Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
File: THHp8j7qymjHIcvkKAYQC3XhV3A.mft (raw, json)
Hash identifier: Hy9uhaFLxSat+C7UY055c2zchJNvN9xat5Au19FOVsM=
Subject key identifier: 5E:CB:F0:14:C2:E3:07:A2:39:80:FD:23:94:81:D9:B5:AF:30:7E:13
Authority key identifier: 4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
Certificate issuer: /CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Certificate serial: 019D284DB5182EFD725CC4504EA9975C985B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
Manifest number: 0744
Signing time: Thu 26 Mar 2026 04:01:14 +0000
Manifest this update: Thu 26 Mar 2026 04:01:14 +0000
Manifest next update: Fri 27 Mar 2026 04:01:14 +0000
Files and hashes: 1: THHp8j7qymjHIcvkKAYQC3XhV3A.crl (hash: VubLt8JXqxqPPW2m8d/s1wRB/496e++vR0w5oaRpxow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:b5:18:2e:fd:72:5c:c4:50:4e:a9:97:5c:98:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c71e9f23eeaca68c721cbe42806100b75e15770
Validity
Not Before: Mar 26 04:01:14 2026 GMT
Not After : Mar 27 04:01:14 2026 GMT
Subject: CN=5ecbf014c2e307a23980fd239481d9b5af307e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6f:e1:9b:f5:eb:6d:af:6e:dd:99:7a:8d:f7:
c2:62:6b:09:0a:5b:ff:c9:12:6b:8b:ae:82:45:25:
2d:5d:38:61:e2:18:10:9f:d7:32:17:53:bb:f6:1f:
21:c4:f6:0f:f4:71:10:fa:3b:e4:36:e1:00:b1:79:
eb:f8:d4:4b:57:f1:78:60:eb:e8:69:47:da:f1:34:
fe:b7:16:bf:8d:02:6b:08:00:f6:e0:16:17:0e:48:
9f:aa:72:ab:1e:15:4d:92:45:97:d4:57:1b:6f:02:
c3:76:bf:07:42:a5:e9:86:72:2d:2a:5b:f9:2c:7b:
59:58:df:30:c2:37:7a:f0:38:76:cc:7b:24:1d:30:
85:e3:3e:c6:00:90:2e:a5:76:86:85:97:b4:d6:5b:
5e:7a:d2:21:8d:3e:f3:7d:20:6f:86:1d:09:5a:ea:
55:34:7a:7f:86:8f:47:a0:76:9c:46:5d:e3:67:8d:
8a:3d:d2:2e:b5:c7:40:04:66:39:93:b7:74:f2:97:
d6:e4:6c:b6:bd:9e:92:f5:3c:fe:10:df:ed:54:9a:
68:40:d4:b3:ee:e4:9b:70:f4:c7:26:62:c6:a6:13:
c9:c9:c1:7d:12:0c:d6:e3:6f:c9:68:a6:a3:23:b4:
cb:97:1d:6b:fa:c3:2d:88:8a:6a:6d:0f:ff:97:9d:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CB:F0:14:C2:E3:07:A2:39:80:FD:23:94:81:D9:B5:AF:30:7E:13
X509v3 Authority Key Identifier:
keyid:4C:71:E9:F2:3E:EA:CA:68:C7:21:CB:E4:28:06:10:0B:75:E1:57:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THHp8j7qymjHIcvkKAYQC3XhV3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/94f662-506b-4ec9-a7aa-c9b7eb2cea57/1/THHp8j7qymjHIcvkKAYQC3XhV3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:81:7e:80:0e:d9:06:46:3e:ae:d4:79:a9:8e:12:c2:e0:4f:
d1:50:f7:ae:4a:34:09:9c:b3:87:54:3c:25:da:1c:f5:65:cc:
97:b3:76:ae:b7:63:e5:43:11:41:35:50:fa:5a:d8:13:de:29:
92:03:e8:6c:df:e7:55:73:83:8e:fd:d3:92:2e:79:8b:c5:8c:
10:65:ed:c0:fe:4d:b9:4d:8d:c1:94:06:24:e7:6a:64:76:ac:
40:18:6f:26:64:aa:c8:cc:fe:fd:d0:f5:55:da:37:35:f0:07:
c0:9d:fc:a0:57:c8:4a:1f:8d:69:e1:e4:61:f7:e1:d6:5e:03:
dc:6b:bb:ee:4b:ff:ea:c4:58:a1:0b:18:57:9f:d0:62:4e:89:
d9:1d:79:e2:c4:d6:5a:2f:97:aa:7d:1b:56:8a:aa:ae:6c:50:
5f:85:1f:2f:ff:1b:d1:8d:85:0d:2b:63:1b:ed:84:86:a0:fd:
50:75:c6:55:33:c0:a1:fd:e8:e2:58:95:05:59:43:d6:b0:fc:
99:72:e9:74:a5:d5:e5:f6:d4:70:64:3e:36:68:5f:9c:c3:6a:
3d:72:a5:f2:31:d3:01:41:06:6e:d0:a0:f1:5d:30:75:5c:a3:
17:85:3a:7a:b7:8c:db:55:9b:c1:fb:fd:ce:8a:16:42:9e:b3:
0a:64:1c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:28:26 2026 by rpki-client