Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: zs8rnx6CgiX+zFhD1xkBATo6E3QL25+eslMpCupYols=
Subject key identifier: 21:86:F3:9B:7A:89:E8:3F:44:6B:C7:D0:E6:E1:AA:B7:A5:F3:46:74
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 019FA11675A24E11E4196B45FEDBAD94E20B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 19CD
Signing time: Mon 27 Jul 2026 01:00:31 +0000
Manifest this update: Mon 27 Jul 2026 01:00:31 +0000
Manifest next update: Tue 28 Jul 2026 01:00:31 +0000
Files and hashes: 1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: zk6BwmC8APWvncfRWXSRcMGWvohUI4u3GZK41UUOgkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:75:a2:4e:11:e4:19:6b:45:fe:db:ad:94:e2:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Jul 27 01:00:31 2026 GMT
Not After : Jul 28 01:00:31 2026 GMT
Subject: CN=2186f39b7a89e83f446bc7d0e6e1aab7a5f34674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:02:97:02:ce:3b:36:ee:0b:ae:c9:8f:2b:b8:
b0:bc:2d:84:71:81:3c:47:dd:97:e9:8a:c3:6c:30:
9e:ed:54:8e:6f:a1:62:5c:ac:47:b2:80:5d:18:56:
28:74:b8:80:25:fb:3e:14:dd:f5:82:76:57:f4:52:
c2:a9:1e:23:8e:50:87:16:a0:1c:08:80:3e:c2:ce:
8d:d6:11:7f:70:36:79:57:fb:7a:dc:06:49:30:c7:
b2:73:5e:b3:31:d9:c7:5b:3e:9c:7d:e5:a4:e4:d8:
a2:39:92:68:7f:21:aa:6a:4a:d3:bc:14:98:72:e1:
69:5e:45:b4:9c:51:3f:0c:1f:7b:6e:f3:3f:d8:a3:
69:04:a1:5f:97:27:b9:af:a6:de:3f:13:44:9b:32:
b6:36:f2:d1:2a:25:c3:83:70:7c:de:99:6c:d4:95:
5c:c3:15:3f:58:39:d9:db:04:cd:19:3f:f3:a6:74:
27:72:77:76:3b:f3:fc:0d:d5:b3:f3:dc:7c:5f:c5:
67:2c:e7:05:23:b1:a3:68:e4:58:29:88:12:fe:4d:
c2:a6:b9:3b:d2:cc:0a:39:32:6f:08:04:d5:37:60:
c9:f0:6d:91:bf:8c:57:52:cd:30:02:d6:06:24:82:
63:c0:23:3c:f8:5e:03:32:d3:ae:54:a3:a2:a1:f4:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:86:F3:9B:7A:89:E8:3F:44:6B:C7:D0:E6:E1:AA:B7:A5:F3:46:74
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9b:4a:4b:65:8a:af:6c:0a:a4:3d:13:bb:e6:f0:66:d3:60:
25:c2:53:73:b4:3e:e2:24:7a:26:a1:dd:26:ee:37:c0:7b:3d:
d5:bd:0f:69:c7:1f:67:78:a1:98:b5:5d:07:73:37:2b:4e:b5:
65:5f:43:89:b1:e5:ab:92:84:09:8c:fe:e3:fe:66:14:9e:13:
d3:4e:30:5e:a9:4a:5e:7b:77:6b:85:14:94:30:ce:52:80:5e:
20:c4:6d:42:06:a7:00:3d:d4:00:38:ef:7e:f5:54:93:41:bd:
af:d1:94:3f:ff:99:1c:27:12:cf:a9:f0:62:ff:9a:7d:ee:61:
f2:0b:51:d5:47:84:86:09:d2:c9:c5:a5:31:fe:31:9d:6b:13:
5d:38:5c:e5:0e:99:a3:80:d3:be:79:27:d1:45:f4:80:75:12:
4c:52:96:be:cd:73:c5:ea:14:f6:0d:cc:09:58:f9:c1:9d:3a:
85:30:a6:a7:4c:1a:1e:8d:92:ce:91:a7:5a:34:ef:10:19:e7:
83:19:4c:c3:c8:a4:8d:56:cf:68:ff:ce:e3:4d:81:f4:fb:78:
70:55:6f:bb:48:93:ae:ec:bf:c4:75:73:10:9c:19:db:f4:bb:
64:a1:db:f0:aa:f5:67:4b:ca:34:d6:7a:5d:77:ab:f0:ab:19:
41:4d:49:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:39 2026 by rpki-client