Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
File: thvJe5gnbrO6vZ56pn4nBa4R5lg.mft (raw, json)
Hash identifier: px9uLJbXgAvW2olNSjJukAwvr23eONGyTc47bumL4w8=
Subject key identifier: 0D:4E:AC:06:F1:76:B8:AF:AF:D0:EC:35:DE:CC:EB:3E:BA:9D:04:A3
Authority key identifier: B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
Certificate issuer: /CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Certificate serial: 019D27041E7F152840EABEA593F2E17B1C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
Manifest number: 071B
Signing time: Wed 25 Mar 2026 22:01:14 +0000
Manifest this update: Wed 25 Mar 2026 22:01:14 +0000
Manifest next update: Thu 26 Mar 2026 22:01:14 +0000
Files and hashes: 1: XJYerDR0PpzOzzlvepGEResfgcE.roa (hash: 5wfEN3Q7d2uKbWDp8Mpxi1eFLJLct6OeAjh4AL/cHTg=)
2: thvJe5gnbrO6vZ56pn4nBa4R5lg.crl (hash: bsZ0qDJU4YniDwV+xYK4PNvkFyfWW6g4lATAaKdXIDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:1e:7f:15:28:40:ea:be:a5:93:f2:e1:7b:1c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61bc97b98276eb3babd9e7aa67e2705ae11e658
Validity
Not Before: Mar 25 22:01:14 2026 GMT
Not After : Mar 26 22:01:14 2026 GMT
Subject: CN=0d4eac06f176b8afafd0ec35decceb3eba9d04a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1e:d1:2d:b5:d2:7c:3e:a8:82:69:81:85:96:
ce:ff:93:36:ff:e6:a0:ce:74:21:92:d7:6b:03:a9:
44:6e:1c:16:ca:ac:b7:9d:e1:67:4d:1a:91:62:44:
39:64:c5:1f:44:9b:5e:77:15:a3:ad:91:9b:6d:86:
e4:12:f0:d9:11:c6:97:31:74:e0:07:95:80:c0:28:
f7:02:61:d9:60:22:f1:61:3b:24:7f:64:36:97:e7:
81:d8:8a:9c:4b:6e:e6:40:14:8d:6a:95:80:99:70:
f7:e4:ef:a4:c7:da:db:ce:ca:71:09:c8:45:73:04:
b5:a1:d7:fc:48:de:a7:1d:b8:5e:40:39:bf:4f:4f:
7f:bf:5b:99:0a:4a:02:ec:ec:7d:09:ad:3f:0d:4f:
1c:f5:bf:65:92:35:c0:0b:a8:7b:bb:01:e9:e7:5f:
e7:b3:db:44:f4:bc:30:e6:d1:a1:65:99:16:5e:6c:
23:0e:af:e0:52:a0:28:76:15:ca:d8:8e:a5:70:f7:
0d:72:93:2f:4d:18:01:5b:8b:17:a2:9b:57:77:07:
57:8b:05:71:72:e5:88:44:47:61:15:20:cd:b4:a1:
6a:e4:d4:78:c9:87:14:96:3f:d1:1a:db:5a:19:a3:
48:59:42:74:78:c9:b6:f3:20:11:62:05:1f:36:95:
f9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4E:AC:06:F1:76:B8:AF:AF:D0:EC:35:DE:CC:EB:3E:BA:9D:04:A3
X509v3 Authority Key Identifier:
keyid:B6:1B:C9:7B:98:27:6E:B3:BA:BD:9E:7A:A6:7E:27:05:AE:11:E6:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thvJe5gnbrO6vZ56pn4nBa4R5lg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f26f62-ffa2-4170-be4f-983d4da13447/1/thvJe5gnbrO6vZ56pn4nBa4R5lg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:cf:ea:9a:40:6b:9d:8a:c1:c4:76:f2:47:c5:74:54:9c:69:
95:30:c5:c4:5b:f3:b3:40:30:08:0a:69:49:29:39:d6:10:1f:
7e:54:52:58:09:b2:20:6f:4d:9e:85:70:8b:3c:8d:22:a2:de:
ac:cf:97:9e:b5:cb:f5:50:3f:1e:74:6a:c2:a7:0e:be:ad:44:
bc:b3:6f:e3:5b:06:d5:fe:8e:1d:61:fd:dc:99:32:bf:9e:67:
e5:39:c8:dc:83:de:21:d2:f5:72:66:73:1e:db:e2:33:a0:79:
e3:62:74:97:9f:ea:ed:2b:73:96:8d:87:80:11:f3:ba:59:c1:
b8:f1:b9:ab:0e:8c:f5:37:17:52:84:e9:10:44:b5:43:73:30:
a6:9a:4e:26:52:4a:68:5f:5c:a1:72:54:21:81:c0:df:8c:fc:
8d:71:40:50:97:1f:11:7b:0e:8c:92:e2:2c:4a:58:c6:05:b6:
26:21:6f:b6:2b:08:50:5f:a7:b7:ab:7e:56:b5:3c:54:f5:c5:
a0:61:a8:f3:97:e6:15:16:4e:2f:9d:fe:24:72:e1:5f:c6:e1:
22:93:cb:1e:45:b6:5a:d2:a0:8d:6c:ba:46:71:df:3e:c9:49:
88:9f:e6:c3:d5:67:1a:a5:a4:17:b4:98:26:cd:3d:92:45:e8:
33:f6:5e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:51 2026 by rpki-client