Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
File: THkVQTlO1-dpwf2JlVwfKBi0RbI.mft (raw, json)
Hash identifier: D8QM413dxR1cZMsHKs5VSqySjWJWWF+HreJe/yuLimM=
Subject key identifier: B5:5B:38:31:49:25:FC:4C:7E:C2:C0:5B:2B:59:3A:C1:19:B0:0A:5A
Authority key identifier: 4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2
Certificate issuer: /CN=4c791541394ed7e769c1fd89955c1f2818b445b2
Certificate serial: 01A151767D2F9C3F1A1A0128306AEA4CF31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
Manifest number: 0128
Signing time: Mon 19 Oct 2026 00:01:22 +0000
Manifest this update: Mon 19 Oct 2026 00:01:22 +0000
Manifest next update: Tue 20 Oct 2026 00:01:22 +0000
Files and hashes: 1: 46tVnxWXBd54uDnUWiQrDEewYbs.roa (hash: iC7XI+Wul/0hfYbUzsUQgkjKjAE4JznP2trrEiMwN1I=)
2: 9ahwneSFqD3SaROmAUIGBjc82SE.roa (hash: CxJPqcqx0ZwsWZa7MbNafetbcRteWJmW7Gj2s8BmLiE=)
3: THkVQTlO1-dpwf2JlVwfKBi0RbI.crl (hash: FmsHa65FuqGMRmBrMQQVdLcNwDugMQGoiLIvP6pErUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:76:7d:2f:9c:3f:1a:1a:01:28:30:6a:ea:4c:f3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c791541394ed7e769c1fd89955c1f2818b445b2
Validity
Not Before: Oct 19 00:01:22 2026 GMT
Not After : Oct 20 00:01:22 2026 GMT
Subject: CN=b55b38314925fc4c7ec2c05b2b593ac119b00a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:a1:dd:1a:2c:ea:84:aa:65:3b:20:88:15:
4a:f9:4b:f4:15:90:c3:bd:49:91:23:b2:04:0a:79:
27:7e:fb:d9:95:2f:92:95:21:bc:d4:5c:da:0d:c0:
02:d9:cf:89:bb:0a:58:ce:e7:96:09:4f:89:66:02:
49:3a:22:42:db:06:3b:01:7d:59:52:d1:28:0a:82:
87:a8:83:57:68:d2:b9:e1:5d:87:48:e7:1d:c7:65:
df:1e:58:95:c5:25:ce:25:f3:a0:f3:4c:c5:67:64:
e3:c8:ae:41:b0:49:bd:37:f1:57:48:b1:b5:5a:bf:
5e:fe:5a:04:84:66:b4:7c:74:10:48:04:29:bc:6d:
28:d1:47:43:ca:79:7e:09:1d:6b:91:a0:62:32:47:
76:4a:ea:62:37:a9:74:f3:98:d6:02:2a:4b:92:25:
f9:55:5c:76:b3:c9:7a:55:d3:b6:d4:7d:ba:bb:a2:
28:a2:ce:87:d1:f7:e3:3f:04:c9:4a:19:50:3b:93:
74:0e:76:c0:0a:92:ad:02:29:eb:ff:66:34:20:2c:
13:fe:cf:5d:db:d0:6c:1f:7e:5d:1a:1c:d8:dc:cf:
cd:a4:9c:d9:27:43:7d:95:3c:07:2d:72:3f:52:4f:
ab:29:d8:9b:8f:e1:00:06:ed:19:67:a1:a8:b8:39:
c6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5B:38:31:49:25:FC:4C:7E:C2:C0:5B:2B:59:3A:C1:19:B0:0A:5A
X509v3 Authority Key Identifier:
keyid:4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c5:5c:2d:ed:21:9e:bc:49:28:6c:15:d5:d5:a7:b7:86:79:
5d:75:01:5e:a7:29:2a:aa:be:10:3f:8e:c8:c4:7c:c3:12:62:
bc:65:57:25:bc:b2:72:09:62:53:43:f9:9f:7f:94:67:41:35:
9c:90:1b:19:0e:b8:54:19:97:e1:24:ed:88:df:d7:b7:1a:64:
93:b8:0b:c7:f8:da:a1:04:ac:86:d1:2c:61:8c:12:60:07:f7:
0d:55:a0:e5:f9:f8:9d:40:66:4f:a3:29:e2:ef:76:06:0e:f9:
15:41:51:5e:af:c3:4c:27:d8:09:d8:37:e6:38:43:80:4b:d8:
2f:47:30:f1:25:4b:ee:f1:f3:85:7f:7b:63:0d:4f:9d:bb:54:
7f:8c:cb:2a:c5:c1:ca:5e:96:50:94:5f:b5:27:10:e2:bc:ec:
b2:1f:a9:5d:65:74:26:af:9b:04:7e:c4:00:c5:23:69:cf:cd:
16:26:f2:4c:50:97:a4:29:be:10:82:cc:1e:71:03:80:ca:43:
7a:af:3a:73:c9:ee:0a:ee:df:e3:cd:e8:f4:f9:1e:7e:da:53:
a6:51:e7:51:84:f7:26:c5:7e:f2:7f:6b:5c:ca:40:9a:23:59:
31:8c:73:65:b3:09:d1:0a:ce:72:af:bb:f4:1f:cb:32:fb:3b:
38:06:65:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:42:07 2026 by rpki-client