Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json)
Hash identifier: QSZqaDNORMB2vjjAErekDS7ay5qGAW8w+G5dyoN3yqs=
Subject key identifier: 1F:00:42:2A:B7:D9:D8:8D:38:B8:0F:BF:AB:CD:48:DA:DF:43:D6:45
Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Certificate serial: 019D39E550CAF553E859CB7D37AA6416BE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 14:00:22 +0000
Manifest this update: Sun 29 Mar 2026 14:00:22 +0000
Manifest next update: Mon 30 Mar 2026 14:00:22 +0000
Files and hashes: 1: 3vWXTbTpDM0ymRMTdG3MOaM9Vbk.roa (hash: vKhrAJbWhh00/xBbyVciFsXn8wyB3UjGH2N5E0ovZYw=)
2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: 5B99LSnmp+S0dB0yF6P1ZwiUVSo49mEma3quiZNjTuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:50:ca:f5:53:e8:59:cb:7d:37:aa:64:16:be:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Validity
Not Before: Mar 29 14:00:22 2026 GMT
Not After : Mar 30 14:00:22 2026 GMT
Subject: CN=1f00422ab7d9d88d38b80fbfabcd48dadf43d645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:64:ca:04:57:51:ee:8c:35:65:20:8c:e0:31:
51:79:a2:ac:fc:21:44:36:3c:7d:6c:61:43:61:3f:
cc:7b:d8:10:68:42:06:0e:c4:74:a6:5b:ec:50:6f:
b4:52:96:f3:44:86:81:4a:07:3e:63:d9:22:73:b4:
80:0b:83:e2:7a:a7:f8:20:62:fe:e7:c7:d6:0e:be:
0b:d2:c3:32:46:9f:7d:89:e3:97:45:61:96:f0:57:
27:1d:0c:5a:be:8f:78:b6:7d:4e:d4:c4:29:a3:41:
26:04:c0:71:ad:d4:6d:cc:74:b3:99:5d:8d:f6:76:
a4:14:1c:68:f0:ee:78:7a:51:36:67:47:bb:bf:7e:
8b:e9:42:5d:0f:05:13:7d:21:c3:2b:99:db:57:41:
e0:c4:11:11:3e:88:7e:cf:0d:59:c8:1c:25:95:1b:
33:ea:dd:59:cb:d7:86:fd:7c:8f:d0:e2:d1:88:20:
52:27:ad:c5:36:41:21:83:1a:42:0c:93:60:ea:d7:
99:8c:0b:94:d0:0f:f9:52:a4:5a:cb:88:7f:6b:b9:
fa:92:bd:9e:e0:67:f9:de:34:88:bc:be:92:77:1d:
f5:fd:9a:2d:ac:9d:0f:ce:45:94:30:2f:89:ab:b8:
b7:be:41:ae:54:38:d0:9d:24:cb:75:c1:1e:76:31:
bb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:00:42:2A:B7:D9:D8:8D:38:B8:0F:BF:AB:CD:48:DA:DF:43:D6:45
X509v3 Authority Key Identifier:
keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ac:fc:2b:a4:c2:c5:1f:bc:2e:a2:e4:e8:55:c8:b6:9a:10:
b3:33:7c:b6:72:96:c7:97:98:eb:e8:aa:88:01:18:1e:90:3c:
c6:e4:ac:7a:43:45:1c:29:55:7b:97:1b:06:b3:3f:d4:9f:7a:
f0:f4:45:74:cc:97:fb:ad:de:d5:d4:e7:9e:06:ac:59:df:88:
39:7e:fb:03:cd:98:07:26:d6:95:76:c3:b9:78:6a:06:06:ac:
00:34:a5:8b:02:1e:26:9b:f4:96:98:a3:69:16:5e:34:98:bb:
a0:05:79:80:52:3f:ae:5d:22:9d:68:d9:9f:8e:c3:5e:bd:dc:
16:f4:25:db:96:ac:60:e5:26:4f:4b:35:b0:d5:f6:3b:dd:74:
9f:08:80:3b:3d:1b:2f:1f:4b:fe:26:2b:86:e0:04:f2:e1:78:
fc:77:90:bb:83:1f:3f:e8:de:b9:0e:a1:d8:b5:52:75:3e:58:
de:e6:2c:33:f3:79:40:f8:92:3d:c6:cd:f0:3e:f1:9e:ad:a0:
18:25:48:87:45:8d:5f:86:c5:1b:6a:c5:ab:94:e4:fc:93:7a:
a6:05:dd:c0:f6:fc:e8:59:c5:26:ec:cc:7d:7f:f1:31:82:ef:
e0:4b:0c:7d:c8:d1:5d:c5:2f:bc:10:59:e7:9a:8c:d8:77:ab:
76:52:da:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:21 2026 by rpki-client