Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json)
Hash identifier: iuiNnxN05iGvmzLINz74TFy6+PA36Aqxy87qVdJhpWs=
Subject key identifier: 48:12:54:04:31:4C:B6:8C:76:2F:39:C2:52:8F:F9:5A:F9:24:66:40
Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Certificate serial: 019D9B50993B673D80E04D88C464ECD66DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
Manifest number: 0BC8
Signing time: Fri 17 Apr 2026 12:00:43 +0000
Manifest this update: Fri 17 Apr 2026 12:00:43 +0000
Manifest next update: Sat 18 Apr 2026 12:00:43 +0000
Files and hashes: 1: 0oPMLH66x2tupyD79gAxo26IWME.roa (hash: njcSyASz9ZENYT0bs7NDyB4Uc9vLtka/VRm0UgpzohU=)
2: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: 3ldR2Qp62Htz/OHep28BOHVTpt0c6I+tCRKLAIgVFe8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:99:3b:67:3d:80:e0:4d:88:c4:64:ec:d6:6d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Validity
Not Before: Apr 17 12:00:43 2026 GMT
Not After : Apr 18 12:00:43 2026 GMT
Subject: CN=48125404314cb68c762f39c2528ff95af9246640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:b8:45:c4:26:34:f1:bf:7e:08:20:c6:eb:
ae:53:8a:4c:98:c5:b5:9f:7f:ca:a6:65:bd:3c:58:
a2:26:79:df:ef:e2:3a:cd:1b:cc:70:bf:b0:b7:42:
c2:ea:c7:1e:a9:c3:38:c0:ec:39:78:40:89:79:d0:
a3:ad:66:b4:7c:cc:2d:f9:55:a7:b9:73:3c:88:35:
43:61:d3:db:a9:6d:1d:c8:bf:42:13:4c:70:34:1b:
16:a5:15:f0:41:9a:ba:18:6f:8f:b8:fe:1f:2f:f3:
a1:af:46:e6:2c:b1:fa:e6:0e:a9:a5:8f:1f:f2:b0:
44:77:11:41:95:2e:26:ed:71:ce:21:06:8c:3a:6c:
e7:7a:8f:42:ce:a3:6f:85:06:d9:f9:1f:6f:c7:33:
39:e7:0e:28:7e:2f:98:f8:21:a4:4a:c4:d4:15:d8:
36:9b:45:f8:0e:08:f0:b7:13:74:43:40:50:17:88:
e2:44:30:ef:8c:75:a4:39:f5:28:30:5b:f1:11:62:
80:80:83:b3:59:f5:7f:5a:70:d9:1d:09:0c:ea:6e:
49:ab:13:73:6a:37:5f:8c:3c:40:4c:82:35:34:9a:
2a:a5:11:6b:f3:42:b7:e4:8c:dc:8a:da:24:85:7e:
da:e6:7f:68:b6:59:bb:7e:47:b5:cb:e0:b2:8b:c7:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:12:54:04:31:4C:B6:8C:76:2F:39:C2:52:8F:F9:5A:F9:24:66:40
X509v3 Authority Key Identifier:
keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:4f:da:93:b3:ac:30:39:7b:81:a6:36:8e:45:8c:17:ed:db:
8d:fb:8e:ce:1b:89:9e:37:ca:8d:6a:41:a5:e1:e9:bd:55:c2:
6c:55:6e:c1:22:a8:ae:bc:fe:80:af:c2:c7:fd:38:14:ec:3d:
e4:60:25:80:d7:97:40:84:60:bc:bf:b6:8a:fe:03:ab:02:ca:
4f:3b:2a:23:c3:7e:9e:83:e8:00:8e:cb:ea:b7:02:6f:05:b4:
05:bd:e8:32:16:58:0b:55:0b:57:c8:82:88:5c:59:24:73:16:
bb:fa:55:f8:4a:9b:a9:27:b5:37:92:0e:86:07:10:12:d8:b6:
69:41:ef:66:fe:2b:8b:f3:49:00:ff:f7:a4:b0:9f:3a:07:34:
d4:12:27:a8:9b:52:d9:de:0c:40:af:6f:72:62:bb:72:0c:64:
1b:d9:0f:81:2f:78:0b:1f:ee:36:71:8a:15:2b:83:67:b8:97:
ac:ad:98:db:df:a9:9c:a0:8f:c3:d3:d6:ef:44:28:85:4c:a3:
22:4e:b1:2c:a8:85:ba:57:1c:49:7f:d2:79:14:2e:a2:97:9d:
bb:6a:5a:5c:f4:3a:32:db:77:1d:ee:3e:f9:3f:eb:3c:c4:3b:
01:03:71:18:eb:f4:84:50:91:78:c4:20:44:bf:72:cf:9b:60:
d5:35:95:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:30:04 2026 by rpki-client