Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
File: THkVQTlO1-dpwf2JlVwfKBi0RbI.mft (raw, json)
Hash identifier: 8ntXGimL/I9M1ML4k0JbcNpA2EwaS63sZWdilHdzi8s=
Subject key identifier: 06:3F:D3:CA:D3:BF:83:13:62:8F:43:39:79:A0:0A:17:DD:80:2F:E0
Authority key identifier: 4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2
Certificate issuer: /CN=4c791541394ed7e769c1fd89955c1f2818b445b2
Certificate serial: 01A0E550990DCA7C769F2A9675FB5757A12C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
Manifest number: F0
Signing time: Mon 28 Sep 2026 00:00:59 +0000
Manifest this update: Mon 28 Sep 2026 00:00:59 +0000
Manifest next update: Tue 29 Sep 2026 00:00:59 +0000
Files and hashes: 1: 46tVnxWXBd54uDnUWiQrDEewYbs.roa (hash: iC7XI+Wul/0hfYbUzsUQgkjKjAE4JznP2trrEiMwN1I=)
2: 9ahwneSFqD3SaROmAUIGBjc82SE.roa (hash: CxJPqcqx0ZwsWZa7MbNafetbcRteWJmW7Gj2s8BmLiE=)
3: THkVQTlO1-dpwf2JlVwfKBi0RbI.crl (hash: XB0bpJAhDxMUe8EqgpqFN6mPHoiUeaHzeNR1+eI1/yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:50:99:0d:ca:7c:76:9f:2a:96:75:fb:57:57:a1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c791541394ed7e769c1fd89955c1f2818b445b2
Validity
Not Before: Sep 28 00:00:59 2026 GMT
Not After : Sep 29 00:00:59 2026 GMT
Subject: CN=063fd3cad3bf8313628f433979a00a17dd802fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:09:9b:b8:31:dc:07:f7:8a:94:a6:a3:d4:f8:
ef:77:84:87:ea:c9:97:e2:f0:1a:73:86:73:ee:fb:
8d:a2:15:0f:6d:7d:71:71:26:c2:af:bc:52:cb:36:
84:6c:7e:e8:fc:d6:e4:df:98:a7:47:d7:6b:ee:e6:
6c:4f:e3:8c:04:7f:85:1c:11:de:02:c9:66:11:59:
bc:4b:4c:6a:bb:25:e3:d7:1e:58:02:df:2c:14:29:
05:7d:cd:39:93:d0:f6:13:10:89:d7:d3:ed:bd:00:
11:19:a0:06:9d:0b:21:08:6e:d4:df:ff:a7:df:38:
9a:5b:3f:2f:1b:e8:4e:b6:86:00:d1:e1:99:87:d8:
dd:b1:b2:a6:d7:2c:f2:5a:87:eb:ce:a0:2a:2f:6f:
63:0e:ab:1c:d0:18:28:24:b0:30:75:da:76:77:38:
31:e4:8b:e4:0e:c6:98:8e:c0:64:67:cf:5a:37:ab:
fb:05:d7:e1:cb:6e:35:66:39:ad:81:fd:57:b7:c8:
16:46:c5:f0:b9:bd:f3:67:32:02:0a:9f:04:2b:74:
77:d4:a7:b4:09:83:d7:cb:b9:ed:4b:48:87:0d:c3:
27:c0:6c:90:5b:09:28:09:cd:4a:b0:a6:e2:57:2e:
24:ee:f1:65:7d:77:35:ba:82:60:ac:6b:cc:2b:e3:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3F:D3:CA:D3:BF:83:13:62:8F:43:39:79:A0:0A:17:DD:80:2F:E0
X509v3 Authority Key Identifier:
keyid:4C:79:15:41:39:4E:D7:E7:69:C1:FD:89:95:5C:1F:28:18:B4:45:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THkVQTlO1-dpwf2JlVwfKBi0RbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/THkVQTlO1-dpwf2JlVwfKBi0RbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8f:b0:58:1f:c8:c5:dd:28:eb:37:45:0a:8e:90:bf:81:d7:
8e:6e:e6:ff:30:eb:b7:04:ae:96:65:34:a9:0e:88:6b:35:88:
c5:08:ed:ef:7d:ef:b6:0c:ae:28:81:d7:8e:e8:ac:a9:30:da:
66:7b:12:3e:6f:28:d3:c8:58:5b:18:5f:76:75:75:6d:a6:98:
f7:19:cf:9c:0b:8c:27:41:31:57:88:03:17:9b:91:f6:bc:52:
40:19:8f:60:74:99:2b:8d:c5:46:23:dc:db:6d:e2:e1:3f:6e:
ea:92:3e:1b:ff:0c:d2:07:07:49:47:24:f8:1f:06:8c:ba:1d:
48:ff:dc:16:95:6c:ea:51:d0:02:42:9d:29:c1:3b:be:6d:43:
31:b6:27:a4:c9:2e:77:0e:97:3b:3f:ff:4f:ca:15:aa:7a:3c:
5f:db:73:ae:92:71:d4:c6:04:0e:61:4e:e2:91:74:37:8f:f6:
87:0c:85:5f:a3:a4:51:a6:58:47:11:b8:d3:4b:6c:e4:27:d9:
a6:c1:cd:17:4d:c1:05:a3:fe:b2:67:43:02:b7:33:05:9a:2d:
08:41:30:37:1b:d2:6d:04:95:e4:67:ef:c0:f0:5f:2b:a0:6f:
d9:15:bf:af:da:a9:f4:02:06:19:08:cb:6f:1c:10:9b:dd:dc:
ae:fb:2c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 03:49:13 2026 by rpki-client