Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
File: ThXfaIw66uP2he1Es5bCGYOVhh0.mft (raw, json)
Hash identifier: R71kk64rGoW9/j6venhRX1CKv7LkqNYhWoKINDXT+DQ=
Subject key identifier: 46:F9:15:85:6F:C9:76:4D:46:89:D6:23:02:FD:19:B8:DE:19:40:1B
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 019F122E580E964D8A9279AEDAF721CA03C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
Manifest number: 0F33
Signing time: Mon 29 Jun 2026 07:00:54 +0000
Manifest this update: Mon 29 Jun 2026 07:00:54 +0000
Manifest next update: Tue 30 Jun 2026 07:00:54 +0000
Files and hashes: 1: 8O3AGuQIhrlb2IfzM6V4tcLRdYw.roa (hash: WlnM/QzatMyerGm0OoWe7csktSam0ZWSgVvAv1lTVgg=)
2: HWctAdx2obrE3iukcBA26ddQb60.roa (hash: mlqXm7llYZDIH4sG8l62C5xHyOEbOOaYIPrVf894QoY=)
3: Nu3EJkNT_L4Y1dVbXdBaOuwi8ak.roa (hash: w7pIzOCnx2UvrBAGfaTsFND3uOFAQFekA5rwetnu5CE=)
4: RFfxQlgpEPrKePaKGQadR6EJSqs.roa (hash: oi8mU13gbqdkE5qYPVo/94WYOHiVBIqcRLFc6Pbaf40=)
5: ThXfaIw66uP2he1Es5bCGYOVhh0.crl (hash: qNdh7RuhIWx31KX2bDV2agC2Lpf2jHFUNjQbwk68pX8=)
6: Zh6-sCTrmtyYMbiN3qaDaEUjzS8.roa (hash: 4ShBh5y0hjz1aSzm7VwIqgbx0rRcZCyuU9YRysEUjUM=)
7: chNBYIE4gA8jrWAxZUlShBGqlPs.roa (hash: qmmZ4LhW1qkM2Wcq2XSopnjfKwBuiAKH7aTKlWJ/VMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:58:0e:96:4d:8a:92:79:ae:da:f7:21:ca:03:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Jun 29 07:00:54 2026 GMT
Not After : Jun 30 07:00:54 2026 GMT
Subject: CN=46f915856fc9764d4689d62302fd19b8de19401b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:51:c0:78:cd:a4:66:1d:1a:b9:d0:e9:30:b8:
84:da:a2:38:4b:32:10:55:9c:d7:9c:e8:ad:7d:27:
d6:5b:a5:df:c9:23:03:c0:6c:49:80:e7:28:47:72:
0b:23:60:58:48:3c:e8:fe:f5:94:e3:d3:e2:e1:42:
fd:09:c5:67:e4:57:f1:c1:27:ef:fe:da:fd:c0:00:
37:b2:72:9f:56:07:70:00:dc:46:bb:ff:05:c3:1b:
42:30:2b:32:06:fa:9a:c8:e9:a9:5a:33:b9:19:97:
6e:92:de:06:26:f1:ba:76:c1:46:57:d3:c4:a8:08:
37:a7:e4:06:47:cb:64:90:3f:3e:30:a0:ec:77:14:
78:43:cb:59:31:3c:4d:8f:e7:aa:cf:c9:ce:4c:f5:
7a:d4:78:ca:37:87:35:4e:3c:e9:e9:f2:39:f0:d4:
f3:73:17:26:93:14:7a:f4:7a:7a:c2:a7:02:0c:22:
05:66:74:7e:7d:ec:5a:fd:c9:2c:ea:2d:dc:41:05:
f2:2d:44:8c:94:4c:10:78:6b:8e:c2:1f:47:4f:4a:
92:17:41:15:53:2c:94:eb:a2:af:50:36:22:af:e0:
82:25:2f:b6:bc:0a:f3:69:da:ab:4e:03:ff:75:4e:
a2:5e:c9:5c:b3:82:b6:bc:c0:7a:36:df:4f:91:79:
f2:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:F9:15:85:6F:C9:76:4D:46:89:D6:23:02:FD:19:B8:DE:19:40:1B
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:90:66:ca:b5:f5:c0:c1:31:ed:c1:c2:0f:f0:70:9c:6c:24:
14:df:49:49:5a:f3:f9:73:bc:d1:05:ea:92:4e:42:79:db:98:
d9:06:d0:b1:61:47:cb:df:62:6d:ec:2c:4a:de:2f:11:c4:cd:
13:62:d1:b1:89:fe:b4:a2:aa:6e:ad:90:48:b3:13:3c:ec:d1:
0a:ea:c3:f0:08:75:5f:38:91:41:24:e5:41:1d:90:8d:5d:f3:
0f:92:c5:68:36:13:28:df:9a:17:b0:c1:c5:25:36:69:df:b8:
1e:98:1b:e6:e3:ae:1c:a9:78:bc:82:f3:e9:04:b8:6c:10:f0:
29:79:72:32:5a:d9:42:15:bd:a4:5a:90:73:0f:bd:13:f4:30:
bd:15:c7:82:d5:11:27:3e:04:78:fc:6c:c4:4d:13:38:e7:81:
c9:45:d8:aa:cf:e7:6e:df:13:41:37:a1:9c:5a:61:74:a0:45:
c7:99:eb:a9:26:f3:12:3e:65:6f:f5:28:3b:3f:5a:4b:c1:d4:
ed:52:53:32:8b:14:e2:ed:21:81:ff:af:d0:91:f0:00:67:5b:
cb:3d:a6:86:8b:0a:aa:4c:d3:5f:42:cd:33:c4:1b:fb:ad:63:
68:84:fe:c9:75:42:74:41:da:ed:ce:2e:b0:4c:d9:de:ba:60:
d7:fd:dd:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:37:02 2026 by rpki-client