Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: gGmJZigfFCRbIj1fDbq6iRk0HxN6OWX4J9HK3M8remU=
Subject key identifier: 9D:75:CB:07:1F:42:5B:0C:F1:E0:3B:A6:D0:00:FC:0E:1A:1B:BE:46
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 019CE66D526E3ADBF0987BDB5DDC3B5454AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 0CAA
Signing time: Fri 13 Mar 2026 09:00:50 +0000
Manifest this update: Fri 13 Mar 2026 09:00:50 +0000
Manifest next update: Sat 14 Mar 2026 09:00:50 +0000
Files and hashes: 1: 4HE55QqTfljWCn4cZ1ai8cvlh4Q.roa (hash: Urls4Wea48yb11KMoVdUctKI04Yz3x+qj0Xh8gfQ8ic=)
2: ZI0XBxKngNfebDmdNmRzMmhs3_c.roa (hash: QNWQmpn8TQdq4xaJXKJjh0gyorKFkSra2zQiLtm/C4o=)
3: gbhgQ3B2uQKFPVeFw6hdlGGc7-M.roa (hash: G0Tz2y63qfWHb3YGepEYqUMgHFr/+KkjDltfUYTk6fM=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: BEO15lmVW5UF4mwDPY3ZlqkYlcAbNR4qxrTJR9+zAdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:52:6e:3a:db:f0:98:7b:db:5d:dc:3b:54:54:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Mar 13 09:00:50 2026 GMT
Not After : Mar 14 09:00:50 2026 GMT
Subject: CN=9d75cb071f425b0cf1e03ba6d000fc0e1a1bbe46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:7d:dd:b9:53:70:72:7d:53:41:c3:90:a0:
72:79:5e:90:68:03:fe:e9:19:b7:47:e1:d1:88:37:
7b:19:d1:87:fc:cb:c5:5c:f7:86:83:fd:ed:42:7b:
95:83:82:38:5b:08:2a:0e:07:89:a0:d7:23:8d:1e:
f9:bc:b1:a5:e9:ef:48:e6:cb:7d:c2:57:37:b3:88:
4d:52:86:25:77:3b:86:2d:42:ec:8d:6a:18:7d:23:
17:02:a5:c3:96:db:ba:68:60:e2:6a:78:70:d8:fc:
33:0d:34:82:c0:b0:3a:79:36:78:b6:7a:b9:4e:f1:
64:ab:ba:5f:62:bd:4d:79:ba:7d:e0:e8:73:13:4b:
cc:50:2e:6a:f0:1d:30:9c:0e:a6:26:c8:97:e0:ed:
bd:e5:f6:7c:a4:55:c3:fb:bc:d6:b3:aa:3e:40:c8:
6d:15:e1:11:3d:e2:44:43:98:87:12:60:85:16:8f:
16:b0:b8:e8:dc:b0:82:a6:50:eb:79:d7:9b:36:60:
b5:23:9c:dd:c8:a1:e3:5c:dd:28:bf:43:8c:15:bd:
d5:ec:b3:64:e1:99:6b:54:ec:31:4a:f4:07:41:68:
ce:e7:ec:54:a4:74:0a:bb:ba:d9:8f:12:1e:b3:53:
1a:49:ae:0c:09:7d:94:9a:75:f9:3a:e3:a5:bb:b4:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:75:CB:07:1F:42:5B:0C:F1:E0:3B:A6:D0:00:FC:0E:1A:1B:BE:46
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:0c:e1:70:24:29:6d:82:56:4b:54:29:0c:fe:dd:3a:a7:97:
74:90:c2:28:10:2a:bf:17:fa:bc:93:98:d2:70:56:85:a8:0a:
da:fa:c7:c4:91:63:57:07:5e:49:7e:2a:4a:b4:2b:58:95:e0:
4c:b9:0c:db:05:76:a8:58:4a:97:4e:c7:e9:14:9d:a4:6f:2f:
3c:03:50:db:43:25:6c:16:10:85:2b:25:7b:ba:1c:fa:07:2e:
8f:d4:2a:ba:13:88:94:28:48:e9:97:b8:6e:ca:bd:b8:1f:c7:
35:81:97:f2:5e:a7:03:25:de:7f:42:c1:73:f4:24:b6:75:48:
e3:51:8e:0a:4e:95:32:00:1d:f5:2f:8a:df:47:18:98:aa:bc:
e8:df:20:9a:84:9f:39:d6:55:25:81:e5:c9:69:59:a4:8b:ac:
7b:83:91:f5:40:da:cc:49:82:08:52:e9:5a:69:79:7f:6e:8f:
0c:f8:a6:75:59:77:89:18:d0:40:24:90:f0:5f:4a:d0:e4:30:
21:25:14:1d:ba:cf:ff:ee:4d:04:d8:49:f9:08:3a:bf:98:b9:
40:2f:36:b2:ef:34:8f:88:fa:8b:6e:78:8d:95:f2:21:bb:b3:
ba:44:b5:a2:16:59:d1:f4:77:f0:b3:59:43:9f:18:ab:ab:68:
bc:12:0a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:24:13 2026 by rpki-client