Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: Upg9asoy/3qh1LZ8T4St3KpVKFyqhi27JOBG4WFG8ao=
Subject key identifier: 5A:FD:AE:8A:43:01:CA:C0:38:BB:9C:FA:FF:26:CB:61:16:DE:79:FC
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 01A1DD2726A3BA4FFA07809A7006F23F77CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 0F3C
Signing time: Sun 15 Nov 2026 03:01:32 +0000
Manifest this update: Sun 15 Nov 2026 03:01:32 +0000
Manifest next update: Mon 16 Nov 2026 03:01:32 +0000
Files and hashes: 1: 4HE55QqTfljWCn4cZ1ai8cvlh4Q.roa (hash: Urls4Wea48yb11KMoVdUctKI04Yz3x+qj0Xh8gfQ8ic=)
2: ZI0XBxKngNfebDmdNmRzMmhs3_c.roa (hash: QNWQmpn8TQdq4xaJXKJjh0gyorKFkSra2zQiLtm/C4o=)
3: gbhgQ3B2uQKFPVeFw6hdlGGc7-M.roa (hash: G0Tz2y63qfWHb3YGepEYqUMgHFr/+KkjDltfUYTk6fM=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: OYueJYlt/PZK9rKkGWIkfCsmoJqRkcoN/l3TJsDdGfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:27:26:a3:ba:4f:fa:07:80:9a:70:06:f2:3f:77:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Nov 15 03:01:32 2026 GMT
Not After : Nov 16 03:01:32 2026 GMT
Subject: CN=5afdae8a4301cac038bb9cfaff26cb6116de79fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:6b:54:6a:0d:c5:c0:ad:80:55:11:d0:0e:
95:dd:8d:27:57:6e:9a:03:36:1e:81:ee:e8:ae:9f:
9f:c9:e3:10:57:66:66:be:73:5a:db:23:5d:c4:47:
1d:65:e9:42:99:09:e2:de:a4:1a:c8:0d:a3:40:46:
b1:63:6a:32:0f:ab:a2:44:1a:99:cb:dc:f5:7e:b4:
5e:ee:99:4e:05:72:a9:2a:9f:54:f9:1c:78:2f:fe:
e8:c3:98:63:14:f7:a4:e2:51:5e:b2:ef:9d:a2:e1:
69:d9:0d:9c:19:18:5e:a4:ea:8e:cf:92:db:f0:60:
e8:c3:25:32:8f:d6:b0:00:30:b0:ba:43:5b:17:08:
c1:fa:e4:52:96:2d:a0:4d:bf:50:e0:3a:7f:66:8c:
4d:8e:ea:d7:62:a6:e4:28:f1:47:7b:24:e3:cf:d0:
61:74:80:6e:7e:09:82:7d:5b:66:92:cf:9e:03:c9:
61:65:1f:db:f8:1d:1a:be:93:47:9a:0e:e3:21:e9:
a2:4d:41:fc:65:21:9b:de:ea:a7:32:cd:3f:28:ab:
0f:01:b8:82:8d:50:bc:34:b0:77:4e:ff:24:52:6e:
3b:f6:15:39:ff:1f:bf:75:86:9f:ab:69:d6:55:46:
4c:b8:30:c8:c9:e5:23:e4:1e:42:8b:3b:03:c9:a6:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FD:AE:8A:43:01:CA:C0:38:BB:9C:FA:FF:26:CB:61:16:DE:79:FC
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c3:a8:be:1c:91:83:b7:ed:37:2d:f4:47:a3:ce:d6:ae:c1:
7b:17:e4:e4:1c:3a:f7:c7:74:f8:83:e5:fc:13:27:a6:c4:70:
85:4d:54:b0:9f:eb:f9:ed:56:8c:62:a8:eb:dc:c5:8d:b4:13:
5d:60:3a:85:38:49:7e:ad:7f:f1:b6:87:6a:b9:24:5b:c3:31:
5d:1b:76:fe:1b:bb:f5:20:d8:dc:99:a4:33:6d:f5:0c:58:74:
22:ec:00:97:b5:fd:44:f2:86:cc:b6:0a:1d:ab:97:9b:84:ea:
82:f3:12:dc:22:12:52:94:ee:da:3a:00:b4:87:1d:cf:dd:40:
01:3a:eb:af:20:c7:e8:a5:b3:42:52:05:6c:d9:f8:0b:90:7e:
db:fb:c9:c9:b7:f3:48:b4:e7:cc:8e:79:92:bc:be:b1:c3:21:
df:3f:48:03:5e:6e:f7:ee:16:69:35:b2:b6:1f:93:d9:b6:b9:
66:80:cb:14:e2:e9:67:a5:c7:e6:8e:a6:f3:24:c5:80:b1:39:
03:ee:dd:fd:ba:e1:ce:49:ae:3b:df:c1:71:d3:6c:bf:f9:a3:
63:f0:2e:c5:a8:99:e3:96:6c:1c:ab:74:09:2c:8f:8b:0e:9d:
c7:3b:43:11:2c:eb:d4:2c:a5:5c:da:92:80:4e:01:32:8d:25:
7c:72:4d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:45:24 2026 by rpki-client