Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: OExcgu4dfcbJfUE6iLChRmGt8+Ux7S35ywvIct7HhSc=
Subject key identifier: 4A:64:93:D2:61:4A:07:3C:38:40:5E:5C:3A:C9:5B:1D:8E:B3:64:68
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 01A11003D6CE8D22EFD6B6C83162DE457909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 1A8B
Signing time: Tue 06 Oct 2026 07:00:49 +0000
Manifest this update: Tue 06 Oct 2026 07:00:49 +0000
Manifest next update: Wed 07 Oct 2026 07:00:49 +0000
Files and hashes: 1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: yKC838j938hmpwu/Fn4lS/DvswNKDZxcJdBTkjMNhvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:03:d6:ce:8d:22:ef:d6:b6:c8:31:62:de:45:79:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Oct 6 07:00:49 2026 GMT
Not After : Oct 7 07:00:49 2026 GMT
Subject: CN=4a6493d2614a073c38405e5c3ac95b1d8eb36468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5f:0c:6f:1e:72:97:72:d0:fa:d3:65:16:4c:
20:f7:5b:12:3a:57:44:14:cf:e0:60:e9:fa:cf:58:
06:c7:14:ae:4a:f8:b7:57:ea:bd:39:0a:ca:62:bf:
94:ed:f5:54:e6:4b:a0:ad:70:8b:d4:ad:bc:b8:b7:
c9:62:4b:29:8a:89:b4:65:11:cc:c7:8c:ee:07:85:
9f:c4:7a:5e:9d:37:88:52:b4:98:22:9c:59:1e:eb:
5e:fa:ec:bf:97:87:6c:7a:e0:37:7e:7e:17:17:9a:
11:97:65:aa:c4:91:70:58:1d:69:ab:c2:fc:bd:7b:
51:b6:c5:ef:ed:35:c7:2a:0e:c0:d9:67:ed:96:47:
ff:68:7c:ad:3e:43:e0:ae:37:39:fb:df:e4:e3:b3:
f9:ea:d2:a5:15:46:95:cd:ad:69:58:fd:c2:67:92:
41:0b:32:fe:5d:9a:e2:95:82:df:53:d5:aa:aa:02:
34:c9:64:16:26:ec:47:bd:8e:fc:5d:ea:6c:6b:f7:
80:b6:1b:ce:30:24:50:03:67:e6:2d:61:8d:1a:e1:
9d:29:48:29:10:ab:1d:3b:3c:8d:15:0c:3c:36:82:
d4:c6:ee:fe:6d:66:68:59:71:00:1d:d0:2b:7b:f2:
41:81:d5:32:e7:a0:ae:c3:8a:d9:b8:4c:61:7b:10:
f9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:64:93:D2:61:4A:07:3C:38:40:5E:5C:3A:C9:5B:1D:8E:B3:64:68
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:49:ab:f9:e8:a5:9c:03:c3:0d:ac:22:46:38:7a:6f:d2:b2:
51:d7:9f:77:b4:43:d3:90:5a:0b:f1:bd:dd:15:44:67:d9:20:
03:84:5e:c7:23:32:10:2e:c2:db:ff:2a:a7:94:14:97:9c:dc:
9d:b5:e9:68:bb:5f:a5:d5:30:91:82:16:77:49:20:e5:75:5f:
12:e0:31:8e:5b:76:1f:4f:c9:97:c8:ed:7e:19:c3:df:f3:8c:
fd:67:da:f2:c5:bd:17:e3:dc:55:d3:2b:61:4c:5a:1b:93:70:
51:70:9f:a8:b8:91:d7:6b:f4:68:c7:3d:be:92:5f:e5:8a:23:
39:3b:11:9c:f1:2a:59:99:bf:b1:80:1a:f3:6c:ac:fd:a0:f8:
61:d2:46:99:04:3f:ce:48:38:f2:ea:8e:10:5f:34:9e:01:66:
2d:17:75:6c:dc:ab:83:80:85:f4:35:3d:0c:03:3a:76:4a:01:
c2:e6:79:a1:d4:f3:64:7e:38:72:3c:b2:ae:7b:14:00:b8:7f:
18:b6:75:71:58:e1:29:7f:a5:a3:dd:43:63:b7:30:c0:2c:3c:
e3:45:da:f1:3f:1b:f8:70:70:35:12:38:84:63:c6:0c:ee:d1:
0a:5b:2b:7a:5c:f1:eb:12:f7:89:b5:33:ed:a3:21:f4:9e:cd:
9a:ef:58:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:28:08 2026 by rpki-client