Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
File: thvJe5gnbrO6vZ56pn4nBa4R5lg.mft (raw, json)
Hash identifier: 0APMNsinjgQLTsAzG/Rb3R488EzcCDOrjwlz3B0gPp8=
Subject key identifier: B5:3B:23:2D:0B:2A:AC:35:63:B5:08:1F:E2:75:CE:CE:E5:D6:96:04
Authority key identifier: B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
Certificate issuer: /CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Certificate serial: 01A08C0CE205B3A43FDEC71B4BFBEDA1B390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
Manifest number: 08DD
Signing time: Thu 10 Sep 2026 16:00:49 +0000
Manifest this update: Thu 10 Sep 2026 16:00:49 +0000
Manifest next update: Fri 11 Sep 2026 16:00:49 +0000
Files and hashes: 1: XJYerDR0PpzOzzlvepGEResfgcE.roa (hash: 5wfEN3Q7d2uKbWDp8Mpxi1eFLJLct6OeAjh4AL/cHTg=)
2: thvJe5gnbrO6vZ56pn4nBa4R5lg.crl (hash: gp+Sn0QcmNv4SWlTuw1j1L7xPhH0NsWbav2rGTntkI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:e2:05:b3:a4:3f:de:c7:1b:4b:fb:ed:a1:b3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Validity
Not Before: Sep 10 16:00:49 2026 GMT
Not After : Sep 11 16:00:49 2026 GMT
Subject: CN=b53b232d0b2aac3563b5081fe275cecee5d69604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:db:74:ac:6e:4e:22:3d:dd:e1:65:bd:d4:
72:13:ff:03:1b:32:d6:d3:0e:e1:9c:90:3c:ff:7e:
49:c2:84:4c:42:fd:71:bb:c4:1f:e3:cb:20:d7:4f:
85:cc:4b:cd:3d:3e:c9:53:31:2b:bd:dd:1e:62:d3:
dc:c0:26:42:b5:e6:94:3f:04:2e:d5:1a:ef:42:03:
2e:8e:b7:a0:fc:ed:09:66:3a:03:03:6c:5f:d9:45:
68:d6:e4:9d:9d:60:9a:af:a0:1c:f4:64:b0:e8:e5:
77:c3:05:a6:75:46:d7:d0:0e:c5:48:90:a4:8c:6d:
cf:71:97:ed:4c:1b:6f:27:1b:39:52:b2:36:15:26:
4a:f1:2a:92:a1:a9:a6:ac:65:85:40:af:47:cb:05:
43:82:b4:cb:69:72:49:d0:c3:56:dc:b0:59:ae:cf:
b1:57:1f:e0:fa:98:6c:e2:c4:06:be:fa:3d:4a:fa:
12:60:2d:51:4d:dd:0e:a8:99:85:db:bd:1c:20:cf:
c0:80:9e:33:84:d3:09:12:4a:66:1f:1c:c0:28:a3:
08:4f:2d:9a:7b:01:72:87:e1:bb:fd:61:4a:3e:7e:
98:d1:19:a6:c5:02:49:01:98:68:42:79:2f:59:50:
f9:b8:e0:4d:f4:55:87:fb:2f:06:e0:d0:71:35:8b:
8a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3B:23:2D:0B:2A:AC:35:63:B5:08:1F:E2:75:CE:CE:E5:D6:96:04
X509v3 Authority Key Identifier:
keyid:B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:05:9c:ae:d8:73:7e:57:f5:af:82:c6:33:90:fb:a7:27:56:
2b:f1:52:ef:59:c5:e6:40:bd:89:b3:cd:b3:ba:8b:3a:76:b4:
24:c9:70:bd:e5:f8:37:eb:a6:4f:21:0b:5b:9d:32:73:a9:67:
bc:0f:4c:26:58:44:10:fa:2f:42:79:a8:47:d9:f5:9a:9c:e8:
7d:52:d1:12:1d:c9:ba:59:16:cf:b4:51:35:39:bb:4d:66:70:
58:c4:00:2d:dd:ad:17:b7:91:84:22:ec:64:06:de:04:d5:64:
6d:7c:80:5b:80:25:dd:d9:cf:b9:98:3c:e8:f7:a9:2a:a1:70:
6c:34:dd:5e:04:e3:5c:a2:13:dd:bd:3a:5f:42:01:15:ae:4c:
36:39:cd:c1:5d:9d:7b:e5:58:e9:f8:ba:55:3c:32:83:8d:fc:
6f:99:fa:05:0a:f1:8d:bf:eb:17:25:ed:50:16:06:4e:76:7f:
c2:52:f1:30:09:20:db:4e:d6:2f:49:76:bd:8a:3f:41:1d:1c:
08:6c:f6:2d:f1:6f:89:7b:49:f0:2e:e8:2b:fa:de:d8:7b:b6:
70:02:93:e1:84:32:a8:95:0c:0b:e5:b6:ab:1d:6f:54:1b:65:
e4:a2:26:90:3e:4d:4b:e9:c8:74:bc:6b:d9:2e:96:d5:80:f0:
1f:ca:cd:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMDOIFs6Q/3scbS/vtobOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MWJjOTdiOTgyNzZlYjNiYWJkOWU3YWE2N2UyNzA1YWUx
MWU2NTgwHhcNMjYwOTEwMTYwMDQ5WhcNMjYwOTExMTYwMDQ5WjAzMTEwLwYDVQQD
EyhiNTNiMjMyZDBiMmFhYzM1NjNiNTA4MWZlMjc1Y2VjZWU1ZDY5NjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwXbdKxuTiI93eFlvdRyE/8DGzLW
0w7hnJA8/35JwoRMQv1xu8Qf48sg10+FzEvNPT7JUzErvd0eYtPcwCZCteaUPwQu
1RrvQgMujreg/O0JZjoDA2xf2UVo1uSdnWCar6Ac9GSw6OV3wwWmdUbX0A7FSJCk
jG3PcZftTBtvJxs5UrI2FSZK8SqSoammrGWFQK9HywVDgrTLaXJJ0MNW3LBZrs+x
Vx/g+phs4sQGvvo9SvoSYC1RTd0OqJmF270cIM/AgJ4zhNMJEkpmHxzAKKMITy2a
ewFyh+G7/WFKPn6Y0RmmxQJJAZhoQnkvWVD5uOBN9FWH+y8G4NBxNYuKXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLU7Iy0LKqw1Y7UIH+J1zs7l1pYEMB8GA1UdIwQY
MBaAFLYbyXuYJ26zur2eeqZ+JwWuEeZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGh2SmU1Z25ick82dlo1NnBuNG5CYTRSNWxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMjZmNjItZmZhMi00MTcwLWJlNGYt
OTgzZDRkYTEzNDQ3LzEvdGh2SmU1Z25ick82dlo1NnBuNG5CYTRSNWxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mMjZmNjItZmZhMi00MTcwLWJlNGYtOTgzZDRkYTEzNDQ3
LzEvdGh2SmU1Z25ick82dlo1NnBuNG5CYTRSNWxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZwWcrthz
flf1r4LGM5D7pydWK/FS71nF5kC9ibPNs7qLOna0JMlwveX4N+umTyELW50yc6ln
vA9MJlhEEPovQnmoR9n1mpzofVLREh3JulkWz7RRNTm7TWZwWMQALd2tF7eRhCLs
ZAbeBNVkbXyAW4Al3dnPuZg86PepKqFwbDTdXgTjXKIT3b06X0IBFa5MNjnNwV2d
e+VY6fi6VTwyg438b5n6BQrxjb/rFyXtUBYGTnZ/wlLxMAkg207WL0l2vYo/QR0c
CGz2LfFviXtJ8C7oK/re2Hu2cAKT4YQyqJUMC+W2qx1vVBtl5KImkD5NS+nIdLxr
2S6W1YDwH8rNTw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:38:42 2026 by rpki-client