Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: vFL1I028JYZdgGAaJy7pQAWNjpX18IPoop0P73p5F5E=
Subject key identifier: ED:66:32:93:03:2D:04:3E:F6:9C:BF:E0:7B:9C:DE:11:50:4C:AB:49
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 019D29976B723B898978E92DF11ECD2A7C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 10:01:22 +0000
Manifest this update: Thu 26 Mar 2026 10:01:22 +0000
Manifest next update: Fri 27 Mar 2026 10:01:22 +0000
Files and hashes: 1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: Ym0uwWD5//11dsYmo0FGsmO2ahF1eUoIStnU5+sVJdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:6b:72:3b:89:89:78:e9:2d:f1:1e:cd:2a:7c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Mar 26 10:01:22 2026 GMT
Not After : Mar 27 10:01:22 2026 GMT
Subject: CN=ed663293032d043ef69cbfe07b9cde11504cab49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:58:75:a8:2f:ad:3b:e1:bf:80:88:f8:5b:b9:
9a:8a:e1:3e:f7:2d:e2:7f:22:68:a8:1e:b9:7c:57:
69:e1:e0:fd:24:f5:f1:e5:82:6a:12:85:86:e5:de:
3f:a4:40:4c:cf:a2:ee:dd:9a:bc:e6:4d:4e:a4:f7:
da:6f:95:9c:f5:5f:05:82:f2:26:a1:d8:ef:1e:45:
81:e9:00:8d:75:a0:6e:03:a1:38:1f:e1:e6:6f:a9:
5c:42:4d:25:41:47:c3:7b:b7:23:2d:37:eb:53:ef:
5b:4d:fb:4e:e3:e7:51:6d:b1:8d:72:5c:ad:79:d6:
2c:1d:b2:b1:8c:6e:dc:66:b9:a8:37:2d:bc:bb:94:
f6:dc:2b:4e:8a:84:45:cc:d0:5f:fc:6d:f5:77:33:
8c:59:fc:24:ee:96:1d:f6:72:98:f9:28:db:f2:c3:
d1:78:66:1f:af:73:6e:e0:ee:b3:74:67:61:99:8b:
e2:f8:2c:6a:73:b9:ae:53:4d:5b:21:7d:f4:89:a3:
ac:73:2a:19:57:2d:51:ff:ba:e2:81:b8:b3:4f:34:
0f:d3:b0:b3:f4:4d:59:e2:80:4c:a9:87:6f:d8:6f:
0e:99:79:6d:87:af:11:3f:16:f4:e6:6d:c6:e5:f5:
6e:22:8f:6b:63:f2:74:64:5a:01:92:c7:42:9a:37:
29:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:66:32:93:03:2D:04:3E:F6:9C:BF:E0:7B:9C:DE:11:50:4C:AB:49
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:35:26:c0:ee:f5:a7:a7:5a:01:92:c3:09:d8:5d:20:6c:dc:
5f:c1:6a:00:9b:2e:69:95:d4:14:f5:db:54:74:a2:f4:09:2b:
e8:a9:a4:43:d6:db:ee:43:5d:00:74:68:c3:99:d8:15:2f:02:
34:55:8f:15:3e:a5:8c:11:98:53:3a:fa:d6:af:74:fc:cc:d0:
c0:f9:a8:34:b8:df:86:90:26:77:45:27:7d:b9:d8:3d:c9:8d:
75:fd:40:43:05:6f:f0:e3:55:dd:97:c9:91:bf:07:05:b8:c6:
e0:6d:66:0e:c2:a1:a4:66:2b:3c:ca:6c:b3:c9:06:4a:a9:d3:
57:99:e0:5f:d9:e6:c7:19:09:77:ee:c3:26:d8:41:30:b4:e5:
6f:86:35:e2:a7:76:10:07:24:58:cd:4b:9c:7d:49:32:5c:f4:
0b:4e:04:8d:35:39:0e:61:32:cf:41:ab:26:a7:34:78:02:2c:
24:bb:db:0d:fc:5c:9c:95:05:03:77:d1:b2:60:47:10:ff:10:
b9:31:cb:d4:73:f8:d0:e4:93:59:4c:93:71:b9:67:c3:88:d7:
a8:83:0a:4e:3a:8f:a9:54:fe:56:f0:f9:0f:59:ad:88:95:c6:
83:5b:7e:16:cf:32:d7:07:f4:34:11:64:b7:fd:97:48:1e:3e:
e3:9d:0e:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl2tyO4mJeOkt8R7NKnwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkMjFjYjliMmY4YzVkZTlkYWEzMDg4OWQ5ZTIzOTQ1Mzdi
YTNlMzgwHhcNMjYwMzI2MTAwMTIyWhcNMjYwMzI3MTAwMTIyWjAzMTEwLwYDVQQD
EyhlZDY2MzI5MzAzMmQwNDNlZjY5Y2JmZTA3YjljZGUxMTUwNGNhYjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA31h1qC+tO+G/gIj4W7maiuE+9y3i
fyJoqB65fFdp4eD9JPXx5YJqEoWG5d4/pEBMz6Lu3Zq85k1OpPfab5Wc9V8FgvIm
odjvHkWB6QCNdaBuA6E4H+Hmb6lcQk0lQUfDe7cjLTfrU+9bTftO4+dRbbGNclyt
edYsHbKxjG7cZrmoNy28u5T23CtOioRFzNBf/G31dzOMWfwk7pYd9nKY+Sjb8sPR
eGYfr3Nu4O6zdGdhmYvi+Cxqc7muU01bIX30iaOscyoZVy1R/7rigbizTzQP07Cz
9E1Z4oBMqYdv2G8OmXlth68RPxb05m3G5fVuIo9rY/J0ZFoBksdCmjcpuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO1mMpMDLQQ+9py/4Huc3hFQTKtJMB8GA1UdIwQY
MBaAFE0hy5svjF3p2qMIidniOUU3uj44MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUt
MTQ5ODcyNDNhYzU2LzEvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9kOTk0ZGQtZGU1Mi00NjEyLWIwZmUtMTQ5ODcyNDNhYzU2
LzEvVFNITG15LU1YZW5hb3dpSjJlSTVSVGU2UGpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgTUmwO71
p6daAZLDCdhdIGzcX8FqAJsuaZXUFPXbVHSi9Akr6KmkQ9bb7kNdAHRow5nYFS8C
NFWPFT6ljBGYUzr61q90/MzQwPmoNLjfhpAmd0UnfbnYPcmNdf1AQwVv8ONV3ZfJ
kb8HBbjG4G1mDsKhpGYrPMpss8kGSqnTV5ngX9nmxxkJd+7DJthBMLTlb4Y14qd2
EAckWM1LnH1JMlz0C04EjTU5DmEyz0GrJqc0eAIsJLvbDfxcnJUFA3fRsmBHEP8Q
uTHL1HP40OSTWUyTcblnw4jXqIMKTjqPqVT+VvD5D1mtiJXGg1t+Fs8y1wf0NBFk
t/2XSB4+450OYQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:56:44 2026 by rpki-client