Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
File: thpyv6TKq8uk7ASEE3pRb580Q0Y.mft (raw, json)
Hash identifier: qoXJJwBF2YAOjAmC2SU3DWYRKSRQVf8yyNuZzlmIkAY=
Subject key identifier: 9D:A0:45:AD:E7:7E:35:57:F5:2E:BB:F2:EC:8E:AE:50:BA:F1:B7:55
Authority key identifier: B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
Certificate issuer: /CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Certificate serial: 019CAAFCF8F45538FA5024FE626F5B061015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:00:31 +0000
Manifest this update: Sun 01 Mar 2026 20:00:31 +0000
Manifest next update: Mon 02 Mar 2026 20:00:31 +0000
Files and hashes: 1: 3vWXTbTpDM0ymRMTdG3MOaM9Vbk.roa (hash: vKhrAJbWhh00/xBbyVciFsXn8wyB3UjGH2N5E0ovZYw=)
2: thpyv6TKq8uk7ASEE3pRb580Q0Y.crl (hash: eewlG7d8olp5zMVy7wesauGMQLaFyoQnU65WTfYgzfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f8:f4:55:38:fa:50:24:fe:62:6f:5b:06:10:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61a72bfa4caabcba4ec0484137a516f9f344346
Validity
Not Before: Mar 1 20:00:31 2026 GMT
Not After : Mar 2 20:00:31 2026 GMT
Subject: CN=9da045ade77e3557f52ebbf2ec8eae50baf1b755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a9:3e:76:b0:92:5b:bb:fd:0c:25:54:a7:48:
72:d4:80:fc:02:fe:4f:18:44:cf:59:c0:26:e3:42:
81:93:54:e9:8b:c6:df:b4:00:ce:db:26:82:86:2b:
1b:36:c9:74:ed:0e:d1:74:de:a0:ee:da:ad:79:d4:
88:e5:7d:5e:49:69:57:e8:46:81:dd:e8:62:f9:fd:
d9:9e:18:a5:27:bd:88:3e:07:ea:4f:dc:5a:c0:0a:
38:c8:5e:8e:08:53:8e:55:1a:12:52:d4:88:09:6a:
e9:fe:d2:b1:e0:fd:57:28:24:e0:90:3c:a8:57:02:
4b:23:ff:36:30:e8:bf:92:d1:0a:06:17:00:a1:bc:
6b:06:03:6c:2f:ab:d9:0c:b1:da:9d:54:25:2a:df:
df:19:60:02:ec:bc:10:09:5c:9c:15:75:36:ed:cf:
cc:25:8a:fa:39:5b:39:63:7b:cd:55:ce:a2:7f:59:
91:aa:ce:a0:e3:6b:29:ce:ed:4a:80:a6:4f:64:fa:
70:12:28:42:cb:1a:44:bb:5a:97:84:4b:8a:40:57:
76:ec:ce:d2:28:92:c9:8e:4e:3b:23:3c:b4:c7:79:
5f:ab:e0:98:91:ba:93:10:58:14:aa:ef:23:96:07:
3c:48:50:4f:ae:9a:f0:5e:9a:51:80:c3:f1:61:e4:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A0:45:AD:E7:7E:35:57:F5:2E:BB:F2:EC:8E:AE:50:BA:F1:B7:55
X509v3 Authority Key Identifier:
keyid:B6:1A:72:BF:A4:CA:AB:CB:A4:EC:04:84:13:7A:51:6F:9F:34:43:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thpyv6TKq8uk7ASEE3pRb580Q0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a24874-98d3-4734-8efa-8c253c459271/1/thpyv6TKq8uk7ASEE3pRb580Q0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:19:d2:f4:81:58:a3:fa:2f:6f:dc:ab:05:f8:c2:7f:dc:ca:
c3:e1:b4:74:d2:14:6b:f5:32:70:73:52:95:51:81:01:2e:03:
e3:2a:8a:2d:c1:04:62:df:b6:e9:db:82:e5:05:29:1a:2c:59:
3e:d4:ac:c0:6d:6a:ce:62:64:d6:eb:b6:7f:ad:57:f9:52:f4:
3e:5a:f4:f4:95:a7:9d:56:e2:59:4c:c0:38:2b:6b:06:89:6d:
2b:1f:68:67:38:4e:d8:26:b6:9a:55:89:c4:7c:85:1d:61:f1:
c3:93:e8:29:e0:d5:2f:0c:a3:6c:c4:59:bb:1a:ef:36:ca:f4:
86:17:48:02:43:4b:27:8d:e6:97:64:80:53:40:23:3c:66:9b:
95:33:9e:92:9e:9e:ea:d2:49:85:5f:45:05:31:32:65:bb:19:
c8:8b:d8:75:39:f5:28:d0:82:fa:8a:ba:fe:1e:f2:fd:ce:ae:
82:50:4d:62:43:9d:25:b7:51:45:7f:68:05:6b:b8:61:94:9d:
15:cf:4b:f4:a6:0a:a8:fc:aa:93:eb:b8:95:f8:c2:be:00:9d:
0f:73:5d:c0:73:80:bc:a5:93:c6:d5:3c:34:de:90:95:28:2d:
fe:de:45:29:84:28:0d:82:e4:fe:37:08:9b:10:fe:21:d2:8d:
20:da:93:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:23 2026 by rpki-client