Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
File: thPokOXEBwqIMnayyfd3sQYjxvk.mft (raw, json)
Hash identifier: OKxQ9qa8dr165pIU7PkqCdYbs3fa8jyTnMDQbhlcin8=
Subject key identifier: D9:3F:36:64:98:0A:E5:65:1D:38:15:ED:69:9E:12:81:AE:49:BB:34
Authority key identifier: B6:13:E8:90:E5:C4:07:0A:88:32:76:B2:C9:F7:77:B1:06:23:C6:F9
Certificate issuer: /CN=b613e890e5c4070a883276b2c9f777b10623c6f9
Certificate serial: 01A0D9BB0861DC6A1DA6C5C6D7E0A3868FF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
Manifest number: 0105
Signing time: Fri 25 Sep 2026 18:01:48 +0000
Manifest this update: Fri 25 Sep 2026 18:01:48 +0000
Manifest next update: Sat 26 Sep 2026 18:01:48 +0000
Files and hashes: 1: iSTwcsDq44xmj4bDTIa6k6RLQKI.roa (hash: qWNdY8B5/pf+1M3HkKeiYMgI3P7SCbr9CH/em0VTbyE=)
2: thPokOXEBwqIMnayyfd3sQYjxvk.crl (hash: aByr4V/qPi4vKw6zAJ3fCUAjS3+vULiykzX1VE7DeoU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:08:61:dc:6a:1d:a6:c5:c6:d7:e0:a3:86:8f:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b613e890e5c4070a883276b2c9f777b10623c6f9
Validity
Not Before: Sep 25 18:01:48 2026 GMT
Not After : Sep 26 18:01:48 2026 GMT
Subject: CN=d93f3664980ae5651d3815ed699e1281ae49bb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ea:54:5b:57:6e:b7:b9:05:1c:4f:b6:84:4b:
84:dd:aa:85:ef:2e:e0:8a:34:22:9a:96:e1:5b:bc:
f5:61:fd:b4:22:44:7f:dd:ea:ec:af:9e:a5:e3:81:
b2:59:25:79:56:c4:77:7e:ce:84:66:47:59:4a:f0:
90:e3:81:de:a1:58:f1:e1:76:cb:36:6b:39:bf:54:
54:c5:d6:d5:dc:61:6a:39:5e:a3:a1:94:fa:d5:80:
51:91:b6:e5:bd:11:65:d3:2e:66:23:98:e6:14:98:
3b:31:1e:d7:ba:02:c6:ac:4a:0f:64:8f:4a:bd:38:
81:1c:7f:cc:20:e6:d7:06:c6:57:32:8d:62:22:e1:
e5:2d:1e:ee:9e:1f:cc:b5:b2:07:d4:a7:d8:47:60:
94:ec:97:a8:db:df:c2:c4:df:87:34:a4:fb:a2:13:
dc:88:40:9a:c9:b0:ec:98:14:a8:cd:08:1d:26:ab:
82:0d:15:8a:24:f9:fb:2a:5d:a6:f1:5e:86:76:5d:
cd:b2:37:5b:ec:89:56:79:63:f0:bc:e2:66:0a:ae:
32:5b:2b:93:ac:df:a7:5b:53:29:1b:a1:0f:d7:9c:
20:cd:dd:bb:df:a9:63:94:e1:a2:be:55:9b:62:90:
0b:d4:34:e4:ca:bc:39:0b:41:e1:0d:51:67:3d:02:
71:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3F:36:64:98:0A:E5:65:1D:38:15:ED:69:9E:12:81:AE:49:BB:34
X509v3 Authority Key Identifier:
keyid:B6:13:E8:90:E5:C4:07:0A:88:32:76:B2:C9:F7:77:B1:06:23:C6:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thPokOXEBwqIMnayyfd3sQYjxvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0622ad-c653-4708-a3c2-af426baa357a/1/thPokOXEBwqIMnayyfd3sQYjxvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d7:ca:b2:a6:f3:0b:c2:6a:92:58:15:03:ae:fb:c3:f1:41:
33:ff:f6:85:eb:3e:b7:04:26:41:47:5c:fe:a9:41:34:ea:ec:
49:66:2c:32:8f:90:67:e7:c9:c8:e4:f2:b9:5b:b0:6f:e1:a2:
ff:c3:83:be:72:cb:e9:f9:81:0b:cf:14:21:53:ee:2a:81:1a:
bd:6b:b1:2d:28:85:f0:27:5b:91:95:10:2b:9d:10:e8:95:7c:
6d:37:21:a6:fd:30:af:71:0e:23:4a:c8:09:66:3d:84:08:59:
16:20:4e:a1:4e:c0:01:4c:32:58:ae:38:65:84:3e:a7:43:27:
e1:f8:48:e9:72:a4:dd:c3:71:b1:7d:10:db:30:72:d0:d4:e1:
45:f0:a8:85:66:af:ab:49:e2:e4:9d:fe:71:b5:c5:e7:82:ef:
6b:f4:e5:77:a2:51:f1:a2:1d:cc:d5:81:42:05:3a:fb:c4:66:
92:88:09:87:d9:c5:54:f0:bf:6c:ab:91:41:4e:12:0b:be:1c:
57:8a:f1:c3:3c:a5:b3:a4:d5:ab:15:62:0c:f5:a3:75:db:25:
40:52:aa:1a:aa:5e:06:17:da:78:55:b2:ba:04:28:d8:3b:10:
bf:28:5a:20:5d:fb:55:b5:ce:66:c9:f0:56:2b:ba:a6:92:e1:
81:99:e2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:28:35 2026 by rpki-client