Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json)
Hash identifier: WECzZ5+0PQ39Yv/oKq1rJ+FrZB4P1TZPhJLHT6Ax/AY=
Subject key identifier: C8:CA:54:15:BF:B7:B6:25:82:4B:17:57:69:67:29:40:5E:D4:72:13
Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Certificate serial: 019D38D3310657A9A2A3C63A956DBA5B5751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
Manifest number: 0B95
Signing time: Sun 29 Mar 2026 09:00:57 +0000
Manifest this update: Sun 29 Mar 2026 09:00:57 +0000
Manifest next update: Mon 30 Mar 2026 09:00:57 +0000
Files and hashes: 1: 0oPMLH66x2tupyD79gAxo26IWME.roa (hash: njcSyASz9ZENYT0bs7NDyB4Uc9vLtka/VRm0UgpzohU=)
2: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: vL1w4sXIi3It6smjfb27PyNc4Ja+T5yc/YACHavt8xM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:31:06:57:a9:a2:a3:c6:3a:95:6d:ba:5b:57:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Validity
Not Before: Mar 29 09:00:57 2026 GMT
Not After : Mar 30 09:00:57 2026 GMT
Subject: CN=c8ca5415bfb7b625824b1757696729405ed47213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:37:77:5b:d5:cf:77:3c:45:74:96:4b:c8:be:
8c:bd:c8:6c:20:8a:3f:d0:3e:32:62:96:58:a4:d6:
4d:9d:8a:a2:b6:11:67:c2:3d:af:c5:ec:6e:87:0c:
ca:a6:9e:6c:b5:78:a2:94:1a:3d:20:e2:80:ad:2f:
10:a0:6f:94:c4:e3:9d:26:7e:3b:16:c6:35:68:61:
12:4c:40:60:39:e0:b6:84:19:f5:54:8d:c0:f9:bf:
a8:aa:3e:44:44:eb:40:33:e8:2c:66:73:ca:df:76:
f6:5b:19:89:af:81:e9:58:16:4c:5c:0e:02:da:c6:
67:60:a2:1d:d3:0c:7a:df:ac:e0:bb:b5:88:64:22:
0b:7a:e7:42:28:a9:53:92:c1:30:5c:24:0e:34:9f:
3c:68:9a:2a:51:fe:bc:65:1d:95:0f:91:d5:df:0e:
ae:c6:bb:f0:7f:28:24:db:8a:00:d4:01:08:12:3c:
77:ac:28:6e:d1:4b:f3:35:aa:e6:87:fb:50:0b:89:
83:df:9f:ef:68:61:8e:64:dc:09:6a:db:db:61:87:
8e:33:7a:f9:9f:ba:9a:cd:a3:b9:e2:19:72:44:3f:
13:c1:b7:4d:58:1f:a2:db:b9:5a:32:a4:9b:23:94:
1e:ef:2d:5c:56:13:3d:5d:20:32:61:48:c9:cd:82:
ef:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CA:54:15:BF:B7:B6:25:82:4B:17:57:69:67:29:40:5E:D4:72:13
X509v3 Authority Key Identifier:
keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:94:4c:d9:0d:33:8b:6a:49:c6:47:99:0f:ca:e2:07:27:ba:
34:e9:03:ec:81:f4:df:04:02:da:6f:3e:ed:52:ab:f8:3a:97:
7e:33:09:92:ba:5a:e1:f2:77:25:f3:b9:1a:f9:26:b6:87:3f:
a4:c9:f3:59:60:d2:8d:fd:21:f3:c9:2c:83:70:2f:fc:7e:f0:
2d:f3:63:0d:09:77:0f:db:08:72:d2:a5:37:e1:82:44:4f:d7:
96:23:6e:6c:7d:98:76:00:ad:77:3e:3d:29:9e:ae:33:a5:1e:
72:3f:fc:58:ab:ee:dd:37:06:6e:24:4c:e1:5d:e9:cc:9a:86:
57:18:a0:ff:16:a9:3f:e5:15:10:3f:7f:8d:6c:12:2a:c1:59:
af:58:05:38:0a:35:bf:6b:7b:70:c7:37:ae:8a:8c:ec:23:6b:
75:fa:29:fb:3c:30:23:63:de:aa:b0:ed:af:80:23:f5:e9:15:
d7:8d:60:9c:7a:d8:72:f3:a3:fe:46:63:d3:e0:71:c6:ec:80:
fb:a8:08:d4:20:a5:78:4b:33:b1:4f:3e:29:95:e8:f2:50:1c:
94:95:6a:94:bf:57:a0:2d:10:b1:39:8a:75:c0:50:26:8f:74:
1e:7a:bc:3a:e2:69:d0:10:cd:c1:54:5e:bc:f2:0b:0a:a3:c0:
ef:49:1b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:14 2026 by rpki-client