Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: fQl8/2vXm+G/9R9G0QanhTCHn0k3J70TaLzTe9PEwDQ=
Subject key identifier: 48:96:5C:6E:90:CD:BE:11:10:B4:7A:F6:BD:A9:B2:6F:F5:CA:A2:06
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 019D3909AE2209C15E50B3799A53CABA2B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 10:00:28 +0000
Manifest this update: Sun 29 Mar 2026 10:00:28 +0000
Manifest next update: Mon 30 Mar 2026 10:00:28 +0000
Files and hashes: 1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: E9LpwL2i0BLu+P37o+lBeynl3gzRJK3PVJaTKA9WK3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ae:22:09:c1:5e:50:b3:79:9a:53:ca:ba:2b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Mar 29 10:00:28 2026 GMT
Not After : Mar 30 10:00:28 2026 GMT
Subject: CN=48965c6e90cdbe1110b47af6bda9b26ff5caa206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:05:02:02:20:4b:6d:25:0f:93:d3:95:d3:b9:
d1:7e:e9:84:98:60:77:be:e1:91:8e:5d:48:cd:15:
73:cc:be:aa:f0:78:f5:81:e6:cc:3f:76:7b:b7:cd:
f8:e2:79:e4:a2:47:66:28:28:86:67:d6:d5:82:6d:
93:b7:12:47:23:69:cc:50:ba:05:11:33:74:45:9b:
fa:f8:d1:37:c3:ae:3d:06:2d:f0:d2:e8:93:91:45:
13:1c:e7:41:5b:40:37:47:80:f1:aa:ae:83:c9:90:
54:ff:50:ac:ce:34:b6:fa:a8:cf:6d:27:c8:dc:72:
b6:d4:36:de:83:c6:75:f5:8e:7a:4b:f7:50:6e:ab:
36:42:6e:55:96:fd:3d:5b:10:e1:bc:72:bf:55:2d:
2c:e0:53:ea:64:57:f8:92:ea:86:0a:2b:7a:5d:28:
67:3b:d8:ba:c8:85:00:d5:a8:25:f5:a3:02:2d:46:
96:cb:58:ac:45:76:79:97:51:c3:66:e9:fb:80:73:
8a:56:5f:0f:85:99:d6:82:4e:4f:7e:22:0e:d8:92:
59:87:97:56:58:91:4e:52:a7:ba:e9:ee:fc:df:52:
cb:83:d8:ce:84:a2:5f:b9:3d:20:6f:c7:a6:9e:a9:
5f:39:04:03:d7:5e:75:ba:8f:be:24:0c:8b:81:2a:
5a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:96:5C:6E:90:CD:BE:11:10:B4:7A:F6:BD:A9:B2:6F:F5:CA:A2:06
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:6d:71:57:48:c5:cc:87:6e:a8:ab:d5:0b:b8:7e:7b:e8:de:
2c:1f:13:2e:4b:e7:13:1f:54:36:43:a5:98:a2:f0:a3:65:bc:
0a:08:09:44:fe:1c:a3:f9:87:9e:c9:30:a9:44:b5:a9:50:e6:
28:fd:7b:1e:42:f4:f9:9d:d1:20:e5:e4:5f:35:db:55:0c:7d:
ce:9e:6e:f4:0a:3a:7e:a7:fc:44:f2:3a:e9:f0:31:1d:74:aa:
a6:e8:02:9c:8c:8a:61:77:ee:be:12:48:40:b5:4c:a4:83:d8:
00:4c:e4:0b:32:3c:a6:e3:71:41:ce:aa:af:dd:d7:57:9d:ce:
cb:61:44:00:e0:ad:88:ff:8b:12:f3:e4:e5:d2:77:d2:f7:8d:
9d:a4:36:1a:c3:2a:21:40:44:3a:42:b9:39:8f:81:7b:86:44:
a6:d0:47:9c:7c:21:16:09:a1:cc:a6:6c:48:02:bd:74:54:1c:
cf:2b:f4:32:c2:07:11:c4:c1:ca:49:36:ea:11:82:5e:43:1d:
e9:ec:63:bc:65:f0:7b:86:b2:7b:c4:3c:a0:2d:cc:c4:71:7a:
78:43:e8:17:d8:e6:b7:38:f3:60:8d:77:20:43:93:97:35:51:
a3:b4:f4:90:6e:cb:4a:e2:eb:c1:3f:d5:ee:f3:90:ba:b5:44:
73:e7:14:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:47:40 2026 by rpki-client