Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
File: thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft (raw, json)
Hash identifier: 5Yk8JyHXk540K9Iye5YNDXYCa1+DxxwzD97U5tpYeB0=
Subject key identifier: D3:F2:4F:E3:12:2E:5D:AF:32:B5:AB:5D:71:C4:75:06:C0:90:29:6B
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 01A0D2A63502B5E391B811C4C157A7B9E410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
Manifest number: 0EB2
Signing time: Thu 24 Sep 2026 09:01:42 +0000
Manifest this update: Thu 24 Sep 2026 09:01:42 +0000
Manifest next update: Fri 25 Sep 2026 09:01:42 +0000
Files and hashes: 1: 4HE55QqTfljWCn4cZ1ai8cvlh4Q.roa (hash: Urls4Wea48yb11KMoVdUctKI04Yz3x+qj0Xh8gfQ8ic=)
2: ZI0XBxKngNfebDmdNmRzMmhs3_c.roa (hash: QNWQmpn8TQdq4xaJXKJjh0gyorKFkSra2zQiLtm/C4o=)
3: gbhgQ3B2uQKFPVeFw6hdlGGc7-M.roa (hash: G0Tz2y63qfWHb3YGepEYqUMgHFr/+KkjDltfUYTk6fM=)
4: thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl (hash: VBhcx3r6I4K4B0ws2FG/erKzYchXbsHWg3apRIm4f5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a6:35:02:b5:e3:91:b8:11:c4:c1:57:a7:b9:e4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Sep 24 09:01:42 2026 GMT
Not After : Sep 25 09:01:42 2026 GMT
Subject: CN=d3f24fe3122e5daf32b5ab5d71c47506c090296b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:53:7d:80:8a:d2:2b:b6:ce:d3:c1:bd:56:65:
7a:b2:b5:a2:b0:07:1f:ee:19:09:49:22:67:d7:3e:
20:25:17:b2:0a:d9:ed:11:63:28:da:57:35:ab:25:
cb:27:c5:08:2f:7a:4a:51:c7:73:16:62:0b:6b:b6:
41:21:bd:f8:bd:44:cb:cf:c4:d0:a7:8c:bb:2e:fa:
0b:fa:cc:18:8c:43:9c:29:ce:86:06:be:8e:b4:f8:
1d:5b:1e:29:b9:d4:43:1a:f5:99:32:25:8e:21:de:
ca:94:c6:40:dd:1e:ef:ee:ee:a4:82:c0:11:ae:44:
bd:d9:6a:54:67:dd:b3:eb:ce:0e:c3:cd:5e:ed:94:
30:20:a6:07:4c:40:7a:7d:2f:d3:0d:06:23:7a:dc:
af:6a:64:f9:15:28:c0:37:a4:be:e8:37:b0:e2:ba:
27:ea:35:cc:fd:34:00:08:29:53:9d:1d:de:15:4f:
5a:e4:55:03:29:3c:e9:43:8b:df:aa:ff:ea:26:a8:
e8:20:c3:de:9e:8b:aa:55:49:c7:c6:b4:be:a8:c4:
46:fd:7c:69:12:fa:d8:d1:11:28:3a:67:76:a9:8a:
70:64:d0:32:9d:c0:f1:47:1b:9c:8e:01:c1:98:22:
fd:ba:c4:5e:06:bd:23:cc:35:ee:bb:af:49:3a:fb:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F2:4F:E3:12:2E:5D:AF:32:B5:AB:5D:71:C4:75:06:C0:90:29:6B
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9e:13:69:94:9a:b8:c8:95:47:5c:ff:4e:fc:1a:c6:6c:e1:
bc:7a:66:dc:44:bd:7c:57:f8:34:e1:45:6a:fc:1a:19:c4:ae:
46:64:b8:96:33:01:50:a6:a1:a2:f2:73:b8:3b:b5:4f:81:22:
6d:cc:c8:60:45:ec:be:65:fe:75:1b:ac:cc:e4:6f:67:e7:47:
ca:0b:09:3f:e6:df:45:83:87:de:d6:9d:95:73:1e:98:31:e1:
13:89:dd:2d:dd:91:96:09:67:b7:c7:5f:24:be:04:fa:e4:4d:
17:9b:5f:9c:2d:4e:04:2e:d0:6a:86:3a:f2:29:41:45:f3:09:
dc:8d:d1:10:97:5e:18:d2:0b:bb:0e:1f:bc:9c:59:4e:d0:fa:
73:31:b0:b0:6f:dd:4e:48:9d:17:34:dd:2e:09:83:66:52:08:
4c:6e:ec:fe:a8:e5:f3:74:c8:96:bc:df:95:27:3a:65:0f:91:
db:d5:d0:6e:ae:c0:4a:1b:a9:86:94:87:70:75:5a:1e:c1:b7:
0d:15:29:1f:20:1a:95:e6:26:19:3c:fd:ee:3a:b3:50:22:0e:
a3:11:a8:69:c1:d9:e2:3f:7a:c6:a8:d5:a4:5e:63:96:62:8b:
62:c7:e9:01:d8:37:58:2b:11:b4:19:0f:9b:01:12:20:be:70:
19:da:5f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:59:13 2026 by rpki-client