Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json)
Hash identifier: +Vw+Cdv6f/iXB07dh8GpRieWj2YtL8NoxeJ6Vfe89n0=
Subject key identifier: 03:6A:D7:69:62:0D:8A:6E:62:BE:CB:C6:9A:26:1D:01:74:7C:24:28
Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Certificate serial: 019CABD96E83F1C2BF45E349DAEF989B8807
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
Manifest number: 0B4C
Signing time: Mon 02 Mar 2026 00:01:19 +0000
Manifest this update: Mon 02 Mar 2026 00:01:19 +0000
Manifest next update: Tue 03 Mar 2026 00:01:19 +0000
Files and hashes: 1: 0oPMLH66x2tupyD79gAxo26IWME.roa (hash: njcSyASz9ZENYT0bs7NDyB4Uc9vLtka/VRm0UgpzohU=)
2: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: dbyd+DpKdY8sKMIRivju4XSNUEsLG9i2EjpBCIJW4hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:6e:83:f1:c2:bf:45:e3:49:da:ef:98:9b:88:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Validity
Not Before: Mar 2 00:01:19 2026 GMT
Not After : Mar 3 00:01:19 2026 GMT
Subject: CN=036ad769620d8a6e62becbc69a261d01747c2428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:af:ae:08:9b:3d:79:fc:0f:86:4b:1a:e2:
e3:d4:73:2e:fd:03:6f:3c:2a:4d:86:28:a3:83:81:
20:2c:1d:ff:5e:3a:1d:9b:9f:c9:9d:f1:a1:e7:35:
d5:35:26:44:ce:f9:1d:ca:5b:57:b1:44:2e:26:d5:
10:3e:7d:11:3e:21:37:2b:08:79:b1:9e:50:bf:dc:
c3:31:39:0e:e5:72:bb:9b:90:cb:36:14:79:ed:60:
95:c3:72:10:af:47:93:02:bf:f7:78:07:5c:72:06:
f1:7e:86:b1:21:44:f8:43:fd:33:94:7f:53:dc:20:
d3:99:6a:71:71:9e:a5:1b:b7:4c:b7:1c:e8:fd:8d:
a2:f0:c7:cd:da:4c:ab:67:e0:e1:28:19:6f:cf:b7:
55:7d:d6:b5:4c:30:e7:4c:81:c0:8e:7a:9a:7c:74:
9f:d3:fc:b5:f0:86:74:72:9d:f8:ea:2b:44:e3:cd:
43:24:0d:8e:48:b5:e0:9c:a8:d3:e9:a1:78:e8:4e:
00:c9:13:08:6d:a4:53:87:be:f2:29:4a:6c:f0:80:
f5:92:b8:a9:f0:40:08:24:a2:ef:96:08:25:fc:bf:
6a:c0:6e:21:4c:07:84:70:03:cc:53:dd:e4:5b:97:
e0:e7:8e:8f:80:3b:73:5c:3f:64:63:20:96:5f:f4:
ec:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6A:D7:69:62:0D:8A:6E:62:BE:CB:C6:9A:26:1D:01:74:7C:24:28
X509v3 Authority Key Identifier:
keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9d:72:71:58:e1:97:85:db:44:d3:0e:8e:76:81:05:bb:fa:
4d:97:60:86:5d:cb:1f:3d:19:a4:f2:42:fa:cd:a0:05:47:d9:
fc:61:1a:6f:3f:62:19:69:6b:e0:64:07:58:37:b3:39:42:6e:
af:5e:1c:d5:2e:aa:a6:58:55:2d:89:d3:43:5e:03:71:d9:44:
44:1b:bd:9f:eb:2a:8a:b3:1c:1d:57:7c:16:d6:23:9d:ca:58:
86:1f:4e:63:73:d1:a3:26:e7:01:d8:a7:10:5c:09:85:89:a1:
8f:52:26:3b:96:9a:6d:58:7c:c9:24:ad:25:b4:f3:3d:4c:67:
08:60:5a:0e:b6:80:64:bc:4b:b1:9e:44:ff:4e:d4:92:eb:c9:
9d:51:95:ef:4a:43:5a:b3:ed:75:a1:ff:7b:1d:c5:bf:60:e5:
3a:45:85:4b:1e:31:5b:e0:1c:b5:39:b7:ab:9f:4d:c1:63:62:
c1:c4:06:79:45:43:22:a7:36:6c:6b:2b:e5:2d:63:0b:12:94:
1a:a5:50:82:4d:01:4d:91:9f:b4:38:18:0a:f7:c4:1e:99:b4:
cd:a1:32:e0:cf:65:71:a3:6a:8d:41:72:05:2c:ec:5f:92:7b:
1e:a3:e6:a2:35:68:4f:ac:41:13:0a:ed:a0:77:84:3d:3c:39:
89:1f:70:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:55 2026 by rpki-client