
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
File: ThXfaIw66uP2he1Es5bCGYOVhh0.mft (raw, json)
Hash identifier: YDmwkeYpu+HzxoPzKm9yAJ0+EC8PeiRLU6tg0+oRMdM=
Subject key identifier: 34:7A:43:35:76:8D:CC:E4:3F:A1:E8:43:96:59:F8:F1:CD:03:89:E0
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 019E2994EC95A6001239750AA0A5A9AD849F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
Manifest number: 0EBA
Signing time: Fri 15 May 2026 03:01:26 +0000
Manifest this update: Fri 15 May 2026 03:01:26 +0000
Manifest next update: Sat 16 May 2026 03:01:26 +0000
Files and hashes: 1: 8O3AGuQIhrlb2IfzM6V4tcLRdYw.roa (hash: WlnM/QzatMyerGm0OoWe7csktSam0ZWSgVvAv1lTVgg=)
2: 8bHRc8tr2a4XBd3O15Qoano2tfQ.roa (hash: orjr1SLl5fYCt3s+uAWK9iZFvIcZNLQi4CUpABQKDvk=)
3: HWctAdx2obrE3iukcBA26ddQb60.roa (hash: mlqXm7llYZDIH4sG8l62C5xHyOEbOOaYIPrVf894QoY=)
4: Nu3EJkNT_L4Y1dVbXdBaOuwi8ak.roa (hash: w7pIzOCnx2UvrBAGfaTsFND3uOFAQFekA5rwetnu5CE=)
5: RFfxQlgpEPrKePaKGQadR6EJSqs.roa (hash: oi8mU13gbqdkE5qYPVo/94WYOHiVBIqcRLFc6Pbaf40=)
6: ThXfaIw66uP2he1Es5bCGYOVhh0.crl (hash: l2fJp7SX2lSu1ZQ4rUm9brcUWYNihXA7uEhl3HuCqrg=)
7: Zh6-sCTrmtyYMbiN3qaDaEUjzS8.roa (hash: 4ShBh5y0hjz1aSzm7VwIqgbx0rRcZCyuU9YRysEUjUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:ec:95:a6:00:12:39:75:0a:a0:a5:a9:ad:84:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: May 15 03:01:26 2026 GMT
Not After : May 16 03:01:26 2026 GMT
Subject: CN=347a4335768dcce43fa1e8439659f8f1cd0389e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e2:b3:e0:fd:ae:aa:72:7a:87:6d:73:e1:81:
d2:ea:3b:4a:58:94:c4:e2:16:55:2d:05:00:35:4b:
85:84:7a:09:31:dd:29:4e:52:ed:39:04:09:4e:69:
c7:4d:c5:da:99:54:1c:ba:31:77:6d:83:18:a1:b6:
28:38:1c:b9:20:48:22:1c:8e:af:2e:ca:3c:6f:c5:
3a:41:28:62:62:cd:eb:d6:d2:e6:0d:40:97:05:da:
00:92:9e:dd:cf:23:51:67:72:c5:4e:ca:01:f8:38:
8b:61:06:a4:75:4b:9b:16:60:6f:8f:dd:89:b8:cf:
d3:a1:8c:e9:1c:83:af:54:46:21:1b:2f:bf:ef:ed:
8f:21:10:4e:b1:ad:c9:4f:c5:08:14:9e:97:3c:7a:
70:b3:42:f3:f8:29:70:03:e2:8c:b0:58:c6:38:b2:
42:b3:99:dd:b7:a6:ae:83:b6:ba:4d:a4:c5:cc:01:
a9:9c:5d:8f:aa:ba:62:58:61:dd:dc:be:79:91:ce:
59:e4:90:1b:ba:cc:4c:f8:f4:70:c3:a3:2b:7d:c6:
c1:98:5f:7f:c4:47:70:0a:f9:8e:a3:22:96:1e:65:
b9:16:ad:ba:ca:8e:4e:4c:af:2b:a9:60:44:0d:ed:
2d:c9:39:28:a7:ee:30:3e:2f:0a:ea:df:ec:b3:54:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7A:43:35:76:8D:CC:E4:3F:A1:E8:43:96:59:F8:F1:CD:03:89:E0
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cb:a9:69:b1:b2:16:8d:4e:c1:64:83:51:dc:52:66:01:eb:
9d:17:8c:ef:a2:81:61:6a:fc:49:ef:18:2a:66:94:2e:08:ff:
c0:f8:b9:27:4f:28:7d:2b:09:0c:6b:7a:a7:f9:25:43:6b:18:
4d:40:c9:5e:ec:a7:0d:9a:e4:68:e6:0e:1f:2f:da:d4:2a:04:
08:09:f3:e8:12:f4:5b:f4:96:a5:49:e0:07:ed:ce:70:ca:0a:
25:a4:05:c5:58:a3:34:13:3a:ca:c8:71:26:16:d2:33:c7:38:
90:23:af:2e:de:37:11:74:c1:13:b6:49:49:fb:97:4d:e8:e0:
97:d1:73:03:c0:55:dd:03:ea:16:79:76:13:2e:02:e7:df:9e:
bc:c4:fc:aa:07:10:54:b1:f8:11:ff:ca:7c:5c:ac:ea:ed:78:
ba:aa:7e:11:ac:f6:37:d1:9f:b7:ec:25:61:11:97:31:4c:da:
32:00:f6:2f:11:db:d1:70:24:c6:c8:48:91:cf:b5:ef:fc:e8:
b7:c4:70:6e:7f:b1:cd:0c:96:f4:33:f6:e4:a7:06:04:5a:76:
78:42:77:20:ed:12:b9:67:80:b9:72:b4:a5:1e:09:46:34:18:
fe:c1:f0:a2:3c:46:c8:0f:2b:b4:e0:35:a6:51:3e:07:d1:01:
97:b7:27:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:18:26 2026 by rpki-client