Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
File: tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft (raw, json)
Hash identifier: tA7WbwraoSvuapisA9LR2lKrkO80xSxrLMJZ3PFCk/U=
Subject key identifier: C0:CE:9A:9B:61:BA:9C:EF:FC:C0:E1:55:2B:63:A3:35:2C:D0:44:62
Authority key identifier: B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
Certificate issuer: /CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Certificate serial: 019D27A8A6A0F9CFC79E0E428C4B5EC2FE5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
Manifest number: 15AE
Signing time: Thu 26 Mar 2026 01:00:57 +0000
Manifest this update: Thu 26 Mar 2026 01:00:57 +0000
Manifest next update: Fri 27 Mar 2026 01:00:57 +0000
Files and hashes: 1: sqJAuTtHjJofashtrpYrfv2Lqkc.roa (hash: tKvEHWVGuDg8Tn8ekoHOsKqzA2uvyPQd/TrrxC4QRzA=)
2: tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl (hash: Y3g3FTJ9VjDB9y+yTxqsOQZ+g1nXk+wcJ7gpBFKBvRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a6:a0:f9:cf:c7:9e:0e:42:8c:4b:5e:c2:fe:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4714bfd982ed297e5c73ece74d222e5274c1fb5
Validity
Not Before: Mar 26 01:00:57 2026 GMT
Not After : Mar 27 01:00:57 2026 GMT
Subject: CN=c0ce9a9b61ba9ceffcc0e1552b63a3352cd04462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:de:c6:42:28:a1:2f:d9:b3:d5:4e:9f:c4:f9:
f5:d9:95:79:35:da:7d:b9:b4:72:f9:8e:22:92:70:
7b:98:85:9c:62:91:36:71:e3:21:74:70:23:b3:d9:
df:4a:60:c6:b0:c6:a2:21:74:3c:41:9b:2f:2a:91:
e9:19:45:45:91:3e:39:18:bf:64:44:12:cf:86:7f:
37:35:0e:5d:24:dd:c9:24:dd:84:ac:5b:16:a7:90:
31:23:81:a9:6b:8f:eb:6c:7c:46:67:b4:ff:57:16:
bf:fb:91:cc:05:d6:97:71:a0:40:4c:b7:95:fb:d9:
7d:37:5d:7a:a4:de:c2:b9:ce:36:17:aa:76:47:f9:
62:88:2a:a6:f5:77:f8:2f:58:28:1b:b0:54:04:06:
4b:a7:ac:e4:a3:51:1e:83:22:e4:49:88:43:42:f3:
cc:80:3e:29:b0:e8:1a:7d:2f:1f:a9:0e:c1:77:43:
2e:53:08:6b:1d:6d:83:25:57:5b:87:ca:52:b1:ee:
78:e6:c3:d7:bc:02:d9:6d:e9:8b:60:ef:47:83:54:
6b:1e:a3:e5:20:9a:18:33:cf:d7:50:fa:7d:7e:b9:
00:31:5e:07:5d:a9:c8:9c:a2:df:2d:b8:a8:a1:4e:
46:b1:67:43:36:fe:f9:92:3c:f2:13:59:82:03:92:
0f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CE:9A:9B:61:BA:9C:EF:FC:C0:E1:55:2B:63:A3:35:2C:D0:44:62
X509v3 Authority Key Identifier:
keyid:B4:71:4B:FD:98:2E:D2:97:E5:C7:3E:CE:74:D2:22:E5:27:4C:1F:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHFL_Zgu0pflxz7OdNIi5SdMH7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/cf7718-274d-412b-b755-62ea1e7e8fc6/1/tHFL_Zgu0pflxz7OdNIi5SdMH7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:bb:96:3d:1b:e7:7a:e3:4e:c2:04:cb:d7:64:55:b1:e5:d2:
ad:b5:6a:cf:b1:d6:55:7e:5f:cd:5e:18:84:47:5b:b6:b3:ff:
fd:c7:60:5f:67:17:84:3c:98:a3:f3:70:b9:77:d2:56:8a:34:
c1:14:4e:bd:9c:f3:ee:17:9f:2f:d2:85:44:f2:44:2e:52:bd:
c7:31:16:1d:4b:f1:bf:4e:36:2c:fe:b0:66:a0:8f:ec:78:dd:
3e:34:6a:a0:4e:cb:e2:b4:6b:30:9d:44:f8:79:ab:08:90:cc:
7a:39:86:bc:42:ac:5f:10:be:95:4e:e0:33:d0:64:35:cf:22:
1b:84:f3:c1:ac:33:c7:da:a6:7f:6c:44:0c:dc:2e:49:af:52:
1e:d9:7f:09:76:36:50:50:82:ad:71:70:5b:67:07:a7:37:47:
d2:09:7e:7a:1f:79:fe:d4:09:17:ef:23:84:bf:37:a0:69:53:
79:b0:5f:78:62:e6:a4:74:42:16:49:77:5d:f7:65:d0:4e:1f:
ce:54:d1:1a:d3:d9:a5:7c:0f:ed:5f:24:68:49:dc:90:f4:20:
c1:49:80:71:fd:b7:d0:fe:7c:51:a8:b9:24:49:d3:0f:0f:71:
f6:cd:0e:02:28:e7:4c:9b:44:a3:e0:76:57:06:bc:ad:1f:76:
0b:f4:dd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:55:25 2026 by rpki-client