Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
File: ThPQwKcD4JzaZMErCN2it0mgQpw.mft (raw, json)
Hash identifier: eXfvqYZx7MJtpbt0MaxhPa26Okutcnq/feSU5PBoUHA=
Subject key identifier: 10:A8:E9:99:A9:1B:48:EC:41:4A:62:28:F3:D9:44:9E:70:ED:F1:40
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019D2746725D8B03F1DE1496B30E030B34FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
Manifest number: 35B7
Signing time: Wed 25 Mar 2026 23:13:39 +0000
Manifest this update: Wed 25 Mar 2026 23:13:39 +0000
Manifest next update: Thu 26 Mar 2026 23:13:39 +0000
Files and hashes: 1: ThPQwKcD4JzaZMErCN2it0mgQpw.crl (hash: fAWY//ddKuOgDLTemS/DnLUXKlfvVe8/yev3bg8gGCQ=)
2: cICVe4KZ675m8Dg1RqECpOJ8Dp0.asa (hash: ezQu+wOZ+7v7t2FdNh7IJPPoUwXLmpeXhU+n9wR9WKU=)
3: w15_5Pw6YNCa9BuZawakXYCf3M8.roa (hash: KKbNWbjHOrntBAMd1tqvEzHYIX6t8YcsC3l308ukvLc=)
4: xyp_Iby9mLCKedhH7XaeH3bzkYs.roa (hash: T+6HgZ5DwtKzv0B7z7HcafNxxzq11J0GKjbUEYKplNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:46:72:5d:8b:03:f1:de:14:96:b3:0e:03:0b:34:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Mar 25 23:13:39 2026 GMT
Not After : Mar 26 23:13:39 2026 GMT
Subject: CN=10a8e999a91b48ec414a6228f3d9449e70edf140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:34:90:e1:f4:09:28:2e:3d:04:eb:d2:74:
8f:dc:18:00:07:1d:cb:81:6f:9e:9c:ae:48:af:ae:
d8:69:e6:53:9e:d7:74:83:0b:74:8d:92:0d:8d:40:
a6:41:2a:8a:dc:37:55:36:98:4e:3b:d1:70:85:ba:
d3:a2:63:6d:9b:73:11:e8:2a:24:88:4c:75:b9:b0:
d9:cf:80:fe:61:06:d8:39:4b:2d:cc:30:e4:be:68:
8a:a1:d5:82:af:5f:3a:ab:56:a4:b4:e2:58:8e:28:
89:b0:8a:c1:84:35:ee:87:00:5e:d6:a0:16:ee:11:
ae:4a:89:7d:00:8b:38:0d:6d:3f:67:77:0a:90:60:
94:e0:a0:cc:f7:de:3b:f8:81:f3:2d:8a:69:f6:7f:
3f:1d:ea:53:b5:de:a7:1a:10:bf:f8:67:07:6f:84:
29:2b:74:a1:46:b2:04:1b:79:a5:67:da:b9:f5:78:
84:58:7a:4b:7c:82:30:b9:7e:4e:fc:f6:df:40:95:
3c:cc:39:8a:ca:1a:c8:69:f1:5a:bc:ac:59:24:90:
9a:b0:4f:b6:80:4c:57:04:da:63:21:cf:b7:88:f2:
27:38:86:eb:aa:90:a1:ef:3e:69:a5:e9:cb:d6:e6:
9c:31:a2:bb:51:1d:97:83:09:db:a1:01:7c:9e:f6:
45:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A8:E9:99:A9:1B:48:EC:41:4A:62:28:F3:D9:44:9E:70:ED:F1:40
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c3:8d:14:1f:7f:28:6a:b5:18:6d:95:7c:3d:5e:c3:cc:47:
d1:38:e4:22:aa:48:b4:56:cc:50:ab:58:9a:99:7d:28:97:eb:
44:df:d8:58:be:fd:f0:0f:8b:b3:cd:09:82:b0:8c:80:ec:76:
c8:4d:c6:2a:d5:dc:16:24:b9:14:5a:67:70:29:1b:b7:12:ec:
51:a3:f4:65:ad:1f:7c:6c:86:50:bd:09:ec:03:f0:62:ef:b4:
e1:2b:58:ff:8e:be:6c:2b:ba:30:5e:f6:c0:56:99:cf:3b:12:
15:67:5e:a1:a7:3e:c9:3d:96:33:c6:76:5d:81:5b:16:4e:80:
9f:d1:5d:af:df:87:73:e4:52:d0:6f:8e:0a:8e:0e:fe:77:74:
de:b0:15:96:41:88:6d:f3:be:c1:21:c9:12:df:47:b0:67:b6:
19:0c:97:e7:a5:ef:d0:ca:c6:af:d3:07:74:7b:11:2b:df:94:
7c:50:44:a7:a5:71:d7:61:09:67:d8:33:ec:10:cf:be:7e:a1:
d8:9e:c8:b4:5f:da:35:d9:19:af:29:dd:e7:a1:08:25:38:14:
c3:e6:9e:4d:27:cc:9d:53:6e:cf:f5:9d:13:8f:e6:e7:64:41:
64:a8:ed:ce:26:81:9f:c0:aa:b1:a0:5b:76:fc:37:f8:bf:26:
ea:b7:00:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:32:30 2026 by rpki-client