Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
File: ThXfaIw66uP2he1Es5bCGYOVhh0.mft (raw, json)
Hash identifier: 76/HxAC0GhYlzJmo6CsFVxp+HxhttMx8jWTaGopdvVs=
Subject key identifier: F9:BC:B3:19:13:17:FD:C1:DB:6A:14:8D:89:66:34:4B:21:CD:5D:C9
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 019D39411DEF71071E3C4EEFA7AA8E76B200
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
Manifest number: 0E3D
Signing time: Sun 29 Mar 2026 11:01:01 +0000
Manifest this update: Sun 29 Mar 2026 11:01:01 +0000
Manifest next update: Mon 30 Mar 2026 11:01:01 +0000
Files and hashes: 1: 8O3AGuQIhrlb2IfzM6V4tcLRdYw.roa (hash: WlnM/QzatMyerGm0OoWe7csktSam0ZWSgVvAv1lTVgg=)
2: 8bHRc8tr2a4XBd3O15Qoano2tfQ.roa (hash: orjr1SLl5fYCt3s+uAWK9iZFvIcZNLQi4CUpABQKDvk=)
3: HWctAdx2obrE3iukcBA26ddQb60.roa (hash: mlqXm7llYZDIH4sG8l62C5xHyOEbOOaYIPrVf894QoY=)
4: Nu3EJkNT_L4Y1dVbXdBaOuwi8ak.roa (hash: w7pIzOCnx2UvrBAGfaTsFND3uOFAQFekA5rwetnu5CE=)
5: ThXfaIw66uP2he1Es5bCGYOVhh0.crl (hash: /xkyihimwBlmqZJiKgLzQTAfHhd7KcCoBT2vnmPma5E=)
6: Zh6-sCTrmtyYMbiN3qaDaEUjzS8.roa (hash: 4ShBh5y0hjz1aSzm7VwIqgbx0rRcZCyuU9YRysEUjUM=)
7: t8PF2dzz4p808TasTsfwf7JVfCc.roa (hash: ouA5VopXvLk7YoGc+RmYEF9pxuL+pu1BO6KzbRP9lbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:1d:ef:71:07:1e:3c:4e:ef:a7:aa:8e:76:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Mar 29 11:01:01 2026 GMT
Not After : Mar 30 11:01:01 2026 GMT
Subject: CN=f9bcb3191317fdc1db6a148d8966344b21cd5dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:df:d5:ae:38:59:28:76:62:25:49:ec:59:0d:
eb:f0:c1:70:96:f7:8e:c4:cc:f9:a5:9d:11:71:ef:
3b:92:11:2d:7e:36:90:f5:ca:4a:1e:a0:5b:29:fe:
71:82:3d:cd:8f:c0:1d:0b:a9:b1:bb:7f:d3:a2:5c:
06:3d:f8:87:72:33:c9:00:8e:96:f5:62:15:7e:b5:
7e:c8:46:58:dd:5c:a9:c9:f3:4e:35:13:b1:ff:7a:
7a:4e:e0:65:2d:58:c1:eb:f5:16:ee:51:28:9b:41:
d7:d2:40:cc:b2:44:4d:0f:be:7e:d6:36:39:b2:f4:
57:c9:e2:ad:8c:35:b9:76:b5:44:ac:00:8f:e0:00:
3a:f9:25:6a:62:cd:96:ca:c7:d9:b8:83:df:62:33:
d9:70:8b:26:2e:d6:7b:97:31:5d:9a:32:2d:16:76:
f0:cf:aa:ca:69:43:6d:87:0d:86:ba:ce:cc:98:a3:
db:56:d6:66:8f:f4:b1:01:3f:f6:c2:00:ac:67:46:
54:c1:51:ea:b2:b7:f8:15:78:2e:b5:bb:33:f4:69:
cb:bc:55:c3:a8:4d:da:3b:4a:d5:b6:2a:48:98:a4:
8b:f4:d6:d8:e8:6e:61:2f:5c:b6:e8:2e:e3:9a:a1:
8d:49:62:3c:84:c5:f6:50:5c:3a:c4:52:ab:4c:af:
5c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BC:B3:19:13:17:FD:C1:DB:6A:14:8D:89:66:34:4B:21:CD:5D:C9
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:29:7c:05:30:65:c3:c1:cd:29:8e:b0:b5:d3:15:97:a0:9a:
05:db:d6:52:77:d6:bd:3e:5d:0c:93:b7:00:63:f7:92:28:64:
0a:bd:cc:81:0c:5e:c4:39:6d:4e:16:1f:fd:ef:1b:f4:09:58:
cf:d5:fa:5b:6e:2f:d1:00:51:87:d1:b1:53:31:fa:9e:0f:5d:
c7:84:85:ba:fe:c4:bc:b3:cc:8c:c4:4d:92:a3:f9:81:3f:97:
c5:bd:bd:f2:35:51:60:d7:72:3b:9c:8f:1e:12:a7:4a:99:14:
66:a5:24:ae:bd:2a:c3:fe:3f:9d:70:dd:14:47:d7:e3:12:9f:
85:d5:6c:ca:0e:36:b5:58:4c:37:0f:94:3c:15:f8:96:52:30:
c1:ee:6d:fe:33:2c:1e:b1:7a:79:dc:ee:33:be:f5:8d:91:f8:
93:90:84:f0:e9:27:1d:6c:2e:30:9e:f5:7e:56:a9:2f:42:da:
49:e5:84:bb:5b:84:f2:8a:ee:ac:b5:31:c8:2c:2f:63:e4:71:
5a:5c:c0:14:e3:81:c6:0f:66:a7:31:1a:0e:f0:6b:58:80:01:
87:45:31:b9:4d:86:85:5a:bc:62:b5:55:14:b1:7d:8a:b6:56:
27:8c:69:e2:4f:7c:ca:59:b2:52:b8:b7:62:2b:fd:90:5e:78:
4d:9c:48:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:37:50 2026 by rpki-client