Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: 6CZj02VYVGJslyDt+r6fcqBlL8Y0qJ+Jpx9VVCKYT+A=
Subject key identifier: 8E:22:C9:4E:FB:7A:84:02:0F:97:3B:A2:09:E2:18:61:A2:6E:36:D4
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 019D2960FEBA78D4744ED4AAB8831560D4EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 09:01:55 +0000
Manifest this update: Thu 26 Mar 2026 09:01:55 +0000
Manifest next update: Fri 27 Mar 2026 09:01:55 +0000
Files and hashes: 1: 1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa (hash: koOl6xvsjw0LPNpf6MfybPGCkgptrhSYthcGhLIG8iM=)
2: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: VTqcIBSX2JM7vTcfxlPzye8KhUnUgLHyVpAlG0iLXkQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:fe:ba:78:d4:74:4e:d4:aa:b8:83:15:60:d4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Mar 26 09:01:55 2026 GMT
Not After : Mar 27 09:01:55 2026 GMT
Subject: CN=8e22c94efb7a84020f973ba209e21861a26e36d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:c2:f4:d8:c8:18:bc:31:d7:6f:4a:65:52:
17:18:de:b9:fe:39:d0:9b:b8:5f:01:a7:e2:90:eb:
84:6e:e8:da:c3:62:85:e1:0b:fa:3f:db:ef:e4:dc:
0b:3c:47:31:47:91:6d:7e:75:81:79:69:16:a2:1b:
8b:0b:d4:f6:3a:44:5b:b4:d5:b1:7e:15:96:35:95:
e1:f0:75:1c:0f:08:65:66:1b:c2:e4:e5:c0:c5:8e:
65:40:f2:2f:83:80:ab:69:c5:39:0a:23:e2:63:86:
55:0d:a1:86:17:75:7b:f6:7a:6d:13:8b:87:98:a2:
f4:88:ef:5d:85:db:a9:92:ce:03:50:ca:0f:c9:04:
d4:99:53:89:1d:af:8b:de:05:86:5a:66:46:1a:ea:
a8:f0:7a:54:52:b8:2d:52:04:a0:58:83:68:aa:35:
fb:4b:e2:bb:01:2c:68:20:b5:4c:52:d5:84:a4:de:
7b:70:8a:6f:90:45:37:ca:a3:6d:2e:da:b7:43:62:
3e:a5:5a:aa:96:ae:23:0e:ce:90:d0:2c:d0:2f:3c:
8f:0b:4e:6c:21:ac:ba:0c:bd:d1:1c:3b:18:6f:a0:
53:39:e5:00:c5:d4:6d:2a:0e:16:8a:cd:bb:77:41:
74:b9:2f:e7:81:62:7c:9a:83:87:d5:70:5a:3c:da:
e8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:22:C9:4E:FB:7A:84:02:0F:97:3B:A2:09:E2:18:61:A2:6E:36:D4
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:03:7d:83:0c:d6:68:32:ed:54:e9:08:04:87:19:20:7f:02:
07:4f:ae:f8:98:67:e1:13:b0:f5:f1:e7:9d:79:f4:03:e0:ff:
45:03:36:57:80:40:bc:bf:8c:7c:3d:18:fb:98:a4:9e:76:ba:
6c:a5:6d:0b:87:bb:50:e3:00:5d:b9:27:96:01:d3:74:45:ef:
79:10:93:20:dc:0b:f1:0b:ff:7e:37:88:18:45:4f:6b:70:23:
4f:6b:41:c2:e6:a2:53:ae:6f:fe:9a:fe:e2:3f:47:d1:13:c5:
00:b4:ff:10:a5:c1:2e:0f:0b:94:62:64:4a:1a:fa:ce:5e:3b:
3d:93:21:bb:55:25:56:0c:15:a0:8c:1d:1d:bf:ee:4f:68:3a:
13:18:50:25:46:10:ea:f0:8a:b9:3c:58:07:52:3b:b0:9c:bf:
0f:44:55:3b:c9:b1:7d:93:18:31:11:89:1c:cc:0a:e6:2d:7a:
d0:e1:81:06:36:13:dd:45:24:30:64:50:24:68:64:31:f9:81:
21:76:51:c2:93:27:05:3d:e8:d7:11:b6:f5:05:77:d7:0a:52:
18:a9:6b:11:df:21:1e:81:79:5c:69:a3:c1:53:d2:4b:ce:ed:
d6:98:89:1a:e1:21:fc:e7:37:e9:8a:5d:c1:f2:52:16:5f:f4:
f2:b7:a7:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pYP66eNR0TtSquIMVYNTqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Nzg0MTAyMjQ5MDQ0OTRlOWMwZjdkMzU2NTBhMjYwZTVm
YjYxOTMwHhcNMjYwMzI2MDkwMTU1WhcNMjYwMzI3MDkwMTU1WjAzMTEwLwYDVQQD
Eyg4ZTIyYzk0ZWZiN2E4NDAyMGY5NzNiYTIwOWUyMTg2MWEyNmUzNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBXC9NjIGLwx129KZVIXGN65/jnQ
m7hfAafikOuEbujaw2KF4Qv6P9vv5NwLPEcxR5FtfnWBeWkWohuLC9T2OkRbtNWx
fhWWNZXh8HUcDwhlZhvC5OXAxY5lQPIvg4CracU5CiPiY4ZVDaGGF3V79nptE4uH
mKL0iO9dhdupks4DUMoPyQTUmVOJHa+L3gWGWmZGGuqo8HpUUrgtUgSgWINoqjX7
S+K7ASxoILVMUtWEpN57cIpvkEU3yqNtLtq3Q2I+pVqqlq4jDs6Q0CzQLzyPC05s
Iay6DL3RHDsYb6BTOeUAxdRtKg4Wis27d0F0uS/ngWJ8moOH1XBaPNroGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4iyU77eoQCD5c7ogniGGGibjbUMB8GA1UdIwQY
MBaAFLR4QQIkkESU6cD301ZQomDl+2GTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUt
ZGU3ZDNiYmZlZTg4LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUtZGU3ZDNiYmZlZTg4
LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwN9gwzW
aDLtVOkIBIcZIH8CB0+u+Jhn4ROw9fHnnXn0A+D/RQM2V4BAvL+MfD0Y+5iknna6
bKVtC4e7UOMAXbknlgHTdEXveRCTINwL8Qv/fjeIGEVPa3AjT2tBwuaiU65v/pr+
4j9H0RPFALT/EKXBLg8LlGJkShr6zl47PZMhu1UlVgwVoIwdHb/uT2g6ExhQJUYQ
6vCKuTxYB1I7sJy/D0RVO8mxfZMYMRGJHMwK5i160OGBBjYT3UUkMGRQJGhkMfmB
IXZRwpMnBT3o1xG29QV31wpSGKlrEd8hHoF5XGmjwVPSS87t1piJGuEh/Oc36Ypd
wfJSFl/08renYg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:53:18 2026 by rpki-client