Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: aF/P4D1fvKWy7oVIvALzzKiKWYHNamCL/9oMNVeLeK4=
Subject key identifier: 64:A9:4D:AA:AE:3E:E1:94:D2:17:E4:D8:35:0B:98:F6:7E:2A:C1:76
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 019FA304FBAAE8CDEB5DA302DFB1A9A7BB86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 10:00:40 +0000
Manifest this update: Mon 27 Jul 2026 10:00:40 +0000
Manifest next update: Tue 28 Jul 2026 10:00:40 +0000
Files and hashes: 1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: /Ovn9w0CzhCWcpWfyIL8EIqvozvigp8m2bIUzi7R8M8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:fb:aa:e8:cd:eb:5d:a3:02:df:b1:a9:a7:bb:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Jul 27 10:00:40 2026 GMT
Not After : Jul 28 10:00:40 2026 GMT
Subject: CN=64a94daaae3ee194d217e4d8350b98f67e2ac176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:fe:78:c3:9c:16:08:ad:89:56:4b:a7:3c:
7c:fe:e1:fc:c5:b1:96:c2:f3:7f:85:5e:1f:6c:be:
82:a4:2c:8d:e3:e4:c5:90:af:fa:49:98:0e:33:6a:
c6:df:65:bf:15:4f:8b:61:f9:e3:45:57:91:dd:3e:
e4:2d:84:ee:a0:79:19:ea:f3:51:23:bd:f4:fe:13:
a9:4a:2e:5a:b3:7e:63:c7:6c:e3:14:a5:e7:95:52:
7f:a0:e2:3e:a0:d1:d6:0c:56:93:e2:57:78:93:63:
f8:88:ce:73:de:3e:99:65:7d:fc:0c:05:2e:10:f0:
59:1a:b0:1b:af:4d:f3:8d:e3:7f:4b:ec:15:39:a5:
27:06:25:84:63:8a:dc:0e:a3:01:80:e6:70:27:4f:
d4:1e:df:7c:7e:a1:9a:69:f8:6d:91:20:4e:40:ee:
f5:c7:5a:34:bc:d9:f8:3f:f3:a9:b0:f4:bb:8c:b2:
99:86:c7:7e:71:bb:66:84:5c:ba:fd:92:f1:78:28:
ce:59:06:76:de:89:1b:fd:87:09:7d:17:dd:15:c3:
81:b6:2f:a5:a6:b4:58:f2:fb:e3:79:f5:0f:79:ea:
43:87:1f:49:ec:f7:e3:6a:d1:b6:0c:e6:5f:10:9e:
e3:10:65:f6:47:35:89:53:a2:03:85:aa:9d:4e:6f:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A9:4D:AA:AE:3E:E1:94:D2:17:E4:D8:35:0B:98:F6:7E:2A:C1:76
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b8:e1:8b:9b:93:32:7e:9c:03:9f:17:21:4f:16:90:f8:de:
9a:c3:a3:f1:bc:60:77:a7:46:0c:b9:9e:08:e4:67:39:20:14:
c7:58:c7:95:8a:d2:31:69:e3:c7:68:05:18:1d:20:5c:61:bf:
36:bc:1b:19:17:df:9c:bc:4d:b1:7b:19:2d:b1:2e:50:5a:cd:
5c:be:72:dc:78:07:8a:9a:54:0e:40:5d:b2:65:83:be:39:8f:
48:41:fb:64:a6:73:94:27:bc:6e:b0:c1:a0:7a:1d:b5:7b:1d:
48:51:15:a2:ec:13:09:0b:12:ed:f0:3c:de:81:7c:f4:6c:24:
98:a1:a4:9f:2e:b6:30:4b:ac:53:94:24:71:b7:7b:6d:bd:60:
e3:57:cb:d6:5e:f5:38:62:6c:bc:1f:50:a3:b5:ca:e9:18:1b:
d8:ee:25:ad:3f:a6:1a:20:9e:1b:1f:6f:a6:f7:4c:7a:1c:b0:
7a:26:3f:b3:17:65:34:73:23:6b:49:91:cc:ff:d7:ce:87:a2:
01:e1:66:dd:da:ca:ff:ae:ea:8b:ee:e6:2e:f3:3f:d0:a0:47:
3c:f1:4e:01:c8:03:4e:fa:ae:71:b9:a1:0d:00:f5:9b:74:eb:
56:9d:24:38:bb:64:2b:38:76:65:5e:05:06:2b:ae:93:db:76:
a8:20:4c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:37:15 2026 by rpki-client