Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: 7dFjkUnIv+b9NnJxjwEZGTRRTDC4QeWGACXMC8pLPa4=
Subject key identifier: B4:F6:7E:80:4F:D3:76:FD:B7:E6:F6:F0:ED:88:CE:F8:29:84:59:37
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 019EB958C6AC5B409B2237D723D6A22B48EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 1955
Signing time: Fri 12 Jun 2026 01:01:03 +0000
Manifest this update: Fri 12 Jun 2026 01:01:03 +0000
Manifest next update: Sat 13 Jun 2026 01:01:03 +0000
Files and hashes: 1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: WDZBEhstlAxALXIkEzwj5UmNXgt2TC3q4fVly9RMjlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:c6:ac:5b:40:9b:22:37:d7:23:d6:a2:2b:48:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Jun 12 01:01:03 2026 GMT
Not After : Jun 13 01:01:03 2026 GMT
Subject: CN=b4f67e804fd376fdb7e6f6f0ed88cef829845937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:5e:74:7a:d2:f5:3c:59:53:12:55:92:5a:
e4:4a:85:fa:06:b6:24:e4:d2:82:b3:26:dd:cb:98:
52:e7:72:74:5f:4c:f1:e4:a2:51:3c:d0:b0:a6:b6:
f9:56:43:f0:80:37:bd:1a:55:12:dd:49:32:c9:33:
a2:1f:d2:94:3e:0d:e1:78:3a:2f:9c:9f:5a:bf:8d:
3b:5e:7c:6e:44:e9:21:21:63:d4:62:1e:c9:13:0e:
c2:83:2f:3f:aa:79:c4:88:35:80:bd:c7:47:ae:3f:
02:19:48:5a:46:c2:4a:e5:0f:47:0e:3e:22:e1:cb:
e7:5e:f8:9c:a2:f7:7e:20:c9:d4:c8:c4:f2:e4:63:
9b:34:5d:18:1d:9d:8f:ef:0d:27:f3:ca:ac:df:32:
b4:83:f9:7a:7a:58:74:d5:0c:f0:a4:c5:1e:ff:60:
0b:c8:d9:37:aa:8d:e7:68:1e:a4:96:71:6a:83:ff:
6d:fc:71:40:92:7f:b2:b2:f3:13:19:67:d2:0c:ee:
81:6d:4c:36:6d:25:7d:26:c7:dd:c7:7b:95:6d:57:
41:00:87:aa:4a:e9:31:7c:67:cb:1b:a6:ec:78:79:
1a:63:7a:33:86:f1:4a:bb:ef:da:cd:79:06:86:e3:
9d:81:86:09:1e:9b:94:d7:21:d5:2a:5f:32:94:f4:
d6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F6:7E:80:4F:D3:76:FD:B7:E6:F6:F0:ED:88:CE:F8:29:84:59:37
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:5e:e4:a3:ac:3a:af:2a:97:55:57:76:dc:1f:f6:e4:56:99:
e6:f8:77:9e:db:b9:1b:e6:8b:1b:a8:2a:1b:5b:77:99:85:e2:
8e:51:7b:17:f3:fc:db:fb:67:bb:20:81:d7:5f:88:39:5d:a3:
6e:7d:d1:52:96:cd:df:d3:7f:91:67:64:30:9d:2b:ea:33:08:
93:4c:ee:fa:26:59:b4:6e:b6:ee:c3:19:ee:54:ad:d2:d0:fd:
5f:a5:1a:78:e7:01:ee:24:c7:25:d5:0f:6e:cf:b4:71:f2:1d:
2d:49:fd:00:44:35:ae:dc:a9:6d:99:83:38:1e:71:df:7d:4d:
84:2c:c5:30:98:3e:3e:23:03:4f:2c:4c:ab:e9:53:6e:c8:75:
0f:59:da:7f:5b:68:5b:e1:3c:4f:e0:27:19:34:ff:84:25:24:
3e:1c:c0:3d:b2:52:2b:a9:9c:c3:95:4e:42:f2:4b:99:99:ec:
f5:d6:95:00:5d:3d:2a:58:33:41:d6:8a:65:a6:43:97:3e:0c:
4e:3a:4e:c1:1a:6a:8c:77:95:0c:7d:98:09:09:99:f7:c7:9a:
51:23:11:0c:ba:ab:c4:7b:41:b2:7c:42:8f:19:da:42:a6:43:
e1:ff:54:26:10:81:96:13:a3:33:a4:f1:a3:55:e9:cd:82:0b:
d0:61:ea:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:06:01 2026 by rpki-client