Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
File: tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft (raw, json)
Hash identifier: /JfezP6AwEAP+9ZX2Toctz3g/hnH5Bmlfz5dQzX6hg0=
Subject key identifier: 24:6F:5A:7B:A8:1F:95:72:C9:95:9F:73:CE:2A:72:36:D0:B5:D3:A9
Authority key identifier: B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
Certificate issuer: /CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Certificate serial: 019D258367D76107D18D7E767C0CDA3B8258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
Manifest number: 0EEA
Signing time: Wed 25 Mar 2026 15:01:01 +0000
Manifest this update: Wed 25 Mar 2026 15:01:01 +0000
Manifest next update: Thu 26 Mar 2026 15:01:01 +0000
Files and hashes: 1: DgrTVtP0jXJ4OGfuPKYULY4Onk4.roa (hash: 8Lr7Jf5noSRWbE2rMCrFS+5F3tinLkNtJ9p8Cr6DKmI=)
2: tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl (hash: XhcCk64G/nettb/qju5oTByBdIfuN0xMbWafLzuRZXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:67:d7:61:07:d1:8d:7e:76:7c:0c:da:3b:82:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Validity
Not Before: Mar 25 15:01:01 2026 GMT
Not After : Mar 26 15:01:01 2026 GMT
Subject: CN=246f5a7ba81f9572c9959f73ce2a7236d0b5d3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:64:0e:cc:34:d1:e4:3f:31:a0:2c:a2:39:
20:2e:1e:bf:84:3a:6a:84:85:14:16:e9:84:db:48:
b8:cf:5b:3b:ec:60:38:58:a6:42:4f:49:e7:fe:ae:
40:5a:24:5a:59:12:d2:14:f0:41:51:84:96:2d:d7:
49:2b:41:4d:c8:ff:de:0f:2a:34:60:f9:6b:68:ba:
df:40:43:2f:66:74:75:f1:c2:52:ec:ef:a2:d7:e9:
84:4d:02:2e:f0:56:33:25:19:5e:a8:19:37:c8:e9:
29:cf:c9:ab:d5:0c:be:46:c5:fa:9d:f1:58:7c:b8:
53:02:49:82:de:d6:32:03:a1:01:88:06:b2:31:a0:
8b:b7:71:a2:3d:d9:0c:b3:e1:f2:03:15:17:09:dd:
0e:96:d4:7e:92:76:4a:2a:ce:b1:9a:6b:f2:ce:4c:
6d:d2:06:94:eb:ac:2b:32:25:49:ad:68:2a:73:35:
f5:1a:0d:94:e6:6d:90:ca:81:8c:74:85:43:86:c8:
2e:f1:91:a4:b0:4a:ea:5f:c6:e8:f5:b5:6a:61:2e:
68:65:97:18:ee:1a:41:4e:58:84:54:49:78:1f:4a:
19:e0:4f:75:40:64:ca:31:86:9b:7b:12:19:ba:8c:
4c:04:7b:68:aa:54:db:e9:99:e4:4f:10:16:9e:78:
6a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:6F:5A:7B:A8:1F:95:72:C9:95:9F:73:CE:2A:72:36:D0:B5:D3:A9
X509v3 Authority Key Identifier:
keyid:B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:56:d3:7c:e8:5f:1e:21:3a:da:76:a4:d1:01:6f:4a:b7:11:
c1:7c:51:cd:32:80:82:2e:40:0a:5f:d5:8b:88:8d:42:17:28:
3d:16:7b:3a:2e:c6:fc:7e:4b:97:19:4d:19:0b:f3:4e:e3:30:
08:c5:70:19:6b:75:05:84:69:86:cd:87:49:ff:12:33:22:27:
a0:3c:5f:a7:29:c1:82:1d:27:bb:65:94:a4:81:ec:3f:a1:d9:
f4:3d:63:d3:21:33:cb:bc:2b:3d:06:d2:26:7f:a8:df:e7:a8:
3c:d4:ef:1d:04:96:73:bd:ea:8e:8a:be:41:ce:0c:a5:92:38:
6a:ee:1a:b4:89:8e:4b:88:ca:a8:6c:2d:6e:2c:1a:f4:38:ec:
6f:90:af:71:58:29:62:4b:a3:f3:90:c7:67:64:44:9e:13:2d:
7a:e4:21:e2:34:45:fd:93:6b:20:27:5b:67:78:1c:f0:73:65:
90:f8:f9:5b:c7:ce:8a:b5:9b:2b:4a:4c:5a:75:2d:c6:27:8d:
07:81:21:7f:b8:67:ed:95:1b:db:3e:1a:47:c6:bb:e2:28:9e:
3a:58:c5:53:f3:bd:36:30:73:b0:36:05:75:d1:73:0c:cd:6e:
f7:5c:2b:a4:02:43:f1:3b:d1:8f:30:9e:8b:0a:f1:88:df:4e:
75:c3:6b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:34:24 2026 by rpki-client