Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: UerBN6e9X4cbSkVWSQeLCsZ3EsU9YioBI3Rxkj/fWBU=
Subject key identifier: F3:F2:79:76:F9:45:A5:F6:15:44:87:BB:66:24:70:99:5A:5E:D3:32
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 01A0E174D29916557A14B8517C7F6C37064E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 06:02:04 +0000
Manifest this update: Sun 27 Sep 2026 06:02:04 +0000
Manifest next update: Mon 28 Sep 2026 06:02:04 +0000
Files and hashes: 1: 1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa (hash: koOl6xvsjw0LPNpf6MfybPGCkgptrhSYthcGhLIG8iM=)
2: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: dkCRuvK9MhPNH33kx+Bm9Buc7u3v36YZgOd6XLo5VeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:d2:99:16:55:7a:14:b8:51:7c:7f:6c:37:06:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Sep 27 06:02:04 2026 GMT
Not After : Sep 28 06:02:04 2026 GMT
Subject: CN=f3f27976f945a5f6154487bb662470995a5ed332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d8:32:80:52:cf:eb:5d:11:1c:cc:83:9d:24:
fe:7d:7e:6a:0b:14:95:31:cc:7f:bf:0b:ae:de:a1:
66:97:d5:d0:d5:81:95:00:90:38:48:b3:c2:66:8d:
b4:c4:3b:d1:c6:6b:82:c5:b7:45:a2:11:38:ac:48:
8f:44:cb:2d:3b:51:cb:34:fe:ae:30:c2:36:28:71:
be:40:d0:21:05:58:25:cf:f9:e0:7b:9c:8c:5b:95:
1b:23:ee:bd:65:b8:27:60:d7:6d:5a:9c:0f:90:c2:
4c:62:98:45:76:ef:41:55:c2:1e:15:42:a3:c3:e5:
26:4a:b2:09:d7:36:b4:cc:df:78:27:ad:40:49:13:
41:8d:53:e2:59:14:14:c9:ce:45:9e:1e:a4:06:ce:
9a:2e:c9:f7:d3:31:2a:26:e7:13:4e:8e:4d:5b:53:
fb:df:a1:a8:f8:4f:a9:58:b1:70:f2:4b:a4:c8:96:
49:ef:59:c7:fc:2a:91:16:e1:36:47:c3:f3:fd:6a:
5e:8a:49:00:ce:2b:e7:56:1b:cc:fc:5e:67:0f:8a:
cf:3d:62:0d:aa:95:5c:60:61:bd:85:1d:98:62:07:
1c:67:a1:c3:51:95:be:e2:63:e3:af:3a:56:5e:78:
fa:6f:63:2a:be:10:92:df:f3:da:ec:a4:75:33:1d:
58:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F2:79:76:F9:45:A5:F6:15:44:87:BB:66:24:70:99:5A:5E:D3:32
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:03:2d:da:c6:a2:82:08:22:27:28:85:f6:8e:bb:77:45:b6:
51:96:9f:9e:01:fd:e5:3f:52:98:3b:cd:db:fb:86:b4:9c:af:
c6:03:75:0b:97:3c:56:00:ea:d8:99:35:8b:3c:34:14:20:0f:
24:d8:61:5e:47:44:01:2d:d4:8d:62:d0:93:7a:8d:d3:63:ff:
7b:61:b6:2e:29:ce:46:4c:7b:3d:fd:6f:2c:3b:8f:b7:e6:09:
dc:dc:79:df:99:1b:fe:5e:f3:a7:18:a0:e0:b2:7e:b5:20:b9:
1b:79:52:6b:2c:4d:5b:0c:57:87:78:01:73:3c:b2:9f:79:e7:
45:0a:e5:f3:96:26:eb:82:68:12:58:f5:82:7e:36:5d:a5:38:
09:ec:9c:55:3f:d0:02:6a:89:ba:4a:2f:fd:de:e5:0d:92:b3:
b6:09:b3:3d:f2:5a:3e:76:51:64:b2:76:94:69:53:08:a6:cd:
89:1c:ba:eb:ef:78:68:03:29:cc:a7:fb:7d:fe:82:9c:83:3b:
f1:a2:d3:8b:6e:47:82:b6:43:78:08:1e:96:cb:45:95:b8:fc:
5b:9f:c0:33:43:51:d5:ce:f8:94:29:b7:8c:4c:fc:0c:8a:fd:
24:7b:10:ee:d2:87:59:de:83:1b:0f:67:84:e0:7b:6d:c7:e4:
11:70:04:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:11 2026 by rpki-client