Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: omQP8S6Zdaqb/iz/xEPMoIaPo5DFemhVUqYq+JcWpEk=
Subject key identifier: FD:05:80:E3:AA:F2:E0:94:A5:23:E4:38:F9:18:22:B1:22:11:5C:48
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 019F958076639414111CF77516FED5F6BACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 19:00:51 +0000
Manifest this update: Fri 24 Jul 2026 19:00:51 +0000
Manifest next update: Sat 25 Jul 2026 19:00:51 +0000
Files and hashes: 1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: 2DRg1jVOauN+rWDNntTbibvqBnRuirBzVxxK8A7vLw0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:76:63:94:14:11:1c:f7:75:16:fe:d5:f6:ba:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Jul 24 19:00:51 2026 GMT
Not After : Jul 25 19:00:51 2026 GMT
Subject: CN=fd0580e3aaf2e094a523e438f91822b122115c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:a5:02:91:bd:e6:15:6b:4e:ef:25:f6:54:
b4:ae:a6:a3:da:eb:05:17:41:f3:a2:8d:d3:9e:d5:
13:6c:80:a9:75:6b:01:f7:6a:24:ea:a0:9f:e5:9f:
14:5b:d2:38:8c:60:b0:13:14:14:4e:4a:fd:5c:25:
d3:d3:49:97:e9:56:73:05:70:d4:19:c0:30:49:4d:
3e:c3:45:3d:f7:25:76:f6:e2:b3:35:09:f5:03:68:
4f:7c:bb:59:f4:48:ad:2c:6b:41:60:35:9c:26:7d:
ed:55:33:5e:0a:58:55:0b:73:ae:4b:58:e3:08:08:
40:c4:7d:de:52:40:ac:cf:76:25:01:43:a4:81:75:
e7:32:61:f8:31:f4:1e:7a:09:45:10:67:7c:4c:a3:
b8:74:46:9a:18:30:71:1d:e9:52:d8:d6:0c:44:af:
5d:31:1b:f5:75:14:ae:96:1b:8c:bb:4c:95:5c:36:
66:0b:5b:3a:60:39:e3:89:0b:3c:97:d0:75:e3:e2:
a8:b8:b0:3c:04:0e:39:89:83:ad:0f:e6:10:d6:dc:
5e:52:9f:fa:55:1d:2c:52:6b:53:1c:b8:72:a5:fb:
3e:09:5a:3c:03:7a:9c:76:c9:2a:06:fe:71:d1:68:
b5:41:e3:45:a7:3c:28:f6:80:ba:79:d5:8f:24:1d:
ae:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:05:80:E3:AA:F2:E0:94:A5:23:E4:38:F9:18:22:B1:22:11:5C:48
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:50:28:85:3b:f8:7f:d8:3f:f0:0c:32:e8:21:eb:f5:da:16:
96:59:24:ec:75:40:59:97:7e:50:80:55:57:af:06:1f:57:48:
65:d5:d5:1f:63:e2:23:f4:87:bc:1d:0b:06:b9:95:ba:c6:25:
1e:99:bd:5d:f0:56:e7:da:a8:1b:35:4a:94:de:33:d7:22:2e:
0d:a4:8d:38:b7:b8:48:a6:24:72:7d:84:36:70:c1:b1:5e:64:
f5:1b:a3:d3:e7:8e:74:d7:6d:78:c4:81:c2:d7:d4:7e:0c:a0:
23:23:2a:39:b5:93:1d:21:8e:ab:96:15:9d:2c:71:7a:7a:ca:
af:d5:33:c7:d1:89:5e:17:90:7d:33:36:8b:17:b3:5a:35:98:
fb:fa:0b:93:f9:c2:05:9f:9c:bf:fa:28:91:3b:52:a9:e3:66:
90:43:4a:13:42:83:a2:ca:d5:6c:66:c7:80:91:d5:1d:a0:9c:
eb:dc:80:03:8e:c2:40:1c:4e:4f:d0:c9:34:26:b3:eb:00:e8:
c6:2d:ec:58:8e:c0:ad:13:34:ea:2b:24:a1:cf:d3:94:bb:df:
ab:03:5b:b8:99:cf:08:17:28:51:90:ec:ce:a6:8e:cd:84:56:
aa:7c:19:d7:7e:1e:cc:3a:50:30:70:8e:00:3b:1a:c5:5d:f2:
00:c4:15:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:25:33 2026 by rpki-client