Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: Hw09jJIyelSe1++hsDvfVr0lY5j+2xLFUIttqHUv6/8=
Subject key identifier: CD:51:11:F0:D5:F6:BD:D9:1A:AF:E0:06:CC:B5:A5:A4:85:86:7E:DC
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 019D2A04ADAD6DB97045E94D5638733D18A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 0CCD
Signing time: Thu 26 Mar 2026 12:00:42 +0000
Manifest this update: Thu 26 Mar 2026 12:00:42 +0000
Manifest next update: Fri 27 Mar 2026 12:00:42 +0000
Files and hashes: 1: 4HE55QqTfljWCn4cZ1ai8cvlh4Q.roa (hash: Urls4Wea48yb11KMoVdUctKI04Yz3x+qj0Xh8gfQ8ic=)
2: ZI0XBxKngNfebDmdNmRzMmhs3_c.roa (hash: QNWQmpn8TQdq4xaJXKJjh0gyorKFkSra2zQiLtm/C4o=)
3: gbhgQ3B2uQKFPVeFw6hdlGGc7-M.roa (hash: G0Tz2y63qfWHb3YGepEYqUMgHFr/+KkjDltfUYTk6fM=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: dzj6hzL75I211idJSrASBTWHo/I/Rc4/FAOmGEAWwzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:ad:ad:6d:b9:70:45:e9:4d:56:38:73:3d:18:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Mar 26 12:00:42 2026 GMT
Not After : Mar 27 12:00:42 2026 GMT
Subject: CN=cd5111f0d5f6bdd91aafe006ccb5a5a485867edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:94:79:08:d8:c7:e3:f6:05:cf:c4:4f:df:a8:
a5:66:21:3b:39:f9:d1:55:78:e3:c3:8f:18:2b:23:
96:19:0f:95:99:7d:51:49:dd:a3:53:0f:75:ba:73:
2a:37:a2:44:53:56:52:49:61:f5:8f:59:96:07:c4:
e6:f7:71:09:2d:8d:1e:3e:28:88:5e:93:f7:10:23:
5f:c7:74:3b:39:83:be:34:30:46:4a:5b:d8:eb:08:
12:d2:1c:52:74:81:19:46:b6:e5:e3:61:8c:79:0e:
e0:fe:b4:fb:17:e6:6b:34:2f:7a:b9:85:88:2a:45:
70:70:38:97:61:83:03:bb:bf:87:44:a1:f0:97:6c:
93:9c:22:ec:9c:6b:4a:1a:94:20:b8:0f:0f:cb:7c:
3e:25:33:19:2e:b1:06:c0:da:b8:d0:16:bf:da:d1:
fb:d7:f8:c7:dd:80:d8:38:c8:3d:1d:26:de:44:86:
40:0f:68:01:f3:a9:c8:71:c0:82:51:fa:d0:55:39:
b7:55:e4:d6:3f:85:81:56:90:2f:b5:47:d2:97:79:
e4:fa:8c:9b:67:53:7b:51:84:b9:fe:5a:12:76:ee:
0a:a4:c1:c3:79:35:88:2a:98:02:1f:6f:2e:aa:cf:
8b:0d:39:45:7b:b7:a5:7c:5b:59:61:10:ee:4a:20:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:51:11:F0:D5:F6:BD:D9:1A:AF:E0:06:CC:B5:A5:A4:85:86:7E:DC
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:6d:33:ed:77:61:50:42:ab:8f:a0:bd:71:4b:59:4b:2b:e2:
d3:c7:32:14:84:81:30:f8:1f:00:eb:bc:9d:62:f3:24:13:33:
91:8b:0e:0a:3c:bb:cf:e1:dc:08:48:18:24:eb:84:50:e6:4f:
20:02:69:c2:47:3a:23:4d:35:08:03:03:17:93:33:94:bf:17:
6c:63:7d:e0:c8:86:3e:10:57:2a:cc:de:12:87:9b:42:72:35:
20:26:11:cd:da:af:bd:1d:9f:8f:71:ff:98:c4:2c:3a:64:a9:
da:ef:45:9e:a6:fb:4a:8c:ec:b5:2e:71:a6:e5:a9:22:f2:b8:
66:88:9d:99:fc:37:61:26:c1:6b:60:7e:0a:a3:21:59:01:93:
06:fd:80:bb:4d:1f:e1:a9:98:9e:3f:67:d8:26:a3:72:f1:18:
c8:5f:e9:69:62:3a:f9:19:e2:3c:bb:c0:7d:9a:e9:5a:c5:f8:
b6:a4:68:95:40:21:20:2c:55:27:94:d0:5b:80:d3:e6:da:4f:
25:ba:5b:b3:37:85:2e:7d:ef:94:c5:d5:8f:3c:3f:b8:ae:08:
f5:30:b4:af:72:c4:38:72:dc:d3:2f:2c:e9:a5:f4:af:b8:c4:
1f:ba:9b:bd:5d:49:1a:cd:db:94:8e:35:c1:18:9e:04:44:fb:
56:b5:20:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qBK2tbblwRelNVjhzPRikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MTA0NmRjYjE4NWIwYmZkOTk3NjYyOGQ2OWExODlkM2Mz
OTg3ZDgwHhcNMjYwMzI2MTIwMDQyWhcNMjYwMzI3MTIwMDQyWjAzMTEwLwYDVQQD
EyhjZDUxMTFmMGQ1ZjZiZGQ5MWFhZmUwMDZjY2I1YTVhNDg1ODY3ZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJR5CNjH4/YFz8RP36ilZiE7OfnR
VXjjw48YKyOWGQ+VmX1RSd2jUw91unMqN6JEU1ZSSWH1j1mWB8Tm93EJLY0ePiiI
XpP3ECNfx3Q7OYO+NDBGSlvY6wgS0hxSdIEZRrbl42GMeQ7g/rT7F+ZrNC96uYWI
KkVwcDiXYYMDu7+HRKHwl2yTnCLsnGtKGpQguA8Py3w+JTMZLrEGwNq40Ba/2tH7
1/jH3YDYOMg9HSbeRIZAD2gB86nIccCCUfrQVTm3VeTWP4WBVpAvtUfSl3nk+oyb
Z1N7UYS5/loSdu4KpMHDeTWIKpgCH28uqs+LDTlFe7elfFtZYRDuSiDWXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1REfDV9r3ZGq/gBsy1paSFhn7cMB8GA1UdIwQY
MBaAFLYQRtyxhbC/2ZdmKNaaGJ08OYfYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMt
Y2YxZjJmYThlNWYyLzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83MDc1N2ItYzc1OC00MjkyLThiNWMtY2YxZjJmYThlNWYy
LzEvdGhCRzNMR0ZzTF9abDJZbzFwb1luVHc1aDlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe20z7Xdh
UEKrj6C9cUtZSyvi08cyFISBMPgfAOu8nWLzJBMzkYsOCjy7z+HcCEgYJOuEUOZP
IAJpwkc6I001CAMDF5MzlL8XbGN94MiGPhBXKszeEoebQnI1ICYRzdqvvR2fj3H/
mMQsOmSp2u9Fnqb7SozstS5xpuWpIvK4Zoidmfw3YSbBa2B+CqMhWQGTBv2Au00f
4amYnj9n2CajcvEYyF/paWI6+RniPLvAfZrpWsX4tqRolUAhICxVJ5TQW4DT5tpP
JbpbszeFLn3vlMXVjzw/uK4I9TC0r3LEOHLc0y8s6aX0r7jEH7qbvV1JGs3blI41
wRieBET7VrUg9g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:28 2026 by rpki-client