Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: /PpAevk+mf7G+qG0qwG629wO5evtVC03n3Af39l8M+U=
Subject key identifier: 67:29:E5:3C:B3:66:E1:20:3B:EE:68:59:8C:8F:DF:CB:47:91:1E:E6
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 019F935B7FCAACD2F2D1AD1B7FAC2337AD1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 09:01:14 +0000
Manifest this update: Fri 24 Jul 2026 09:01:14 +0000
Manifest next update: Sat 25 Jul 2026 09:01:14 +0000
Files and hashes: 1: 1-ceGIaRHJAaXBLPJRrOgDXm8QYk.roa (hash: koOl6xvsjw0LPNpf6MfybPGCkgptrhSYthcGhLIG8iM=)
2: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: 3si1JVKBdSU8tTMyLbNSjJsqmKXOO639wDyJetMEcLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:7f:ca:ac:d2:f2:d1:ad:1b:7f:ac:23:37:ad:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Jul 24 09:01:14 2026 GMT
Not After : Jul 25 09:01:14 2026 GMT
Subject: CN=6729e53cb366e1203bee68598c8fdfcb47911ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:cf:37:b1:67:99:da:b4:01:8c:86:78:a0:
c5:83:12:01:8c:f7:72:06:96:ec:05:30:c3:5b:60:
b6:2c:d9:77:fc:b0:c7:68:b7:01:1a:2d:75:1f:33:
45:7d:37:54:66:99:a4:3a:95:ca:c4:90:64:18:f8:
81:22:63:6b:7a:15:c9:13:cb:e2:d6:fe:20:5e:21:
3e:99:b7:44:a5:19:f6:f8:ad:92:42:2a:e9:e3:dc:
3a:88:fc:3f:55:e1:cb:ef:8f:a0:c3:dc:9a:10:b0:
44:fa:0e:e6:36:14:d4:13:52:8d:cc:0e:54:5a:b9:
db:b4:8f:7a:3b:23:0e:db:98:08:ec:f8:23:fd:c3:
29:7d:09:82:06:42:de:21:0e:62:2f:d5:2b:82:b2:
6b:d9:08:89:c5:03:55:16:92:2d:85:41:37:ae:fa:
66:59:62:21:3e:58:82:94:94:4b:93:8f:e4:96:26:
3a:af:99:b0:f4:97:62:1b:9a:65:de:43:99:f6:c6:
22:e7:3e:80:ae:fe:c1:94:42:96:35:b7:69:00:47:
f1:e5:ca:a0:2e:7b:c9:14:ea:3f:13:0f:c8:89:86:
93:60:79:78:90:01:b0:45:04:17:94:7f:c1:48:63:
f1:9e:83:e9:ab:e3:14:01:0d:32:df:f3:84:08:67:
29:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:29:E5:3C:B3:66:E1:20:3B:EE:68:59:8C:8F:DF:CB:47:91:1E:E6
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ae:da:ba:ab:6a:fe:41:52:b7:e8:ae:59:3d:25:3b:68:d6:
8a:15:b0:6d:bf:dd:6f:09:04:b5:d5:24:10:ae:bf:bc:70:e1:
7f:d7:cd:73:d8:94:b0:04:66:02:87:7f:f7:44:2a:e7:2a:a7:
9a:bb:02:33:ce:8a:01:7b:7a:21:80:b5:24:bf:a6:0b:41:3f:
fd:00:38:de:e0:24:3b:e7:8b:5d:9b:88:3c:9b:2e:e5:7c:11:
9c:59:e0:60:f7:3e:73:81:1b:84:9d:06:29:56:30:b0:2c:b3:
54:33:d1:e4:1b:a9:4b:44:6b:9c:d2:2e:14:04:a5:f7:3d:35:
f5:06:20:c2:2c:78:2f:ea:30:c3:11:dc:ba:ff:10:a1:a8:78:
61:d5:b3:63:82:3f:1d:4f:b6:f0:8f:65:12:98:79:a9:bf:5a:
f6:e6:8e:55:24:80:dd:b1:b1:48:6d:f2:68:ac:cc:29:6c:e5:
46:d4:9f:69:fb:00:ec:a2:24:53:b0:e3:b8:3a:3f:fc:30:28:
5b:3a:af:d2:0a:74:50:18:5e:fd:bc:d7:38:89:43:61:d1:5e:
88:1f:37:0b:d9:43:ea:ba:bc:b3:3f:59:e7:43:51:e3:05:cb:
49:ea:9d:50:7d:5d:0c:4a:9d:46:1f:53:05:8e:91:9c:26:1d:
a4:82:c2:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW3/KrNLy0a0bf6wjN60eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Nzg0MTAyMjQ5MDQ0OTRlOWMwZjdkMzU2NTBhMjYwZTVm
YjYxOTMwHhcNMjYwNzI0MDkwMTE0WhcNMjYwNzI1MDkwMTE0WjAzMTEwLwYDVQQD
Eyg2NzI5ZTUzY2IzNjZlMTIwM2JlZTY4NTk4YzhmZGZjYjQ3OTExZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0bPN7Fnmdq0AYyGeKDFgxIBjPdy
BpbsBTDDW2C2LNl3/LDHaLcBGi11HzNFfTdUZpmkOpXKxJBkGPiBImNrehXJE8vi
1v4gXiE+mbdEpRn2+K2SQirp49w6iPw/VeHL74+gw9yaELBE+g7mNhTUE1KNzA5U
WrnbtI96OyMO25gI7Pgj/cMpfQmCBkLeIQ5iL9UrgrJr2QiJxQNVFpIthUE3rvpm
WWIhPliClJRLk4/kliY6r5mw9JdiG5pl3kOZ9sYi5z6Arv7BlEKWNbdpAEfx5cqg
LnvJFOo/Ew/IiYaTYHl4kAGwRQQXlH/BSGPxnoPpq+MUAQ0y3/OECGcpiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGcp5TyzZuEgO+5oWYyP38tHkR7mMB8GA1UdIwQY
MBaAFLR4QQIkkESU6cD301ZQomDl+2GTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUt
ZGU3ZDNiYmZlZTg4LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81Y2ZiZjMtZTc4Mi00MDEzLThlZWUtZGU3ZDNiYmZlZTg4
LzEvdEhoQkFpU1FSSlRwd1BmVFZsQ2lZT1g3WVpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABq7auqtq
/kFSt+iuWT0lO2jWihWwbb/dbwkEtdUkEK6/vHDhf9fNc9iUsARmAod/90Qq5yqn
mrsCM86KAXt6IYC1JL+mC0E//QA43uAkO+eLXZuIPJsu5XwRnFngYPc+c4EbhJ0G
KVYwsCyzVDPR5BupS0RrnNIuFASl9z019QYgwix4L+owwxHcuv8Qoah4YdWzY4I/
HU+28I9lEph5qb9a9uaOVSSA3bGxSG3yaKzMKWzlRtSfafsA7KIkU7DjuDo//DAo
Wzqv0gp0UBhe/bzXOIlDYdFeiB83C9lD6rq8sz9Z50NR4wXLSeqdUH1dDEqdRh9T
BY6RnCYdpILCsg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:13 2026 by rpki-client