Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
File: ThXfaIw66uP2he1Es5bCGYOVhh0.mft (raw, json)
Hash identifier: L7rQNIK2MniNTBESF6nnmaiDVcs2nfxR++odXOdTvPU=
Subject key identifier: 2A:86:82:70:E4:21:36:C5:70:D8:C9:1D:EF:C5:5D:BB:80:7D:E3:71
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 019E1DFE07708E06BB23069B935463A6982B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
Manifest number: 0EB4
Signing time: Tue 12 May 2026 21:00:47 +0000
Manifest this update: Tue 12 May 2026 21:00:47 +0000
Manifest next update: Wed 13 May 2026 21:00:47 +0000
Files and hashes: 1: 8O3AGuQIhrlb2IfzM6V4tcLRdYw.roa (hash: WlnM/QzatMyerGm0OoWe7csktSam0ZWSgVvAv1lTVgg=)
2: 8bHRc8tr2a4XBd3O15Qoano2tfQ.roa (hash: orjr1SLl5fYCt3s+uAWK9iZFvIcZNLQi4CUpABQKDvk=)
3: HWctAdx2obrE3iukcBA26ddQb60.roa (hash: mlqXm7llYZDIH4sG8l62C5xHyOEbOOaYIPrVf894QoY=)
4: Nu3EJkNT_L4Y1dVbXdBaOuwi8ak.roa (hash: w7pIzOCnx2UvrBAGfaTsFND3uOFAQFekA5rwetnu5CE=)
5: RFfxQlgpEPrKePaKGQadR6EJSqs.roa (hash: oi8mU13gbqdkE5qYPVo/94WYOHiVBIqcRLFc6Pbaf40=)
6: ThXfaIw66uP2he1Es5bCGYOVhh0.crl (hash: tOJr4P4wvkbPiQw2rmUnMYT5cNVuA+px4KM30Z6dbPA=)
7: Zh6-sCTrmtyYMbiN3qaDaEUjzS8.roa (hash: 4ShBh5y0hjz1aSzm7VwIqgbx0rRcZCyuU9YRysEUjUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:07:70:8e:06:bb:23:06:9b:93:54:63:a6:98:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: May 12 21:00:47 2026 GMT
Not After : May 13 21:00:47 2026 GMT
Subject: CN=2a868270e42136c570d8c91defc55dbb807de371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:05:e4:65:0f:d0:72:50:7f:39:4e:38:8e:
6f:d6:80:ad:18:39:38:7b:ca:3b:ad:b8:a8:b5:69:
60:7f:6b:5d:4a:ee:21:8b:3b:c4:ad:94:71:ed:3d:
47:d1:50:2d:af:34:cb:45:71:11:dc:d0:ed:9d:8b:
91:38:f2:2d:ae:3f:b5:6b:5f:40:70:b7:9d:55:24:
32:87:dc:4c:67:45:f4:83:c2:8f:03:2e:9e:6f:ea:
dd:bc:5c:49:28:65:08:1b:48:0c:3d:c2:0f:df:09:
f5:6d:39:10:78:65:5a:fe:61:6c:d5:2d:ac:a0:32:
90:a3:e9:1f:9f:fa:86:b0:76:8c:cf:73:0f:96:ed:
e1:e5:c4:74:64:a1:76:2b:f5:a1:74:fa:ab:12:fc:
d5:d7:6b:91:4d:e7:18:81:5a:87:95:47:e2:96:c1:
39:10:70:f8:49:47:fa:9b:dc:77:c2:1a:9b:24:2b:
e9:61:9a:d9:3f:ae:2c:17:7a:b1:3b:8c:8c:ea:3e:
03:68:62:ff:76:ff:bf:28:ff:37:7b:e3:3b:15:44:
9f:c7:24:b8:32:54:36:58:b9:78:cc:ed:66:0e:52:
57:89:d5:1a:2c:ef:f3:d5:5b:95:82:30:83:ca:b0:
4e:45:bc:01:3a:be:15:b4:39:40:b9:f9:78:37:bd:
fd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:86:82:70:E4:21:36:C5:70:D8:C9:1D:EF:C5:5D:BB:80:7D:E3:71
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:09:98:40:26:ce:86:dd:50:b2:a2:45:a2:e1:89:75:84:95:
1f:20:72:82:31:12:91:a7:60:e9:f5:2c:a3:74:f6:06:a9:28:
67:00:b3:e5:47:14:a8:7b:4f:3b:e9:f1:b9:cc:61:d8:66:07:
fb:35:d8:cc:16:0e:37:d7:82:70:65:02:83:11:2c:f8:ac:41:
cd:4c:5e:1e:a4:d7:ff:aa:50:c2:5f:5a:b9:4b:66:45:da:cf:
37:18:12:43:72:6e:7f:f1:b5:fd:fd:71:9a:21:ff:4d:25:ca:
af:2e:91:61:6d:c7:ff:c7:c7:96:45:00:ae:1a:f9:ed:de:99:
3a:bf:58:ef:b8:62:09:94:02:d7:78:71:bd:82:58:d2:7f:52:
ce:37:2c:9b:e7:51:1b:42:44:aa:b8:78:eb:ec:31:1b:a9:4a:
9b:1b:19:63:b1:f7:32:67:85:4b:a5:4a:94:d1:71:b8:96:c8:
e7:a7:4d:39:e5:87:38:72:7b:df:54:9f:7e:49:35:cf:49:ae:
58:1c:e4:1a:73:90:fd:22:ed:06:df:9a:dc:b5:74:b8:d8:79:
58:89:ec:53:02:df:fb:de:84:ba:13:b4:90:59:9b:78:f8:c2:
df:70:fc:35:c6:96:2c:02:88:c3:30:ac:b6:53:63:f9:7b:67:
c2:e3:ff:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:03 2026 by rpki-client