Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
File: tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json)
Hash identifier: X5HSOAK7HZ/nvbr1/MXGA7sdV/W/CCy3dn88mKNJUWM=
Subject key identifier: 3F:DF:E4:A4:EA:55:58:3B:3E:D9:07:8F:BF:72:FD:C8:58:E9:56:00
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial: 019F9580D9DCC2834C62214DE9643F194985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
Manifest number: 16F0
Signing time: Fri 24 Jul 2026 19:01:17 +0000
Manifest this update: Fri 24 Jul 2026 19:01:17 +0000
Manifest next update: Sat 25 Jul 2026 19:01:17 +0000
Files and hashes: 1: sqJAuTtHjJofashtrpYrfv2Lqkc.roa (hash: tKvEHWVGuDg8Tn8ekoHOsKqzA2uvyPQd/TrrxC4QRzA=)
2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: RxlI+ayOqa27OcYQgA+X0Cvilglc0QvD1BmbwaaH2LI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:d9:dc:c2:83:4c:62:21:4d:e9:64:3f:19:49:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Validity
Not Before: Jul 24 19:01:17 2026 GMT
Not After : Jul 25 19:01:17 2026 GMT
Subject: CN=3fdfe4a4ea55583b3ed9078fbf72fdc858e95600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:bd:2c:4e:66:9d:27:b2:30:9f:d8:0f:e0:53:
3f:e3:50:9c:28:a8:e9:95:7e:8b:78:97:27:2b:0f:
2e:40:f8:26:b6:c2:b7:e2:cd:0f:bb:f4:70:58:8d:
65:ea:21:3f:fd:70:fb:34:c1:7e:6e:3a:3b:48:fa:
7a:87:51:55:46:27:e4:57:51:08:45:28:55:c1:26:
af:e1:e3:ea:ff:cb:2b:9f:03:26:a6:e5:69:49:f1:
50:06:ad:70:db:ea:0f:6d:c6:89:60:fe:bb:7d:0e:
66:4c:84:cc:7a:a5:6d:cc:5d:4a:2e:96:73:f6:ff:
c8:7b:4b:89:f3:84:f9:c5:77:0c:59:a3:8f:74:a6:
c0:61:23:c3:74:5b:75:31:ec:ae:23:5e:d1:11:80:
8f:11:1e:40:3b:76:06:86:74:3c:37:13:d1:0b:4a:
54:36:b0:27:7d:65:97:8c:5b:b1:73:b1:37:30:3c:
78:fa:70:56:1a:14:70:07:54:1a:46:3a:80:f6:d4:
f8:41:55:c1:8a:b5:37:6e:72:c7:37:64:3a:a0:b0:
9f:00:2d:74:24:0a:ed:bd:96:78:24:6f:cf:c1:90:
47:1f:bd:ed:4f:ab:65:25:e5:0f:76:bb:68:46:7c:
d3:87:ce:6b:9e:66:d2:cd:93:32:c6:d4:c9:96:08:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DF:E4:A4:EA:55:58:3B:3E:D9:07:8F:BF:72:FD:C8:58:E9:56:00
X509v3 Authority Key Identifier:
keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f3:56:5e:94:95:e9:74:37:81:d2:52:4b:bd:b5:d6:c1:39:
f8:91:1f:92:94:b7:5f:13:63:1c:73:17:d2:32:89:74:70:3c:
98:b8:cf:5d:2c:1f:67:85:7f:d2:be:b2:23:bd:25:d2:17:c2:
8d:f4:fc:17:c3:59:f1:85:dc:10:ee:d5:89:37:53:6e:64:ea:
c5:59:1f:6b:e0:a3:a8:3c:f5:69:3f:8c:34:6c:1f:e5:ca:27:
cd:d3:31:3f:bd:8d:a9:a0:bf:48:58:6c:ce:a4:aa:05:97:4f:
fb:3f:a8:c7:84:79:4f:f6:fc:2d:ed:62:8b:15:eb:c7:c6:ab:
dd:25:a5:b5:42:5c:44:d0:c4:32:4b:51:6b:1f:01:05:73:31:
52:fd:8f:ae:fb:38:8a:81:cb:c2:d3:08:a7:d8:8b:2c:db:d6:
7c:93:88:e6:f9:7e:6e:fb:25:bc:b2:55:5f:44:ae:24:b0:a4:
09:a4:a6:1f:38:2d:6c:d8:42:a7:bb:74:2a:af:7a:25:b2:d2:
b1:01:c6:24:b0:94:bd:cd:55:77:5d:6e:8b:89:7c:fd:63:02:
67:5a:7b:2a:82:6b:7a:e3:bc:49:ea:06:d1:5f:b7:18:69:12:
b3:55:99:94:2b:96:34:e4:61:b0:3d:bc:19:54:a1:d0:3d:68:
be:46:fb:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:23 2026 by rpki-client