Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: 80fDRHMpt7Pl5PRzu6/zSJeAM//OkEDZUiMMBe6Ze5g=
Subject key identifier: 4F:98:DD:83:70:3A:4B:48:9E:70:C1:BB:99:E3:5E:D6:67:92:FF:01
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 01A185D1C340BC677FA64A431BA87F021A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 1AC8
Signing time: Thu 29 Oct 2026 04:01:19 +0000
Manifest this update: Thu 29 Oct 2026 04:01:19 +0000
Manifest next update: Fri 30 Oct 2026 04:01:19 +0000
Files and hashes: 1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: 5s2Pvn08rxMB8/5oPe8ZQBKXb2qRf1U2mtJABn95OnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:d1:c3:40:bc:67:7f:a6:4a:43:1b:a8:7f:02:1a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Oct 29 04:01:19 2026 GMT
Not After : Oct 30 04:01:19 2026 GMT
Subject: CN=4f98dd83703a4b489e70c1bb99e35ed66792ff01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:9c:bf:77:a9:9b:99:ac:6d:c8:91:e9:e9:
81:f4:3c:23:ef:e0:24:fb:df:32:37:47:5d:de:63:
15:e7:6e:03:2d:36:48:42:bf:40:d8:fd:ab:24:ca:
77:fa:ce:ac:52:c7:5b:39:5e:91:1a:de:5f:ac:cd:
8a:e2:57:1d:6e:5c:34:8d:fd:f1:3b:4c:41:2d:b6:
96:70:b9:4b:c4:fe:6a:cd:cb:59:4c:38:f3:f2:da:
1a:47:2e:07:69:d9:0d:2b:96:bd:ab:4e:b8:02:58:
54:6d:e9:29:f4:2a:10:3e:33:ad:b5:e5:95:35:5b:
65:3a:3c:f8:72:eb:34:da:72:5f:ad:dc:4e:a7:d9:
8b:bd:25:cc:7a:7c:bf:b0:5f:44:94:61:b3:77:fb:
be:5b:f3:02:ff:c0:20:b5:c4:f7:d5:2c:af:ed:90:
a4:ad:81:5e:2f:d9:b2:40:ae:8a:12:d8:77:88:b3:
23:48:f8:ff:8a:88:c0:d5:11:ea:5f:eb:ab:40:6d:
cd:58:6c:2b:40:43:58:d2:35:84:41:7c:66:3c:2a:
6e:cd:e9:eb:5a:3d:f6:9f:53:c6:4e:f0:27:2c:78:
6c:62:63:3b:d2:59:72:39:84:42:7e:65:d3:5e:c1:
97:9b:b4:a8:d1:6b:3e:d7:02:67:77:54:3f:b8:85:
af:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:98:DD:83:70:3A:4B:48:9E:70:C1:BB:99:E3:5E:D6:67:92:FF:01
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:24:84:0a:4b:87:08:e3:26:f7:56:ae:ba:c5:ee:69:86:62:
eb:4a:0a:97:a8:e8:e2:5a:7b:cb:4b:99:71:43:1c:68:5c:e2:
8e:af:0e:d8:54:c7:6d:9b:93:c6:ec:31:3a:0f:4f:f5:12:a7:
ab:cc:b6:2f:3a:34:f7:51:52:ba:57:6f:9e:63:48:dc:60:a9:
e9:58:c6:2a:04:93:9f:52:70:3c:6e:b7:9c:a9:9c:1c:8e:82:
07:d0:bd:95:af:58:f8:00:5a:e4:95:92:a8:e9:10:b5:d9:d9:
fa:9f:19:ff:be:bd:8c:eb:93:40:21:64:52:fb:5d:15:80:3c:
27:25:6d:d4:ac:30:65:58:f4:e9:07:e4:39:52:14:e8:84:d8:
ca:34:3a:6c:5f:d3:14:a4:46:ab:30:d1:8c:97:db:92:7b:64:
c8:3c:9c:67:06:39:c7:7a:37:7b:8c:05:91:09:6b:1f:b1:d2:
92:9d:29:46:6b:b9:68:8d:45:f1:1c:49:fb:de:59:8b:d9:0a:
9d:5e:b1:98:72:cc:ac:2b:d5:a3:05:8c:e4:b8:1f:1e:fb:03:
43:17:c0:6d:c5:33:82:99:d8:27:17:92:1a:74:a3:dd:14:b8:
8c:6b:8f:1f:39:48:c0:de:1b:5f:c2:22:71:72:f0:77:4d:12:
32:ac:37:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGF0cNAvGd/pkpDG6h/Ahp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjFjYjliMmY4YzVkZTlkYWEzMDg4OWQ5ZTIzOTQ1Mzdi
YTNlMzgwHhcNMjYxMDI5MDQwMTE5WhcNMjYxMDMwMDQwMTE5WjAzMTEwLwYDVQQD
Eyg0Zjk4ZGQ4MzcwM2E0YjQ4OWU3MGMxYmI5OWUzNWVkNjY3OTJmZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LGcv3epm5msbciR6emB9Dwj7+Ak
+98yN0dd3mMV524DLTZIQr9A2P2rJMp3+s6sUsdbOV6RGt5frM2K4lcdblw0jf3x
O0xBLbaWcLlLxP5qzctZTDjz8toaRy4HadkNK5a9q064AlhUbekp9CoQPjOtteWV
NVtlOjz4cus02nJfrdxOp9mLvSXMeny/sF9ElGGzd/u+W/MC/8AgtcT31Syv7ZCk
rYFeL9myQK6KEth3iLMjSPj/iojA1RHqX+urQG3NWGwrQENY0jWEQXxmPCpuzenr
Wj32n1PGTvAnLHhsYmM70llyOYRCfmXTXsGXm7So0Ws+1wJnd1Q/uIWvpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+Y3YNwOktInnDBu5njXtZnkv8BMB8GA1UdIwQY
MBaAFE0hy5svjF3p2qMIidniOUU3uj44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUt
MTQ5ODcyNDNhYzU2LzEvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUtMTQ5ODcyNDNhYzU2
LzEvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATiSECkuH
COMm91auusXuaYZi60oKl6jo4lp7y0uZcUMcaFzijq8O2FTHbZuTxuwxOg9P9RKn
q8y2Lzo091FSuldvnmNI3GCp6VjGKgSTn1JwPG63nKmcHI6CB9C9la9Y+ABa5JWS
qOkQtdnZ+p8Z/769jOuTQCFkUvtdFYA8JyVt1KwwZVj06QfkOVIU6ITYyjQ6bF/T
FKRGqzDRjJfbkntkyDycZwY5x3o3e4wFkQlrH7HSkp0pRmu5aI1F8RxJ+95Zi9kK
nV6xmHLMrCvVowWM5LgfHvsDQxfAbcUzgpnYJxeSGnSj3RS4jGuPHzlIwN4bX8Ii
cXLwd00SMqw3vg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 13:57:04 2026 by rpki-client