Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
File: ThXfaIw66uP2he1Es5bCGYOVhh0.mft (raw, json)
Hash identifier: LFQN3tSX9uWNKAJD2hbqQVIHQx2+G1BxTyoEDeBOhlw=
Subject key identifier: 9D:26:FC:68:B5:3A:49:22:69:6E:E4:A0:D2:C1:F1:AC:BA:FA:6C:FC
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 01A0E1AB6BC0DE87822C3CCEFD616FAD7BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
Manifest number: 1023
Signing time: Sun 27 Sep 2026 07:01:42 +0000
Manifest this update: Sun 27 Sep 2026 07:01:42 +0000
Manifest next update: Mon 28 Sep 2026 07:01:42 +0000
Files and hashes: 1: 8O3AGuQIhrlb2IfzM6V4tcLRdYw.roa (hash: WlnM/QzatMyerGm0OoWe7csktSam0ZWSgVvAv1lTVgg=)
2: HWctAdx2obrE3iukcBA26ddQb60.roa (hash: mlqXm7llYZDIH4sG8l62C5xHyOEbOOaYIPrVf894QoY=)
3: Nu3EJkNT_L4Y1dVbXdBaOuwi8ak.roa (hash: w7pIzOCnx2UvrBAGfaTsFND3uOFAQFekA5rwetnu5CE=)
4: RFfxQlgpEPrKePaKGQadR6EJSqs.roa (hash: oi8mU13gbqdkE5qYPVo/94WYOHiVBIqcRLFc6Pbaf40=)
5: ThXfaIw66uP2he1Es5bCGYOVhh0.crl (hash: EPXnHogNP0PDKJV/d6Dy0Zd7XZvDdvq191pDQ2x9GY4=)
6: Zh6-sCTrmtyYMbiN3qaDaEUjzS8.roa (hash: 4ShBh5y0hjz1aSzm7VwIqgbx0rRcZCyuU9YRysEUjUM=)
7: chNBYIE4gA8jrWAxZUlShBGqlPs.roa (hash: qmmZ4LhW1qkM2Wcq2XSopnjfKwBuiAKH7aTKlWJ/VMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:ab:6b:c0:de:87:82:2c:3c:ce:fd:61:6f:ad:7b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Sep 27 07:01:42 2026 GMT
Not After : Sep 28 07:01:42 2026 GMT
Subject: CN=9d26fc68b53a4922696ee4a0d2c1f1acbafa6cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:c7:f0:a5:3e:52:d2:9c:79:fa:4f:6e:07:
15:1f:19:8f:e1:75:64:bf:2c:12:2f:83:dd:aa:01:
7c:43:28:97:19:aa:81:3c:af:9f:31:0c:98:20:6f:
4f:54:af:5b:57:46:6e:9c:1a:e9:dd:2e:10:e5:f2:
52:ae:a6:6d:2d:39:3f:9e:3f:0d:17:19:41:c2:f1:
6f:78:d2:97:eb:d8:6a:f7:66:95:b5:4d:5c:62:ab:
3d:0c:2e:27:82:0c:b1:1b:ec:7e:56:ff:1b:83:ef:
01:4f:df:ae:cd:b8:6c:1f:26:03:c6:75:6c:92:95:
d2:40:85:a0:38:0c:80:68:21:a0:39:05:07:af:95:
e8:b2:fa:57:51:78:0b:ee:5c:e4:6e:30:5f:bf:fc:
58:db:22:52:05:9f:e6:c9:13:59:70:e5:e6:9c:70:
0c:e8:34:d7:c8:c9:86:7f:b4:ec:84:30:65:2b:84:
08:cb:bc:fe:14:72:2f:3b:bd:49:19:5a:e0:37:83:
5f:58:7c:46:47:a8:07:ce:f1:fb:fb:40:02:eb:0c:
d4:d6:f6:81:f5:0c:67:45:43:dd:c0:01:cb:ca:a3:
c6:8b:a3:01:ec:fe:cb:0b:e4:40:9d:4e:2b:ad:8b:
8f:3f:bd:e1:00:90:56:db:8e:46:d7:73:17:e6:55:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:26:FC:68:B5:3A:49:22:69:6E:E4:A0:D2:C1:F1:AC:BA:FA:6C:FC
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:08:64:02:18:7a:f8:6d:c8:6f:18:f5:94:fa:a7:97:51:6d:
27:15:fe:a5:25:c7:d1:5b:40:7f:2f:95:c9:33:e2:07:04:8d:
7e:89:df:68:25:77:c7:5e:0d:84:19:46:15:0d:73:27:a4:14:
bc:e0:ba:48:c4:f4:af:e4:5b:ee:d0:29:78:ab:ce:ab:8a:db:
d0:07:03:4d:1a:f3:f3:51:19:d6:e9:33:cd:3f:e1:d6:ed:5c:
aa:c8:15:5a:d0:8c:b7:28:c3:9c:67:f4:c9:7a:5f:20:5d:95:
7c:04:33:d6:ed:bb:46:db:46:bd:d1:2c:69:4b:f1:a7:86:1e:
a1:d9:50:2c:22:ef:8e:05:96:28:0e:99:53:1e:d1:98:87:69:
1b:35:c2:f7:55:99:e9:c8:fd:1b:06:ec:bc:90:77:85:c7:d9:
19:53:c9:31:94:d2:1c:c0:c0:80:2d:47:f6:1b:74:82:e6:03:
fb:46:e5:11:c3:19:4f:5e:6b:31:1d:5c:9c:eb:08:a1:7b:df:
ec:60:bb:a1:20:b1:e6:b0:11:5e:ab:e6:95:a4:e1:d5:b5:36:
00:b5:82:bf:16:97:0b:e4:fc:26:6c:f6:ee:89:cd:11:c4:dd:
14:28:8b:1b:35:54:8e:61:90:54:98:59:25:28:ba:fa:3b:56:
86:64:17:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:16 2026 by rpki-client