Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
File: ThXfaIw66uP2he1Es5bCGYOVhh0.mft (raw, json)
Hash identifier: 7onUoOW+cZgWN1kXwyeXC2IFtmOqqVRCsJ8+zuhMqpQ=
Subject key identifier: 9E:69:0D:E5:71:D4:6E:AB:50:99:81:2C:A3:C3:ED:9C:D2:6B:E6:50
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Certificate issuer: /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial: 019F9392513694EE4E6B3DDF839EE5B3CE5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
Manifest number: 0F76
Signing time: Fri 24 Jul 2026 10:01:07 +0000
Manifest this update: Fri 24 Jul 2026 10:01:07 +0000
Manifest next update: Sat 25 Jul 2026 10:01:07 +0000
Files and hashes: 1: 8O3AGuQIhrlb2IfzM6V4tcLRdYw.roa (hash: WlnM/QzatMyerGm0OoWe7csktSam0ZWSgVvAv1lTVgg=)
2: HWctAdx2obrE3iukcBA26ddQb60.roa (hash: mlqXm7llYZDIH4sG8l62C5xHyOEbOOaYIPrVf894QoY=)
3: Nu3EJkNT_L4Y1dVbXdBaOuwi8ak.roa (hash: w7pIzOCnx2UvrBAGfaTsFND3uOFAQFekA5rwetnu5CE=)
4: RFfxQlgpEPrKePaKGQadR6EJSqs.roa (hash: oi8mU13gbqdkE5qYPVo/94WYOHiVBIqcRLFc6Pbaf40=)
5: ThXfaIw66uP2he1Es5bCGYOVhh0.crl (hash: eF9T1NY3Z3Tvie4lvyOPedaPVZ9cGsoYt0YRrf2ANyU=)
6: Zh6-sCTrmtyYMbiN3qaDaEUjzS8.roa (hash: 4ShBh5y0hjz1aSzm7VwIqgbx0rRcZCyuU9YRysEUjUM=)
7: chNBYIE4gA8jrWAxZUlShBGqlPs.roa (hash: qmmZ4LhW1qkM2Wcq2XSopnjfKwBuiAKH7aTKlWJ/VMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:51:36:94:ee:4e:6b:3d:df:83:9e:e5:b3:ce:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
Validity
Not Before: Jul 24 10:01:07 2026 GMT
Not After : Jul 25 10:01:07 2026 GMT
Subject: CN=9e690de571d46eab5099812ca3c3ed9cd26be650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:ca:17:63:71:68:1a:ac:b9:43:d0:2f:a6:
c8:2d:f6:39:3e:21:5d:87:56:6b:8c:49:5e:ad:71:
52:14:c5:f9:d7:dc:d1:f8:7a:6e:31:a5:da:b9:43:
43:fc:7d:2d:d4:6c:2d:8d:4c:80:76:78:78:d5:74:
8e:05:2e:3f:5a:f0:e0:68:71:15:03:70:0f:19:3c:
88:8f:4a:70:de:69:48:b0:53:ad:02:fc:f5:36:ab:
1c:57:32:8d:1a:2a:4e:60:26:af:7f:b9:af:3c:aa:
09:74:10:00:d8:6c:1c:cb:6d:76:28:db:57:4b:6b:
78:8d:ed:72:95:a0:f3:9c:49:30:b8:2c:01:56:91:
37:4a:dc:70:5b:09:2b:97:63:d4:ab:54:fa:47:fa:
22:cb:26:fe:34:6c:c3:44:69:c2:a9:d7:f0:0f:b8:
eb:33:9a:f9:be:b0:3c:45:1b:f3:46:b9:54:43:39:
b8:57:7c:4d:e2:5b:7c:d1:c8:a6:e8:a0:28:64:57:
3d:de:dd:75:fa:2c:7f:03:1a:2c:e6:03:d2:e2:80:
be:fd:9c:77:73:bb:01:02:95:9d:0f:42:8e:17:06:
9c:2c:b7:77:97:06:ad:da:b4:f2:a7:23:13:c9:84:
b8:71:bf:e4:a0:09:c3:87:da:ee:64:ab:af:cc:2d:
8e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:69:0D:E5:71:D4:6E:AB:50:99:81:2C:A3:C3:ED:9C:D2:6B:E6:50
X509v3 Authority Key Identifier:
keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d9:41:1f:74:e8:93:18:64:c3:32:34:8e:e9:b0:54:2b:34:
64:1f:5e:17:97:41:26:89:92:42:18:31:fe:c1:1a:5d:d2:d9:
25:db:da:f7:b8:6f:66:cb:6f:d5:17:41:5c:a1:de:e7:7f:4c:
9d:bf:dc:6a:40:50:b7:48:af:03:86:7a:bd:e1:a9:ee:b0:6d:
fb:69:53:1a:e2:e1:47:44:a0:d3:25:e9:48:03:7f:5d:b1:fe:
39:a2:43:e2:fc:8f:5c:86:1c:d9:41:76:b4:9c:c5:c0:f1:a2:
73:a8:39:85:c0:b2:e8:9e:50:11:ad:25:45:ed:17:5b:9d:49:
3c:e0:28:80:a3:d9:89:e9:b9:bb:98:29:78:ad:23:d8:11:27:
59:5d:44:9f:60:71:c5:c8:0b:c0:72:71:4e:c5:26:a7:25:04:
20:6e:85:6f:fb:9d:e5:98:fb:b0:8e:77:a7:df:26:7f:fb:f0:
47:38:13:3a:02:0c:c2:6d:90:42:0d:aa:66:56:b1:e8:b4:d4:
2f:b9:4c:da:e0:4a:29:f8:1e:21:71:52:a4:6e:3f:7d:48:df:
ba:51:c6:f2:71:5a:86:43:f1:28:06:7d:6b:02:9e:16:e5:52:
f5:e4:70:32:73:c1:17:75:85:6c:5a:c5:c1:a7:bd:6e:08:d4:
09:a9:9a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:44 2026 by rpki-client