Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
File: THkVQTlO1-dpwf2JlVwfKBi0RbI.mft (raw, json)
Hash identifier: y7ChKikudejJeiCX4/mI15zmkeqcIZznp9XTTVXtmIY=
Subject key identifier: 96:31:99:88:C9:D0:06:6B:F6:03:05:27:6F:F6:2E:45:00:83:99:FA
Authority key identifier: 4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2
Certificate issuer: /CN=4c791541394ed7e769c1fd89955c1f2818b445b2
Certificate serial: 019F95491D1176000E78BCE54DD0492D90A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
Manifest number: 42
Signing time: Fri 24 Jul 2026 18:00:24 +0000
Manifest this update: Fri 24 Jul 2026 18:00:24 +0000
Manifest next update: Sat 25 Jul 2026 18:00:24 +0000
Files and hashes: 1: 46tVnxWXBd54uDnUWiQrDEewYbs.roa (hash: iC7XI+Wul/0hfYbUzsUQgkjKjAE4JznP2trrEiMwN1I=)
2: 9ahwneSFqD3SaROmAUIGBjc82SE.roa (hash: CxJPqcqx0ZwsWZa7MbNafetbcRteWJmW7Gj2s8BmLiE=)
3: THkVQTlO1-dpwf2JlVwfKBi0RbI.crl (hash: /tdcuFerXlPvrsZZOZcUoUUorepGxVylsfjV7UbQJYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:1d:11:76:00:0e:78:bc:e5:4d:d0:49:2d:90:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c791541394ed7e769c1fd89955c1f2818b445b2
Validity
Not Before: Jul 24 18:00:24 2026 GMT
Not After : Jul 25 18:00:24 2026 GMT
Subject: CN=96319988c9d0066bf60305276ff62e45008399fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:d3:7a:cf:d4:82:87:4e:94:3c:23:63:4a:
4f:ff:43:b4:42:81:04:a7:d8:93:99:98:26:3a:97:
f2:04:77:c5:3e:c0:f9:42:90:c2:82:49:de:64:95:
0a:c5:6c:98:56:d3:77:1c:42:96:19:fc:96:e9:c4:
c8:4a:65:08:29:2d:92:04:ad:9f:f8:3b:de:3d:4a:
ae:d3:ab:e1:4a:23:07:10:e0:ce:66:0b:e2:c1:11:
a4:7a:5e:26:62:e9:60:97:23:1a:0c:2e:d4:54:95:
f2:8f:a7:79:ad:5f:fd:c2:4f:67:6d:9b:f8:9f:2b:
c2:75:70:0c:5e:8d:47:dd:c3:f5:4e:d7:6f:4b:d8:
f5:ac:51:71:70:7e:79:a2:93:b1:3c:b5:30:d3:03:
2a:a9:c4:08:ce:1d:6c:5e:8b:bb:30:4b:b2:a4:a3:
7c:c2:75:67:99:fc:94:9f:8b:b3:25:b0:fb:52:f6:
b2:54:b3:c0:78:99:de:40:80:81:2d:21:38:06:10:
19:30:c2:d7:bd:01:3e:72:7a:9f:fc:73:0d:a4:5e:
dd:ba:c6:95:f5:2b:d7:af:d5:ec:2c:78:0e:ab:9a:
e4:0f:d4:40:fb:23:14:0a:7d:0e:7c:f4:d9:33:c6:
1f:15:79:cb:dd:cb:60:58:b8:f3:54:57:c0:30:3c:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:31:99:88:C9:D0:06:6B:F6:03:05:27:6F:F6:2E:45:00:83:99:FA
X509v3 Authority Key Identifier:
keyid:4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:9f:b6:c9:9b:d9:90:ca:ab:2a:17:d8:72:1f:35:ec:bc:22:
c9:20:1f:59:ec:b3:5e:be:9c:76:0a:6d:ab:fa:91:ff:56:bb:
bb:10:b4:a3:a9:eb:78:3f:bb:e5:a2:62:ee:f8:54:bd:c2:0c:
b3:bf:91:31:3a:de:c3:17:eb:02:0e:1c:20:4d:9d:07:ed:47:
46:a0:03:2c:26:0e:5e:b7:dc:30:0a:d6:6c:3e:e3:65:62:27:
20:1f:25:99:8d:60:d2:c7:62:e0:2f:e8:eb:28:6a:a5:71:78:
f7:a2:2e:38:1d:68:02:6d:c7:d5:a1:bf:a5:89:81:d9:b7:64:
7b:34:98:94:cb:99:eb:79:3b:be:68:17:84:76:5f:16:dd:b6:
ac:5e:58:dc:a3:f0:b0:79:64:37:eb:2b:32:42:04:1e:61:6f:
3b:94:ba:82:c4:5a:a1:30:3d:d3:65:b1:83:e9:da:fa:6d:5f:
af:55:b1:ff:ec:f9:f8:9d:44:40:33:04:e7:06:25:ce:ed:71:
dc:47:dd:2c:05:04:d0:26:57:4a:63:42:30:03:d1:13:11:f5:
c8:10:13:86:12:1a:61:d3:03:88:97:c6:d6:e4:81:26:de:a1:
af:9e:e1:3f:42:da:ec:4d:3d:f2:c7:c7:ca:47:a5:25:0f:70:
67:13:dd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:29 2026 by rpki-client