Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
File: thPokOXEBwqIMnayyfd3sQYjxvk.mft (raw, json)
Hash identifier: 545upAmDvw1l8yA8oILiNtdHaDEYWoy12YxBEqgcDlU=
Subject key identifier: 0D:2A:96:7F:88:63:FE:68:24:5F:94:60:23:08:0D:29:E0:F8:18:5D
Authority key identifier: B6:13:E8:90:E5:C4:07:0A:88:32:76:B2:C9:F7:77:B1:06:23:C6:F9
Certificate issuer: /CN=b613e890e5c4070a883276b2c9f777b10623c6f9
Certificate serial: 01A0DBA9608B927FF7735982E5BFD6CF4393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
Manifest number: 0106
Signing time: Sat 26 Sep 2026 03:01:45 +0000
Manifest this update: Sat 26 Sep 2026 03:01:45 +0000
Manifest next update: Sun 27 Sep 2026 03:01:45 +0000
Files and hashes: 1: iSTwcsDq44xmj4bDTIa6k6RLQKI.roa (hash: qWNdY8B5/pf+1M3HkKeiYMgI3P7SCbr9CH/em0VTbyE=)
2: thPokOXEBwqIMnayyfd3sQYjxvk.crl (hash: Bqr8ZWcJkc3u2onxpMWsSX3RIVM+8fEF01FbOxb9o04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:60:8b:92:7f:f7:73:59:82:e5:bf:d6:cf:43:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b613e890e5c4070a883276b2c9f777b10623c6f9
Validity
Not Before: Sep 26 03:01:45 2026 GMT
Not After : Sep 27 03:01:45 2026 GMT
Subject: CN=0d2a967f8863fe68245f946023080d29e0f8185d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:87:5e:37:7b:71:cc:31:6f:31:1f:02:ad:
d8:88:f3:66:0f:87:35:8c:a6:e5:2e:ee:85:6a:9e:
3e:99:cf:2c:98:8d:11:7a:35:cf:b5:59:67:70:62:
05:a9:84:26:a6:d5:dc:f6:0c:e4:44:22:a9:d7:ee:
3c:a3:68:e9:81:f6:4b:d2:af:b0:41:bc:c3:df:1d:
25:20:75:88:7a:ce:c6:61:12:ce:ec:35:6f:b9:ca:
20:bc:14:c7:43:2e:41:60:6f:d5:67:7d:06:65:65:
f1:c4:07:48:22:7b:24:32:85:75:06:22:50:09:e3:
30:ce:a6:bf:26:41:3a:53:d0:d6:02:9d:0e:82:2e:
49:d4:2e:00:93:b0:d2:a1:a5:bf:98:b5:63:e7:8f:
09:4a:0e:ac:ab:b5:73:45:1b:be:ab:4a:7e:5a:47:
b7:e2:d4:7f:a0:f7:ef:34:53:29:95:3c:e3:24:2e:
2a:c4:36:7e:7d:fd:fa:59:3b:7a:f4:ed:b5:da:ae:
85:f5:4e:d1:23:5f:6d:94:60:f0:a2:19:b9:6d:b6:
3b:52:69:b8:d5:ee:4e:16:48:27:e6:ed:db:f0:66:
a8:57:9a:f3:56:26:e4:7d:e8:87:10:54:be:f5:27:
8c:d3:93:ee:93:27:a2:52:10:3c:12:9d:28:07:de:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2A:96:7F:88:63:FE:68:24:5F:94:60:23:08:0D:29:E0:F8:18:5D
X509v3 Authority Key Identifier:
keyid:B6:13:E8:90:E5:C4:07:0A:88:32:76:B2:C9:F7:77:B1:06:23:C6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6a:aa:e7:d4:a4:b9:b8:db:96:dd:96:87:f2:b6:d5:93:97:
9a:bf:9f:2f:6c:30:32:54:97:60:dc:1f:74:dd:b9:9c:6a:19:
7c:55:52:31:40:e7:86:29:f9:97:15:52:e9:f7:16:05:dd:8b:
fe:92:c9:2a:ce:72:29:44:95:a8:2e:b4:d2:8d:c9:09:99:ec:
7d:ad:00:5f:ae:91:cc:af:77:06:ef:8e:66:3a:9c:75:48:a8:
ef:d3:ec:02:e1:da:31:fc:d8:f9:95:e4:a4:38:fc:38:da:27:
af:00:2f:b4:a9:03:57:db:99:fc:e4:79:26:55:26:6c:fa:59:
32:b6:36:1d:e1:9c:93:f8:5f:b2:3d:82:50:6c:10:c1:96:f4:
ba:b8:3c:69:ed:10:5f:15:98:5f:88:fe:f4:01:b5:b4:34:f3:
c9:66:60:eb:1f:25:86:0a:88:d8:80:5c:72:a3:62:40:16:87:
d7:9a:ba:2c:57:75:b6:63:13:98:81:1d:ea:38:15:72:97:db:
6e:75:49:97:c2:37:12:66:7b:78:7c:a8:61:33:f8:58:3b:30:
38:89:ec:5b:6f:e7:4e:1e:8f:5e:74:73:e7:b3:61:ad:2c:3e:
eb:08:21:17:0a:92:a8:1d:7c:c2:6d:a3:f2:bd:bd:c9:17:39:
3b:39:16:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:04:46 2026 by rpki-client