Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: B0w6grZu/3+pClewiZwfYemUkUukNOtktrO3lnhRx50=
Subject key identifier: DD:0D:6A:FC:91:34:0E:BF:C7:CA:62:87:63:27:2A:A1:FC:18:BC:DF
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 019DDBB08C204E8CD3E71DD4EC2BCF0AE73A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 0D29
Signing time: Thu 30 Apr 2026 00:01:13 +0000
Manifest this update: Thu 30 Apr 2026 00:01:13 +0000
Manifest next update: Fri 01 May 2026 00:01:13 +0000
Files and hashes: 1: 4HE55QqTfljWCn4cZ1ai8cvlh4Q.roa (hash: Urls4Wea48yb11KMoVdUctKI04Yz3x+qj0Xh8gfQ8ic=)
2: ZI0XBxKngNfebDmdNmRzMmhs3_c.roa (hash: QNWQmpn8TQdq4xaJXKJjh0gyorKFkSra2zQiLtm/C4o=)
3: gbhgQ3B2uQKFPVeFw6hdlGGc7-M.roa (hash: G0Tz2y63qfWHb3YGepEYqUMgHFr/+KkjDltfUYTk6fM=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: wFunDSVijeasREjNs0LkZPqiIXgwSrNSWLGBtdMylvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:db:b0:8c:20:4e:8c:d3:e7:1d:d4:ec:2b:cf:0a:e7:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Apr 30 00:01:13 2026 GMT
Not After : May 1 00:01:13 2026 GMT
Subject: CN=dd0d6afc91340ebfc7ca628763272aa1fc18bcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5d:45:3c:a7:db:46:d6:10:ae:67:8c:be:5a:
71:23:c7:a3:54:6d:76:55:a7:56:22:fc:9a:b2:a4:
19:09:cb:8e:e8:e5:04:50:dd:52:ed:09:d4:de:f1:
44:4f:f6:16:c0:68:1d:56:74:fc:4e:47:80:e5:f0:
aa:70:23:94:a9:bb:27:57:82:96:16:64:d5:ec:3b:
86:18:1c:df:86:99:2a:d5:be:dd:e5:00:ac:59:7f:
f4:73:da:a4:e2:ba:c5:07:c6:a0:c7:44:7f:b1:cf:
31:15:35:ee:fa:65:44:95:10:b5:0a:cd:6b:84:5b:
33:0f:ae:e9:f5:9d:0d:c3:25:ad:9d:de:fb:50:08:
c3:50:70:1e:7a:48:58:57:7d:b9:d3:21:d5:54:d9:
d5:26:a3:a2:89:48:51:45:8c:75:5f:fd:2c:35:6d:
21:a5:ce:fc:9b:5e:e8:2a:f9:4c:8c:88:92:29:a3:
fc:2d:a4:d1:d5:73:0e:6a:b6:e3:d2:d6:6c:14:69:
a3:d0:87:df:93:a0:03:38:05:31:21:35:7a:8a:ce:
6c:0a:40:88:30:98:23:f4:c1:df:d0:c5:3b:34:54:
c4:25:2d:d1:04:0e:df:37:9f:9a:7a:fd:7f:16:aa:
88:32:85:15:d2:6b:b6:d0:9d:8b:9a:7b:91:f7:cf:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0D:6A:FC:91:34:0E:BF:C7:CA:62:87:63:27:2A:A1:FC:18:BC:DF
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:69:b3:a7:72:35:82:d5:41:ff:29:1d:ea:ab:c3:e8:fe:e9:
d8:c1:ee:7e:a6:dd:61:8f:5e:6f:6f:c9:05:89:1e:9d:e6:33:
95:d9:30:5c:22:ea:e4:5e:3e:9e:cd:4f:e9:28:1e:a5:0a:f1:
8f:0f:0a:53:a0:5a:b7:15:e5:43:5a:d9:fa:5b:41:ef:58:35:
ad:54:60:4a:02:2b:56:0f:d4:46:03:2c:d0:fd:bb:13:56:86:
52:43:b6:74:ac:44:c2:c4:f1:11:d1:2d:5f:ad:c9:43:51:29:
76:04:ab:fb:0e:8a:1e:dd:74:2f:bd:57:98:2d:fa:b4:ef:16:
d9:ae:64:23:b8:02:a4:ce:0c:f5:ab:6f:05:59:e1:4a:f6:c4:
2b:e8:d7:31:54:d0:39:5d:1d:45:cf:c2:23:0d:94:2b:27:fa:
ba:af:80:25:30:eb:3f:13:e9:86:31:fd:23:1a:8e:ef:56:3a:
2e:a6:6c:00:ae:8e:ab:58:c7:bc:e1:ca:bb:08:fd:e5:75:32:
af:56:44:e0:2d:34:b2:5e:1d:ba:b4:1c:9e:e7:93:ab:8c:ec:
a2:7b:b6:1e:23:68:37:e0:ab:00:df:fb:d6:bf:55:b4:d6:6b:
fe:4b:ae:60:79:0c:14:a6:c0:94:b7:4c:d5:af:62:94:40:4c:
72:9b:96:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 08:26:29 2026 by rpki-client