Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: G3g9dVE5ZoqMN69J0MkuVrcWvb38RZJln5S53gKaNBk=
Subject key identifier: 4A:CA:78:27:AF:4E:01:00:1F:E8:B2:2C:F1:2F:0B:AF:3C:FA:86:26
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 01A08E9FB962F356BC3ED05263E734A5AB87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 1A48
Signing time: Fri 11 Sep 2026 04:00:27 +0000
Manifest this update: Fri 11 Sep 2026 04:00:27 +0000
Manifest next update: Sat 12 Sep 2026 04:00:27 +0000
Files and hashes: 1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: M9FVQo5UZ6zwIYPcQlhoFXXQiFf9JEAD7OeFcMWNnq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:9f:b9:62:f3:56:bc:3e:d0:52:63:e7:34:a5:ab:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Sep 11 04:00:27 2026 GMT
Not After : Sep 12 04:00:27 2026 GMT
Subject: CN=4aca7827af4e01001fe8b22cf12f0baf3cfa8626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:66:4f:6f:aa:08:d6:27:eb:b6:d2:ac:10:ea:
c2:39:8b:47:25:24:ce:0f:22:f9:ea:ea:bf:fb:8d:
4c:3c:cd:cc:e4:69:fa:53:32:e3:30:12:23:57:2a:
a7:ae:92:f0:9d:d4:69:80:80:51:60:32:ea:b4:7d:
d2:10:a7:ce:05:de:c1:c2:87:1f:ae:22:f7:44:ae:
f8:01:0d:e6:e3:81:c7:36:1b:86:03:a8:b6:4b:f5:
ec:02:22:1d:5f:7f:d0:28:5a:12:31:2b:86:37:f7:
6c:9f:9a:69:66:f0:55:e4:22:70:d8:28:b4:46:79:
f2:12:e8:01:bf:e4:a5:ac:05:e1:5c:93:33:e6:59:
11:4b:0f:38:fd:de:e5:ee:be:a9:14:79:74:12:e2:
83:ab:e7:1c:02:6e:e0:dc:a7:82:7f:d6:64:0b:ad:
2e:07:84:9e:fe:2d:c3:72:46:7a:fd:eb:d8:4d:e5:
06:31:d4:50:63:62:44:33:91:3c:20:e9:01:33:a3:
f5:b8:16:af:36:d4:82:00:9c:cb:00:76:65:35:25:
2c:ce:a8:9a:54:42:6f:9c:8c:6c:b0:4f:8d:fd:e4:
03:6c:5b:12:84:7e:99:b4:bc:9a:aa:28:fc:77:8e:
57:07:96:b3:21:c1:3a:cc:da:73:d5:ec:3c:9a:4e:
20:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CA:78:27:AF:4E:01:00:1F:E8:B2:2C:F1:2F:0B:AF:3C:FA:86:26
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:90:ec:53:5f:f4:5f:0f:3b:02:b0:c5:83:ea:be:ed:45:4f:
d5:3e:22:c3:65:05:99:5a:5d:df:82:9d:72:70:44:6a:16:de:
b3:04:83:6c:5c:39:32:54:b5:70:c4:c2:2d:32:7b:4b:71:d3:
72:e0:f9:70:4c:6a:a9:3c:df:be:29:3d:52:35:44:2b:ac:35:
56:0e:98:7f:53:f2:7b:f1:d6:d9:f2:9b:d2:87:a5:75:e2:5a:
9a:2d:8b:7b:f3:01:73:83:ee:ea:8e:c1:5b:84:d9:06:0d:84:
96:58:7a:4a:dd:0d:68:12:7b:26:ba:68:8e:f3:7b:47:4c:ae:
49:0a:c5:df:f8:35:eb:ef:86:47:f5:9f:f6:ac:2b:91:00:f5:
47:32:80:f2:7c:d4:0a:a3:18:6e:a8:1b:38:14:1d:9c:76:66:
a4:31:3f:cf:3b:3c:ab:b8:e7:87:05:5d:06:a9:a0:f3:19:01:
41:5f:28:ea:9b:b6:52:7c:69:b7:b0:17:75:1a:1f:c2:15:cb:
98:3b:a9:28:46:bb:c9:b2:75:60:4c:d0:90:8a:02:78:3c:60:
21:26:ad:68:3f:54:5d:59:82:35:a1:7e:40:e7:47:e3:31:1f:
f9:67:c1:57:47:1e:ed:c4:6c:1c:dd:4c:12:c1:25:a5:4c:39:
d8:c2:5e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:07:49 2026 by rpki-client