Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json)
Hash identifier: qndKHw5I/vZ9w7cQ8/RGpnAVdLQRqz3ZDt8FQhJg2T0=
Subject key identifier: F6:71:D1:28:85:CA:6A:B5:5B:77:F6:B9:75:3B:04:86:1D:BB:69:BD
Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Certificate serial: 019D2695FD93E3C203F382D226A498190A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 20:00:57 +0000
Manifest this update: Wed 25 Mar 2026 20:00:57 +0000
Manifest next update: Thu 26 Mar 2026 20:00:57 +0000
Files and hashes: 1: 3vWXTbTpDM0ymRMTdG3MOaM9Vbk.roa (hash: vKhrAJbWhh00/xBbyVciFsXn8wyB3UjGH2N5E0ovZYw=)
2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: XvcUqILSaPn+BLmPOKlwgRzqvKDTl7bRsTkykvzuRRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:fd:93:e3:c2:03:f3:82:d2:26:a4:98:19:0a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Validity
Not Before: Mar 25 20:00:57 2026 GMT
Not After : Mar 26 20:00:57 2026 GMT
Subject: CN=f671d12885ca6ab55b77f6b9753b04861dbb69bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:b2:1d:02:b8:69:e2:9a:cb:00:3d:8b:01:
7c:03:15:1a:21:3d:cd:11:b7:7e:6c:63:b6:a3:be:
03:7b:e3:9c:b0:6e:39:87:41:c7:02:e5:a0:33:2a:
aa:54:84:a3:6c:88:e0:47:a1:7b:3b:37:49:aa:f8:
d7:4a:cb:91:76:16:5c:38:8b:46:8a:0f:49:59:eb:
95:21:4a:f0:98:0c:b6:45:d1:e3:1d:fb:86:ab:38:
97:0a:40:9d:71:1c:98:b3:61:bc:06:3f:12:2b:1b:
75:84:69:18:4a:38:4a:f2:59:8d:f3:13:74:de:61:
22:22:21:d8:88:84:fc:7e:e1:a1:bc:49:4c:d6:c3:
f6:be:cc:db:d4:b4:b9:a2:a4:9b:ce:e2:54:1b:1c:
47:6c:b3:b1:55:37:71:7c:3d:53:98:01:b0:ef:78:
38:9f:01:f0:53:69:b7:43:4f:e7:8f:f0:0c:73:39:
d5:b0:37:9d:e8:65:55:c1:0a:fe:00:c7:55:a7:77:
b7:5a:d9:ed:99:11:ab:b4:0b:98:98:21:91:8c:52:
55:87:f2:a9:d4:cb:60:db:32:71:93:77:d6:69:28:
a4:2c:0c:5e:51:bd:84:c1:ac:36:e2:65:a9:09:45:
5d:5a:e8:8f:b9:f2:b1:7f:fd:46:e5:5a:b1:9a:23:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:71:D1:28:85:CA:6A:B5:5B:77:F6:B9:75:3B:04:86:1D:BB:69:BD
X509v3 Authority Key Identifier:
keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:88:ae:c2:a8:37:0c:a8:2a:31:ea:e5:bf:ab:df:3e:be:53:
23:43:a3:08:76:09:4a:d4:59:81:04:74:de:37:96:96:78:9c:
60:2b:9f:72:66:be:6a:00:5e:d0:02:c6:f2:49:22:c9:cc:83:
15:af:78:c8:f8:37:5b:f9:3b:1b:ca:08:d5:30:19:50:a5:83:
c6:38:08:a0:78:b6:c1:5e:ea:91:e2:4e:60:bb:c1:05:bd:69:
94:19:65:05:15:da:4d:7c:a2:d5:5e:d2:94:9c:5a:87:fa:0f:
e7:74:f5:bf:7d:1b:ac:59:2a:75:f1:a7:be:30:9c:bc:63:22:
cf:16:ec:2d:23:1f:88:d2:54:cf:21:45:71:ed:5c:e7:aa:a5:
4c:82:08:de:ad:0d:44:db:cd:c1:65:49:78:e4:0c:dc:99:19:
05:02:af:ca:e8:43:22:c8:a0:2d:c3:c3:ed:c8:07:6c:40:f8:
f4:c1:72:ae:e3:9c:8d:72:81:0e:6d:3d:8f:c4:04:60:2e:85:
3a:78:91:8a:78:af:28:aa:12:26:44:6d:f3:f5:ea:f4:68:65:
1b:2c:24:80:cf:61:29:cc:43:54:66:79:61:1a:ca:e0:7f:24:
0c:f3:a8:cd:74:c5:41:ce:32:d4:65:85:b9:67:66:2b:f4:68:
84:85:fd:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:19 2026 by rpki-client