Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
File: THkVQTlO1-dpwf2JlVwfKBi0RbI.mft (raw, json)
Hash identifier: GmTDqEMq8acCIa5SHkzTMlqWRlubop8et6S2Cz3I0ks=
Subject key identifier: 57:5A:AA:A9:5C:B5:BF:3E:15:88:62:92:2B:AB:79:7E:60:74:43:30
Authority key identifier: 4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2
Certificate issuer: /CN=4c791541394ed7e769c1fd89955c1f2818b445b2
Certificate serial: 01A0DF856538A4B52B21E048C18B2C1FF515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
Manifest number: ED
Signing time: Sat 26 Sep 2026 21:00:56 +0000
Manifest this update: Sat 26 Sep 2026 21:00:56 +0000
Manifest next update: Sun 27 Sep 2026 21:00:56 +0000
Files and hashes: 1: 46tVnxWXBd54uDnUWiQrDEewYbs.roa (hash: iC7XI+Wul/0hfYbUzsUQgkjKjAE4JznP2trrEiMwN1I=)
2: 9ahwneSFqD3SaROmAUIGBjc82SE.roa (hash: CxJPqcqx0ZwsWZa7MbNafetbcRteWJmW7Gj2s8BmLiE=)
3: THkVQTlO1-dpwf2JlVwfKBi0RbI.crl (hash: +HEX8/FUCBWgdfT/zSI899tOcX2HXb4cR81m6srEhnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:85:65:38:a4:b5:2b:21:e0:48:c1:8b:2c:1f:f5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c791541394ed7e769c1fd89955c1f2818b445b2
Validity
Not Before: Sep 26 21:00:56 2026 GMT
Not After : Sep 27 21:00:56 2026 GMT
Subject: CN=575aaaa95cb5bf3e158862922bab797e60744330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:dd:f5:4c:1f:a2:9b:cf:d6:6e:f2:a2:d3:
fa:2f:1c:f5:cc:2e:55:47:59:3f:47:34:ae:be:39:
d6:ee:ca:ac:9c:47:69:a5:b3:3d:08:67:ad:2b:25:
2f:4c:1d:fd:93:73:e7:e4:77:f4:fb:07:60:b8:4f:
b7:2f:f5:d0:d4:09:29:30:b4:c9:a3:28:c7:1b:89:
0d:1d:3e:c9:89:ea:f6:f7:f5:e7:68:87:06:b3:ff:
17:d8:75:fd:73:9c:07:77:88:c2:a5:b0:54:7d:8d:
fd:f7:f9:ab:8b:70:97:ca:df:b4:19:99:e3:5a:1f:
55:d5:0f:bd:4b:a5:53:3a:3e:cc:c6:20:6b:44:c5:
f5:d4:f7:a9:2a:82:d5:8c:b5:50:bf:89:fa:99:5a:
c3:18:44:b2:05:a3:e7:ad:41:5b:a5:e7:dc:e1:31:
24:22:eb:d6:d3:78:70:29:e2:16:80:15:6a:93:01:
de:5b:0d:48:d7:0c:30:be:c3:49:8b:2c:a3:b8:cf:
e0:53:95:82:d6:8b:47:31:c9:8c:fb:86:cd:1e:4a:
cf:c1:3d:54:5f:56:d2:d2:68:c4:a7:4d:3a:fb:97:
44:a9:7d:2c:91:5c:5c:1c:f2:66:8a:41:72:e3:49:
91:50:3b:42:ee:f2:83:68:20:85:10:0f:56:1f:55:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5A:AA:A9:5C:B5:BF:3E:15:88:62:92:2B:AB:79:7E:60:74:43:30
X509v3 Authority Key Identifier:
keyid:4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c6:ca:06:0f:ef:be:f7:d8:99:6c:37:75:37:08:81:55:7f:
b4:62:91:cc:1f:dc:c5:59:56:2a:3e:f7:d6:2a:50:4d:68:db:
e1:8f:ff:2b:32:f7:f4:55:40:5e:56:78:d5:a4:45:66:e9:47:
ae:f9:b9:82:1b:0d:e7:a1:99:6f:c8:53:b1:6b:9b:3c:4b:1b:
3c:b3:51:22:08:b5:8b:85:9c:76:81:0b:7f:8a:1b:4a:63:d6:
71:32:69:3b:64:08:7f:6f:70:6c:fd:dc:03:32:25:ad:f7:b7:
84:03:ee:62:cd:ca:f0:8f:49:11:ab:32:fc:53:63:1f:b5:ba:
77:e7:1c:64:c3:1a:da:1a:9e:1e:53:fd:db:fe:05:b4:56:bb:
7d:88:59:95:b9:d3:47:70:ef:7c:1b:e0:10:c2:11:80:00:83:
2d:a8:0a:b8:57:8d:dd:e1:2f:24:2f:67:b1:70:c9:2d:00:07:
11:1d:3a:17:bd:55:35:31:d0:5d:19:c2:cf:02:e2:4d:76:6f:
3e:37:c4:ac:36:51:f1:e1:44:bb:f9:e8:0e:31:0e:8f:0e:8a:
ec:b1:30:98:20:16:28:89:8c:e2:73:94:9f:d5:92:17:bf:e6:
c9:e5:d7:8c:03:b6:4c:ff:d9:81:bf:e6:43:ff:5a:a5:6c:c6:
76:94:84:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:11:35 2026 by rpki-client