Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
File: ThPQwKcD4JzaZMErCN2it0mgQpw.mft (raw, json)
Hash identifier: cwgq9R5vpCyUgRNj9h6vXJ8gwp4aaBp2D0t7IBvsW00=
Subject key identifier: B5:14:DB:0A:5D:64:4E:F5:7A:7C:CF:D8:C8:BB:DE:19:D0:3D:FA:94
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019D3950D4BD803BEC0C0F8186FACFFFEAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
Manifest number: 365F
Signing time: Sun 29 Mar 2026 11:18:09 +0000
Manifest this update: Sun 29 Mar 2026 11:18:09 +0000
Manifest next update: Mon 30 Mar 2026 11:18:09 +0000
Files and hashes: 1: 3DRnLleYgmOxzLFKLqx0UvPANU8.roa (hash: D3YwevkAS8QwWY5TwycbG2uikKTnGbyw94j9DdcDxQs=)
2: ThPQwKcD4JzaZMErCN2it0mgQpw.crl (hash: 1ZSYGaSg9EcqNydr4X8fEQxlg9cTGX9DhXJQqxbm5v8=)
3: cICVe4KZ675m8Dg1RqECpOJ8Dp0.asa (hash: ezQu+wOZ+7v7t2FdNh7IJPPoUwXLmpeXhU+n9wR9WKU=)
4: w15_5Pw6YNCa9BuZawakXYCf3M8.roa (hash: KKbNWbjHOrntBAMd1tqvEzHYIX6t8YcsC3l308ukvLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:50:d4:bd:80:3b:ec:0c:0f:81:86:fa:cf:ff:ea:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Mar 29 11:18:09 2026 GMT
Not After : Mar 30 11:18:09 2026 GMT
Subject: CN=b514db0a5d644ef57a7ccfd8c8bbde19d03dfa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:3c:ac:15:7b:12:23:33:15:b2:e2:4b:d9:
95:0c:89:70:88:b5:20:04:37:68:de:20:fc:8a:71:
fe:5a:2a:d7:2a:5f:fb:5b:59:44:1c:e5:f3:e5:07:
1c:ae:bb:5c:b5:a0:5e:1f:a6:14:6b:0a:19:94:91:
7c:04:3f:e6:e0:9a:fe:cb:57:51:63:8c:83:67:cb:
92:ef:6e:4a:d0:25:b2:2e:7b:f5:fc:71:0a:4a:e0:
b1:9c:51:76:82:fd:dc:da:a8:55:39:72:14:32:89:
53:20:de:1e:a9:10:07:9d:6d:97:0a:92:76:fa:07:
bd:d7:ea:4d:05:41:8e:9f:e7:73:fa:41:1d:c1:ad:
fa:04:16:7e:3e:54:ff:4e:f4:c5:aa:45:61:44:b9:
fc:47:5b:89:72:4e:1d:0e:6d:31:18:1c:ff:38:2e:
4a:94:64:4d:d7:7e:1d:98:72:fe:37:7e:96:89:fe:
00:3d:5e:40:90:8f:16:06:c0:3a:5a:49:31:f3:69:
4a:b7:09:83:7c:75:02:06:1a:90:82:be:1e:6a:bc:
8c:1f:93:2e:8a:39:cd:03:43:8d:c7:93:65:d1:bf:
e2:c0:ab:5d:4a:70:41:29:38:25:a5:ed:02:41:52:
10:65:77:80:21:89:20:28:2b:32:d0:23:81:21:08:
05:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:14:DB:0A:5D:64:4E:F5:7A:7C:CF:D8:C8:BB:DE:19:D0:3D:FA:94
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5e:57:6e:43:d6:71:95:75:45:6b:ca:26:51:98:e9:b8:8f:
87:cf:15:57:9b:aa:31:e1:96:bd:78:62:3b:bf:f9:6d:fb:0b:
2e:16:e5:f6:a7:cf:f7:b1:bc:9f:eb:b9:69:4d:d4:b9:f8:44:
3b:d3:4b:1c:c5:25:97:ad:6b:38:09:b8:17:2f:29:45:ab:00:
9a:ec:37:70:ed:56:4a:51:55:ec:4a:68:4c:e0:94:76:95:28:
33:9e:5a:eb:6c:28:fb:13:f1:43:87:95:3d:e9:01:ef:c5:ab:
8e:7c:ac:5f:51:c3:be:ca:1f:6a:15:15:90:f5:e1:ad:95:4f:
76:d3:7f:e5:ea:a5:44:1d:28:be:57:2c:c1:ba:3d:f9:ad:16:
4d:36:b6:c6:dc:8d:27:9a:62:91:b0:af:01:32:87:8f:f0:f4:
54:f5:c6:62:a5:38:b3:48:2f:3d:5c:bc:89:c9:93:2a:40:8f:
3f:39:7b:89:51:ef:9b:28:8a:78:a0:c8:39:50:e4:f2:6b:6a:
c0:94:81:f5:d9:80:93:64:54:0f:c4:0d:43:1c:29:e1:96:bf:
e3:64:18:11:d1:0c:11:2a:c5:3d:c3:88:8d:6c:37:5c:8e:3b:
2b:25:38:8c:4f:f4:eb:24:7e:08:b4:a0:ee:56:9a:31:f5:52:
73:d8:54:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:17 2026 by rpki-client