Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
File: tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft (raw, json)
Hash identifier: lgRtsbSn+WbDHcgPLzQMTdPCQMrOHaZXKRV4DnhRJks=
Subject key identifier: 9D:A6:E5:59:0D:36:18:8E:51:E0:C2:CB:6E:98:24:1F:F8:D5:33:B8
Authority key identifier: B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
Certificate issuer: /CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Certificate serial: 019D25F15BD81D7F8CEF6FDB8A3EA861BDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
Manifest number: 12D9
Signing time: Wed 25 Mar 2026 17:01:07 +0000
Manifest this update: Wed 25 Mar 2026 17:01:07 +0000
Manifest next update: Thu 26 Mar 2026 17:01:07 +0000
Files and hashes: 1: 0hNitkHNxqHDc_18OnXBaZgItKQ.roa (hash: NObu/X6pwO5Ig/Stu2qJfJzgTwRgKUDuC69hOBPSYtc=)
2: tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl (hash: U1BoU/ohQCD6gvQB5nVCwIkVE09FADCHTt9cAzPYBH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:5b:d8:1d:7f:8c:ef:6f:db:8a:3e:a8:61:bd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Validity
Not Before: Mar 25 17:01:07 2026 GMT
Not After : Mar 26 17:01:07 2026 GMT
Subject: CN=9da6e5590d36188e51e0c2cb6e98241ff8d533b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:96:7c:19:ee:76:eb:99:05:63:de:48:84:0c:
52:64:a1:55:69:ee:7e:7a:5e:4f:5d:63:2c:8e:5a:
71:97:39:13:18:87:95:91:dc:63:dc:c7:20:39:ad:
99:f2:5a:5b:7c:5a:37:c3:f7:9b:4b:13:e3:a2:d3:
17:4c:62:ac:a3:b4:d8:0d:d8:cf:4b:87:01:65:1d:
24:81:91:6b:9a:b7:97:15:f9:b2:b8:c1:c8:d8:66:
b5:c5:94:62:7a:f8:6c:64:c5:34:de:fb:fe:ee:2e:
ce:cc:24:33:e4:d4:52:40:2d:e4:19:c6:5d:f1:3d:
08:90:d4:56:f6:50:21:99:c3:bf:59:69:16:32:50:
b7:0e:8f:90:d0:31:f7:fb:a0:3e:aa:d4:f7:10:15:
35:12:71:6f:a6:17:f5:e7:01:44:4f:5d:77:19:a9:
77:61:ed:cc:ba:e4:05:56:76:c3:e3:bf:c3:44:14:
40:46:4a:e5:e1:a8:51:3a:5a:d0:b3:19:1f:9d:a3:
86:39:9f:29:77:84:a6:b6:93:fb:63:4f:95:fc:5b:
1f:67:f7:15:f9:f6:b5:99:e3:26:8b:c9:02:02:90:
6f:0d:cc:4d:8d:34:66:96:fa:6c:fa:7e:c1:d4:04:
f3:40:91:a1:62:82:44:ea:57:90:62:41:9a:04:a3:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A6:E5:59:0D:36:18:8E:51:E0:C2:CB:6E:98:24:1F:F8:D5:33:B8
X509v3 Authority Key Identifier:
keyid:B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0d:41:5c:81:4b:2f:77:d7:b0:fe:a8:ba:28:3b:3e:91:f4:
34:fe:04:71:2d:77:32:4d:c9:b1:4b:43:43:53:c2:5c:ac:c9:
f9:51:3b:06:8b:76:0c:cc:02:2c:94:6d:08:b5:80:54:27:ff:
9c:2c:a0:bd:b4:b7:cb:92:7a:63:5b:0d:2f:d4:71:5d:94:7e:
59:81:1d:3d:65:62:1a:db:1b:35:f7:6e:50:6b:14:5f:00:68:
c5:31:59:28:2a:1e:47:6a:32:b6:88:8d:15:82:34:21:1d:2e:
e3:e2:e0:15:b6:bd:e0:ae:88:03:11:32:3e:be:a9:ee:39:4a:
fb:d0:4f:87:2c:da:01:b8:65:66:71:55:c4:bd:86:b9:49:ea:
dc:38:71:d6:1e:20:e5:d2:7b:e4:c0:d5:48:f2:48:b4:a9:ef:
b7:8d:8d:75:51:89:4d:69:a7:85:95:01:80:74:50:90:2c:cc:
68:65:61:6e:be:3d:6e:dc:88:93:91:d4:74:e5:de:b4:b3:2d:
0d:e6:c5:52:50:94:44:30:64:b3:1a:49:8b:5b:12:94:e7:0f:
1f:c3:f1:3b:32:14:e9:9c:2d:2b:8a:24:c7:c5:99:6d:86:4f:
f4:a8:d4:81:d8:0d:6a:75:6e:cf:95:78:5b:3f:c6:da:22:b9:
4e:7d:0a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:40 2026 by rpki-client