9:00:62:13:51:cf:39:35:6c:d1:2c:d9:
05:fa:4d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:12 2026 by rpki-client