Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
File: ThXfaIw66uP2he1Es5bCGYOVhh0.mft (raw, json)
Hash identifier: h35Hr5WA+naCEcVZjoDWkZhNUQuYD7RfR+xGsNQa1XQ=
Subject key identifier: 0A:D8:53:F7:84:4B:83:62:1F:E8:B6:A0:1B:55:34:81:F4:06:48:D1
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 01A001A6200E5D29A18286BC848F5E7C708D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
Manifest number: 0FAF
Signing time: Fri 14 Aug 2026 19:00:59 +0000
Manifest this update: Fri 14 Aug 2026 19:00:59 +0000
Manifest next update: Sat 15 Aug 2026 19:00:59 +0000
Files and hashes: 1: 8O3AGuQIhrlb2IfzM6V4tcLRdYw.roa (hash: WlnM/QzatMyerGm0OoWe7csktSam0ZWSgVvAv1lTVgg=)
2: HWctAdx2obrE3iukcBA26ddQb60.roa (hash: mlqXm7llYZDIH4sG8l62C5xHyOEbOOaYIPrVf894QoY=)
3: Nu3EJkNT_L4Y1dVbXdBaOuwi8ak.roa (hash: w7pIzOCnx2UvrBAGfaTsFND3uOFAQFekA5rwetnu5CE=)
4: RFfxQlgpEPrKePaKGQadR6EJSqs.roa (hash: oi8mU13gbqdkE5qYPVo/94WYOHiVBIqcRLFc6Pbaf40=)
5: ThXfaIw66uP2he1Es5bCGYOVhh0.crl (hash: I4P3pEcj9ysA/Hz/w7pfsUI+5Ucm7CeESJscaB7guog=)
6: Zh6-sCTrmtyYMbiN3qaDaEUjzS8.roa (hash: 4ShBh5y0hjz1aSzm7VwIqgbx0rRcZCyuU9YRysEUjUM=)
7: chNBYIE4gA8jrWAxZUlShBGqlPs.roa (hash: qmmZ4LhW1qkM2Wcq2XSopnjfKwBuiAKH7aTKlWJ/VMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:20:0e:5d:29:a1:82:86:bc:84:8f:5e:7c:70:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Aug 14 19:00:59 2026 GMT
Not After : Aug 15 19:00:59 2026 GMT
Subject: CN=0ad853f7844b83621fe8b6a01b553481f40648d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a7:ca:66:70:c3:9b:90:7c:a8:48:0d:d1:2e:
e0:74:2d:6b:91:f9:85:ed:f7:b1:9b:a8:ef:8a:94:
68:5b:66:cc:ee:a0:fc:3a:7c:db:fd:5f:11:b1:92:
a9:7e:b3:ec:fd:52:5b:1e:f4:91:19:c9:67:6d:4c:
33:24:c3:80:c7:fb:f8:80:de:16:3f:af:c4:fc:e1:
ed:8e:0f:f3:0d:85:2f:4a:a5:e6:0d:69:9d:3c:9b:
5b:96:f3:b4:a2:42:9f:91:b7:e3:6c:31:36:37:e1:
73:46:84:ca:35:39:b6:23:a6:8a:63:83:9a:78:8b:
12:fe:43:3a:e8:0e:d7:06:2a:9a:d4:dc:cc:e5:06:
70:63:dd:5e:20:c5:cf:d8:c6:e0:6c:d3:59:92:48:
f3:79:1e:8b:d8:70:b7:5a:77:10:c5:a2:73:a0:e4:
1e:99:b3:95:18:85:73:ae:78:e3:98:4d:cf:62:5e:
e1:dd:09:43:d5:41:39:4d:f2:17:1d:b9:83:2c:30:
80:00:41:4b:78:52:c7:37:b7:4a:96:b6:06:b8:3f:
5c:23:f3:1d:7a:75:b8:bb:f6:92:b5:6f:5a:4a:bc:
d7:c4:16:c9:ae:35:3a:58:97:10:4b:19:dd:d3:cc:
89:ff:5f:fb:0c:eb:7c:c0:07:61:14:0a:ce:3b:77:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D8:53:F7:84:4B:83:62:1F:E8:B6:A0:1B:55:34:81:F4:06:48:D1
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:6b:7a:3b:fe:f6:62:a7:ac:d0:c5:8a:89:4b:62:74:45:87:
4b:bf:d9:df:ea:43:ef:b2:4b:5a:fa:d5:61:96:82:21:98:ca:
59:bb:4c:d2:b9:83:82:d4:47:93:fe:0f:96:70:e5:f4:d7:ba:
ae:f6:67:c5:78:b2:6e:bb:29:88:80:d2:3a:c6:a6:50:e9:bb:
29:29:13:e1:0c:8b:dd:13:26:3a:de:a2:a9:cc:67:21:19:07:
46:19:81:66:48:16:2e:8a:93:70:fc:78:4d:65:75:45:37:4c:
f8:1e:9b:f8:96:df:e6:ea:a2:46:ad:1f:07:9e:ea:cf:3a:a8:
cf:8e:a1:c7:38:e7:66:ea:68:47:d6:75:7d:c4:4b:19:3d:49:
d6:69:d4:65:7e:52:87:2b:dd:ff:13:82:34:a6:98:26:87:92:
19:ea:7b:83:f6:4c:0a:e1:f4:d5:d0:f6:10:d6:3f:86:30:b1:
1b:fc:cc:e9:4f:e2:38:1f:94:7a:f0:14:f8:86:30:55:1a:1d:
c5:44:d8:af:82:5e:02:cf:f7:ec:46:83:b9:51:42:46:f2:e4:
fb:96:33:a6:d4:13:f3:ab:c6:7e:15:ba:db:41:e1:8f:2b:1b:
a5:0a:f2:cc:51:09:1c:a1:49:71:0d:a1:6b:50:ac:95:3d:06:
71:b6:4d:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpiAOXSmhgoa8hI9efHCNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlMTVkZjY4OGMzYWVhZTNmNjg1ZWQ0NGIzOTZjMjE5ODM5
NTg2MWQwHhcNMjYwODE0MTkwMDU5WhcNMjYwODE1MTkwMDU5WjAzMTEwLwYDVQQD
EygwYWQ4NTNmNzg0NGI4MzYyMWZlOGI2YTAxYjU1MzQ4MWY0MDY0OGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6fKZnDDm5B8qEgN0S7gdC1rkfmF
7fexm6jvipRoW2bM7qD8Onzb/V8RsZKpfrPs/VJbHvSRGclnbUwzJMOAx/v4gN4W
P6/E/OHtjg/zDYUvSqXmDWmdPJtblvO0okKfkbfjbDE2N+FzRoTKNTm2I6aKY4Oa
eIsS/kM66A7XBiqa1NzM5QZwY91eIMXP2MbgbNNZkkjzeR6L2HC3WncQxaJzoOQe
mbOVGIVzrnjjmE3PYl7h3QlD1UE5TfIXHbmDLDCAAEFLeFLHN7dKlrYGuD9cI/Md
enW4u/aStW9aSrzXxBbJrjU6WJcQSxnd08yJ/1/7DOt8wAdhFArOO3fIBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArYU/eES4NiH+i2oBtVNIH0BkjRMB8GA1UdIwQY
MBaAFE4V32iMOurj9oXtRLOWwhmDlYYdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEt
OGE2ZTU1NDE5NmJiLzEvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8wYmY3YWItNWFhYi00MzM3LWEwMmEtOGE2ZTU1NDE5NmJi
LzEvVGhYZmFJdzY2dVAyaGUxRXM1YkNHWU9WaGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXGt6O/72
Yqes0MWKiUtidEWHS7/Z3+pD77JLWvrVYZaCIZjKWbtM0rmDgtRHk/4PlnDl9Ne6
rvZnxXiybrspiIDSOsamUOm7KSkT4QyL3RMmOt6iqcxnIRkHRhmBZkgWLoqTcPx4
TWV1RTdM+B6b+Jbf5uqiRq0fB57qzzqoz46hxzjnZupoR9Z1fcRLGT1J1mnUZX5S
hyvd/xOCNKaYJoeSGep7g/ZMCuH01dD2ENY/hjCxG/zM6U/iOB+UevAU+IYwVRod
xUTYr4JeAs/37EaDuVFCRvLk+5YzptQT86vGfhW620HhjysbpQryzFEJHKFJcQ2h
a1CslT0GcbZN1Q==
-----END CERTIFICATE-----
Generated at Sat Aug 15 02:06:37 2026 by rpki-client