Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: BBd2a+TW4kIZ6/Whax479g1lKz+w6xBg7LP5gZ/jEGc=
Subject key identifier: 94:53:38:7A:03:9B:54:38:25:EC:0C:E0:91:9F:A7:F3:45:D3:77:9B
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 019E1ED9C3257A1442F8CD3FB48983A1C391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 01:00:48 +0000
Manifest this update: Wed 13 May 2026 01:00:48 +0000
Manifest next update: Thu 14 May 2026 01:00:48 +0000
Files and hashes: 1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: iSThfoMWYDPr4K1nKu0ro3brV/qP4l6utvJoRCvWokA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:c3:25:7a:14:42:f8:cd:3f:b4:89:83:a1:c3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: May 13 01:00:48 2026 GMT
Not After : May 14 01:00:48 2026 GMT
Subject: CN=9453387a039b543825ec0ce0919fa7f345d3779b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:5b:59:67:f7:1d:99:08:ce:aa:60:3e:8e:
4c:6c:bc:46:07:da:bb:7f:3d:0c:e3:ef:82:fd:cc:
a1:ed:9e:2f:10:c4:d1:f2:d7:c5:cf:76:72:b7:5c:
13:d3:88:0e:2c:77:e7:01:17:d5:47:c1:f1:b5:78:
8d:eb:44:b7:93:02:e3:2d:2b:07:23:e7:3c:a0:6f:
55:83:2d:66:b6:f2:77:e0:b9:e6:3e:60:a1:bb:58:
89:29:c4:81:fd:dd:4d:da:f1:d7:3b:37:10:bf:3d:
8b:e7:85:4e:b5:90:62:a3:7e:db:1b:59:65:04:65:
4a:eb:08:21:e5:5c:4d:e1:89:91:a9:e0:3f:2c:50:
b9:34:cb:4e:d3:4a:29:22:f1:e2:7a:81:09:90:ba:
04:09:67:c7:00:72:29:ec:5a:a1:4b:1c:ca:c9:1b:
5f:3d:f9:fc:3a:c8:09:a6:74:79:dc:fc:36:d3:3d:
93:0a:2d:30:d9:04:04:1d:69:75:cc:5d:f3:71:a3:
df:7f:e2:74:7a:e0:c7:42:dc:93:01:e4:06:f8:f9:
4b:bb:23:3d:cc:28:30:0f:99:bf:e4:a4:99:20:04:
e8:d3:7b:43:04:a3:53:45:27:03:fd:54:96:ea:57:
ba:6d:d8:9f:14:5d:2b:4e:0f:78:10:11:05:e4:d1:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:53:38:7A:03:9B:54:38:25:EC:0C:E0:91:9F:A7:F3:45:D3:77:9B
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6e:3d:9d:d7:e9:3a:8f:7d:7c:c9:41:88:c2:bf:85:8f:d8:
8d:cf:ad:5b:2f:9c:41:df:5d:d4:b5:56:2f:2a:ab:cb:94:13:
38:5b:ce:51:1b:d5:72:1e:fb:e9:fe:13:ad:7e:36:29:2f:bd:
9a:de:78:f1:24:78:cd:ab:10:91:9f:05:bb:62:a8:43:14:de:
77:b9:3b:a2:1d:02:ed:a0:07:16:1b:4f:3e:f9:9e:b3:4f:cb:
9a:d7:db:1e:4d:7a:dd:5c:dc:d1:21:b7:b7:d3:21:42:fd:1d:
c8:f8:28:44:0e:67:4f:1e:e5:41:67:09:1c:c2:01:a6:9c:ef:
c1:db:43:8f:62:8e:44:51:fa:91:40:0d:cd:09:8f:b6:b1:61:
94:f9:fd:40:f5:e9:9b:40:66:21:7e:4c:51:9b:bd:0c:e9:c0:
cd:7b:4e:c5:94:82:0c:9b:83:04:6a:ea:70:1b:be:ac:02:c2:
fa:c7:91:cb:61:1d:74:bb:64:10:3d:67:06:19:fb:9f:5a:bf:
2d:05:6f:7e:44:e7:fd:d7:a1:cf:ce:1c:5f:f7:0c:83:18:b3:
4a:52:57:1a:b1:29:f9:d0:70:2c:b8:4c:1a:ad:72:1c:f0:72:
58:db:8e:dd:6b:4f:e5:8f:a8:9c:fc:a6:46:7e:35:96:40:30:
54:0e:8e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:35:26 2026 by rpki-client