Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
File: ThPQwKcD4JzaZMErCN2it0mgQpw.mft (raw, json)
Hash identifier: k7tELIOLQeDl9kFs/YB3c0jiB2Kthlku1E3EE1Imf8U=
Subject key identifier: D7:A0:8D:D2:76:92:2C:BA:68:52:1A:36:AE:44:EF:78:4C:82:05:12
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019D27B27C32E28D917323EBFE055C0C44C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
Manifest number: 35BB
Signing time: Thu 26 Mar 2026 01:11:39 +0000
Manifest this update: Thu 26 Mar 2026 01:11:39 +0000
Manifest next update: Fri 27 Mar 2026 01:11:39 +0000
Files and hashes: 1: 7LbBJDonGKJ0Wv_0SpAwoZSFS0w.roa (hash: 1IWEEunfKVLARC96WYW1dTqztY8CMO9qq3yy/k8Fw9s=)
2: ThPQwKcD4JzaZMErCN2it0mgQpw.crl (hash: +hAA10nCK2UoEw5zhHTBs0dxSqBRls5laqYgOig09e4=)
3: cICVe4KZ675m8Dg1RqECpOJ8Dp0.asa (hash: ezQu+wOZ+7v7t2FdNh7IJPPoUwXLmpeXhU+n9wR9WKU=)
4: w15_5Pw6YNCa9BuZawakXYCf3M8.roa (hash: KKbNWbjHOrntBAMd1tqvEzHYIX6t8YcsC3l308ukvLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:b2:7c:32:e2:8d:91:73:23:eb:fe:05:5c:0c:44:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Mar 26 01:11:39 2026 GMT
Not After : Mar 27 01:11:39 2026 GMT
Subject: CN=d7a08dd276922cba68521a36ae44ef784c820512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:50:55:92:b7:fd:18:e2:80:a2:cd:dc:67:
1f:04:84:26:eb:4d:5a:cf:65:92:21:08:26:74:f9:
9a:45:4d:cd:5e:b7:5e:70:2f:21:15:67:73:bb:29:
91:dd:bf:24:ad:90:ee:f0:e8:59:02:59:54:11:5d:
51:b6:27:03:55:26:a7:59:ed:5d:ee:3c:8e:ce:7e:
1f:75:a0:f6:8f:68:43:a6:c7:55:52:dc:cd:b0:6c:
f5:2f:47:23:b5:1e:b4:f0:53:27:8c:d4:32:81:04:
36:18:b2:7a:f1:fd:9a:a4:57:46:67:8c:02:e8:e8:
da:af:9e:e6:bc:25:0c:f7:ba:b4:8a:e2:e2:8b:28:
9d:7c:87:c2:fe:d4:78:cd:bc:4a:f6:93:a8:41:53:
cf:4b:e9:f7:0d:be:cd:8f:6c:84:59:41:d3:c1:3a:
d3:7a:3d:fc:e4:f1:bd:f7:8d:d8:46:d9:9b:40:58:
d1:f9:e7:47:43:e6:f5:50:45:bc:1a:dd:f6:5d:f8:
53:b8:c1:e4:98:16:ec:05:74:24:21:33:ed:f5:7a:
84:41:50:59:34:99:4b:20:0d:7b:c0:b1:86:12:8f:
f4:18:09:27:8e:d2:d3:18:8b:62:30:85:58:ee:0d:
23:fe:41:c2:5b:9b:25:60:15:2d:5b:7a:4d:61:54:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A0:8D:D2:76:92:2C:BA:68:52:1A:36:AE:44:EF:78:4C:82:05:12
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:bc:b8:8f:14:c8:e0:43:0c:63:ee:cf:52:6b:c0:ac:14:b8:
53:75:df:36:7a:00:ca:ca:75:07:ce:a9:75:e6:b2:21:e3:f9:
ca:d7:b1:48:c9:b4:6a:84:db:1c:a1:95:86:4d:17:0b:3b:8e:
d3:9d:d2:34:81:88:35:d3:19:a1:ac:df:a1:c4:f5:be:a8:aa:
93:ec:50:0e:fb:e4:f3:dd:b9:00:ea:70:18:9f:61:33:bc:f2:
59:71:17:76:15:db:b5:80:00:c8:71:89:38:df:c5:0c:e9:6f:
18:df:d5:10:fd:91:14:fd:29:ba:ff:7d:dd:5a:aa:23:39:56:
b3:3d:5a:53:59:94:c1:5b:5f:c2:b1:87:b2:0b:62:ec:64:55:
28:ba:10:83:ee:0d:ff:25:30:b3:16:0c:5f:0e:17:93:43:2a:
82:1b:10:3b:0a:14:05:3f:8a:72:b6:13:85:66:d6:d7:50:b7:
79:96:a7:be:a6:03:d0:ee:7d:f4:1f:42:74:72:ee:3e:b9:86:
c2:aa:91:5b:9d:be:20:3f:45:85:e4:b6:30:20:6c:1e:ff:4c:
c1:33:39:d6:f6:78:99:cd:0d:db:b5:b1:8b:52:e1:5b:99:3f:
80:02:df:2b:f8:89:64:df:6d:4b:75:eb:82:80:28:2a:c8:25:
8a:1a:28:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:41:35 2026 by rpki-client