Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
File: thPokOXEBwqIMnayyfd3sQYjxvk.mft (raw, json)
Hash identifier: ghUWi2ERGhtDZuk0qNl0puM/+bHvwvB4LZoWmIF91cA=
Subject key identifier: EE:82:77:A4:26:9F:97:28:80:14:1A:66:24:C3:24:1A:31:3F:0F:D0
Authority key identifier: B6:13:E8:90:E5:C4:07:0A:88:32:76:B2:C9:F7:77:B1:06:23:C6:F9
Certificate issuer: /CN=b613e890e5c4070a883276b2c9f777b10623c6f9
Certificate serial: 01A160E9D6745EF806DF3671E6A39AADDC13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
Manifest number: 014B
Signing time: Thu 22 Oct 2026 00:01:39 +0000
Manifest this update: Thu 22 Oct 2026 00:01:39 +0000
Manifest next update: Fri 23 Oct 2026 00:01:39 +0000
Files and hashes: 1: iSTwcsDq44xmj4bDTIa6k6RLQKI.roa (hash: qWNdY8B5/pf+1M3HkKeiYMgI3P7SCbr9CH/em0VTbyE=)
2: thPokOXEBwqIMnayyfd3sQYjxvk.crl (hash: +cnWvTWPBtLeHJIc2O6ZWVvv06fucuIpwksy13kfxoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:e9:d6:74:5e:f8:06:df:36:71:e6:a3:9a:ad:dc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b613e890e5c4070a883276b2c9f777b10623c6f9
Validity
Not Before: Oct 22 00:01:39 2026 GMT
Not After : Oct 23 00:01:39 2026 GMT
Subject: CN=ee8277a4269f972880141a6624c3241a313f0fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bc:9f:fd:8f:37:5f:8f:79:74:66:92:82:63:
80:14:59:dc:d0:f3:75:26:f4:d0:b9:a6:40:d1:0a:
e3:58:cb:44:ca:9b:cb:f7:ee:2a:6d:11:c2:c9:0c:
57:d4:b6:19:93:cf:1b:65:01:69:7c:f2:36:19:6b:
21:7b:bc:b4:66:a4:93:03:bf:40:93:c8:c7:63:c3:
1e:76:8b:6e:a8:95:21:42:f7:fb:2d:35:2a:b4:44:
3a:d8:b0:40:94:e6:18:c0:32:30:bd:b0:f3:86:03:
86:a6:ed:c4:8a:d3:0d:2e:c7:ee:e5:fd:bf:ec:bf:
3c:9c:b6:a6:b6:c2:15:11:00:89:f8:ca:53:71:34:
8b:19:3d:7b:31:a5:e8:f9:19:7d:f4:07:8f:44:42:
e4:26:73:f4:d1:30:d3:bf:99:6f:bc:9e:52:e1:82:
53:a7:d9:7a:20:8d:53:a1:c3:97:58:e6:94:61:5b:
7c:54:46:db:b4:33:34:f4:2b:df:6f:13:67:af:6c:
d9:12:ce:21:cb:0b:56:3f:fd:50:5c:87:18:4e:91:
f8:d7:07:59:1a:2b:96:39:fa:9b:61:6a:29:72:71:
18:41:7f:b0:74:93:0a:79:7d:c7:da:6a:77:29:06:
83:a6:9b:e4:6c:46:6d:ed:1b:b3:d0:f5:da:48:77:
7a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:82:77:A4:26:9F:97:28:80:14:1A:66:24:C3:24:1A:31:3F:0F:D0
X509v3 Authority Key Identifier:
keyid:B6:13:E8:90:E5:C4:07:0A:88:32:76:B2:C9:F7:77:B1:06:23:C6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b4:19:3f:0e:e5:da:e3:be:95:9f:48:bc:30:6c:42:11:b1:
2a:50:b9:b9:dc:21:2e:68:6b:05:65:dc:5d:8e:b3:e4:bf:94:
1b:32:4f:68:ab:63:06:2f:3a:96:29:14:4c:37:95:74:85:d6:
2c:27:65:41:c8:2c:39:05:6e:f2:e5:ef:92:28:3e:88:59:7e:
b7:51:66:38:0c:f3:ec:a5:9e:2a:1f:29:03:cc:f9:a3:a9:8b:
76:a7:56:fc:ca:89:78:60:93:c7:97:1e:64:69:ac:19:1d:b4:
3b:c8:f7:d9:d0:f6:a4:2e:59:7d:ff:a7:39:34:9a:96:09:cf:
54:c2:8a:56:59:4f:7a:73:26:f0:da:1b:5d:38:5a:cb:58:b0:
c5:c0:59:1f:48:6f:30:6d:77:00:1a:20:9f:92:7c:aa:a8:41:
e9:cf:bc:a6:c4:85:7c:98:2d:c0:0d:cb:50:79:ec:d3:54:7a:
9f:18:63:75:51:a8:9e:c7:67:f4:af:5f:d6:6d:88:5c:38:4e:
dc:ce:c4:1d:33:65:04:cf:63:c5:9c:26:4b:02:02:23:fb:b7:
5e:a9:04:e7:ec:76:e0:6a:fd:5e:9e:6b:a2:d1:b1:6c:d7:b6:
1e:2c:1b:60:63:79:82:e5:b9:69:69:8c:de:72:3f:cf:3c:cd:
ea:58:cf:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 08:22:10 2026 by rpki-client