Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
File: THWUsCFCZPBmd2CbtKpHeese7K0.mft (raw, json)
Hash identifier: S/3xmUUAHcyG07QxB8zCTT5XmIh0CXu216V30r5+3ik=
Subject key identifier: 9B:59:00:99:92:BE:B6:43:0B:AA:BB:A8:DA:B8:06:AD:11:91:F3:76
Authority key identifier: 4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
Certificate issuer: /CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Certificate serial: 019D38657BA25F56E3EF8F49983D56246F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 07:01:08 +0000
Manifest this update: Sun 29 Mar 2026 07:01:08 +0000
Manifest next update: Mon 30 Mar 2026 07:01:08 +0000
Files and hashes: 1: THWUsCFCZPBmd2CbtKpHeese7K0.crl (hash: hfziKSWyM3mINWI5bRkA8XyuzwwE32NtNMFUswFz0HE=)
2: kFN2JA4wyXnX-X3t1ScNXsaC0ps.roa (hash: pFO8WJK2IpmyD0BiUSZgYwNmBI+Ty3QLefXtzLAgFO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:7b:a2:5f:56:e3:ef:8f:49:98:3d:56:24:6f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Validity
Not Before: Mar 29 07:01:08 2026 GMT
Not After : Mar 30 07:01:08 2026 GMT
Subject: CN=9b59009992beb6430baabba8dab806ad1191f376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f6:34:e4:30:90:d1:21:b3:83:c1:39:f8:4e:
8c:80:e0:d4:b8:5d:87:19:01:f6:fe:15:12:c6:12:
2d:cf:3f:b9:e6:71:4b:aa:2e:e5:be:8b:d5:15:d1:
32:3a:63:c1:e0:4c:4c:1c:d8:46:a9:d4:b7:38:61:
6f:33:3f:9d:00:8b:09:69:17:0c:96:d7:1b:23:e5:
0d:ea:11:54:a1:7d:fc:36:55:35:3f:68:65:75:5b:
ba:b4:5e:55:5a:35:90:a9:b1:c0:26:ef:4c:15:b6:
17:fe:5e:36:db:ff:18:f7:07:05:24:34:a1:e4:1f:
13:e2:97:f7:c1:41:43:50:b2:65:4a:17:71:f3:49:
25:91:3a:d9:c0:7b:4d:9c:09:91:99:ad:a6:04:2d:
07:91:b8:c4:c8:9b:e2:48:22:40:89:ba:87:77:8e:
91:e3:6f:cf:fc:45:dd:24:4f:a0:be:ac:d1:59:78:
f4:27:9e:86:54:2d:d4:f3:6d:3a:48:a9:2b:97:71:
d7:ba:61:49:4b:3b:a3:fc:c2:27:9d:c6:b0:54:2d:
2a:cd:31:d7:31:0b:d4:dd:2f:d3:21:95:17:01:dd:
b1:b5:2b:a3:db:9f:5c:bb:0b:62:ef:7a:4a:d9:a2:
7f:41:a1:c0:0d:11:48:c9:cb:32:c3:f7:fb:67:4d:
10:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:59:00:99:92:BE:B6:43:0B:AA:BB:A8:DA:B8:06:AD:11:91:F3:76
X509v3 Authority Key Identifier:
keyid:4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:51:23:1f:ed:4b:25:51:95:f3:e2:58:64:51:05:31:e6:5f:
93:a5:c4:60:a6:74:17:14:a6:d0:b0:1a:83:28:da:6e:b5:76:
6c:6d:6e:f4:a5:d6:5b:f5:fb:30:b2:0b:6e:c8:13:cc:f4:5b:
bd:fe:6c:db:25:9f:4b:85:1f:c7:fa:c0:a8:65:b2:9a:50:16:
61:11:82:50:94:e7:cf:5b:e5:79:3e:6e:47:bb:60:10:5d:0f:
56:3f:59:9f:71:d6:4b:d8:f0:22:18:40:3f:90:87:69:c9:dd:
0f:39:30:db:dd:56:4d:3b:f6:ca:b9:38:0b:1e:5d:2e:ea:a2:
c5:9e:0b:70:73:30:31:b5:5c:40:1e:88:09:f8:38:af:01:a1:
53:3c:59:d7:04:fd:3f:10:9e:1c:33:05:45:77:a8:64:0d:62:
bd:ed:f8:f1:17:a6:bb:ec:f7:a6:b2:83:82:5e:94:51:3e:3f:
c1:91:10:e0:03:54:1c:9f:09:c1:1d:94:6b:1e:06:b9:df:2b:
50:b5:24:88:1f:be:c1:de:64:c1:e9:34:cc:d7:c4:97:25:84:
ea:f4:6e:b4:9f:16:6e:0f:63:8f:1f:5e:41:ec:54:f9:37:88:
b9:8d:1c:f3:ba:c3:a6:41:89:36:35:13:c2:38:62:72:39:51:
aa:8b:55:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:08 2026 by rpki-client