Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
File: tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft (raw, json)
Hash identifier: 7Z55sM11Wg7ZYmNhRXrQ91cQWJM/3WFigcC2pwATVj8=
Subject key identifier: 64:09:C1:74:FE:AB:20:1F:62:3C:DB:4F:4E:C0:4D:77:F0:7F:98:DF
Authority key identifier: B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
Certificate issuer: /CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Certificate serial: 019D9774151AA2269431633E0B52D00F4683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
Manifest number: 0F25
Signing time: Thu 16 Apr 2026 18:01:00 +0000
Manifest this update: Thu 16 Apr 2026 18:01:00 +0000
Manifest next update: Fri 17 Apr 2026 18:01:00 +0000
Files and hashes: 1: DgrTVtP0jXJ4OGfuPKYULY4Onk4.roa (hash: 8Lr7Jf5noSRWbE2rMCrFS+5F3tinLkNtJ9p8Cr6DKmI=)
2: tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl (hash: n6Kdat3ynkTz30K3/qEFbQ9BVbdwZyusIH+HmCB/Il8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:15:1a:a2:26:94:31:63:3e:0b:52:d0:0f:46:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Validity
Not Before: Apr 16 18:01:00 2026 GMT
Not After : Apr 17 18:01:00 2026 GMT
Subject: CN=6409c174feab201f623cdb4f4ec04d77f07f98df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:0e:5e:26:bb:f7:99:f4:a1:51:50:d4:f4:
bd:03:4e:a3:ae:4e:66:f4:4c:8c:e3:72:31:23:8d:
f1:58:21:4f:39:66:eb:b2:41:e1:c0:b7:d8:63:27:
3e:67:62:f3:d4:d1:11:fb:13:75:25:d6:9e:0e:ff:
b5:dc:3d:dc:74:6e:c7:8d:da:90:2f:4b:67:26:8d:
22:6e:5f:f0:62:9c:29:72:4b:a6:06:a6:f2:7f:a5:
6a:3b:bc:c0:71:71:a0:4b:ff:0a:d5:15:d7:f2:ed:
51:f0:c7:36:68:fb:1a:c0:19:4b:89:98:6f:f5:b7:
1c:c4:a4:61:3a:35:a6:f5:ff:de:9d:9e:24:19:0a:
b3:4d:a0:bc:78:20:09:d0:f7:cf:2f:0d:d9:ff:a4:
80:a9:c9:c1:28:00:36:84:17:e6:66:a0:42:82:56:
e5:e5:43:5e:3b:b9:93:c1:f0:49:82:03:a6:69:85:
95:88:e6:c9:00:4d:b6:a6:48:84:fc:27:36:48:31:
23:1f:9c:c6:16:82:ca:d6:11:7f:56:53:ae:a6:3e:
32:8b:27:e2:4d:dd:93:4f:52:6f:fc:e7:e7:eb:15:
c1:09:38:f5:6e:13:2a:93:35:40:db:37:3b:0c:a6:
23:4f:1d:27:8d:1a:ff:aa:1d:dc:c2:b4:ec:8b:78:
88:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:09:C1:74:FE:AB:20:1F:62:3C:DB:4F:4E:C0:4D:77:F0:7F:98:DF
X509v3 Authority Key Identifier:
keyid:B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3b:8e:bd:8d:50:0f:b4:d6:3b:dd:b9:54:4a:7e:69:fe:b8:
63:0c:72:3f:6f:2f:63:ca:d6:ab:2a:e2:55:67:58:ef:d8:a9:
05:75:30:a2:2f:37:83:3a:9c:47:58:39:7a:ba:70:22:cc:0a:
34:3c:39:44:d4:02:a8:63:94:13:13:c4:16:3f:b9:f4:e2:37:
c9:26:17:20:7f:0f:41:2d:41:bc:00:7f:f9:62:bd:89:66:0f:
77:4d:06:64:aa:5e:f0:a3:54:30:db:15:e2:1b:a4:55:89:81:
f6:cf:c8:0d:3f:e7:17:b6:3f:67:ad:96:ba:ee:aa:d7:f7:55:
17:6c:05:2c:d4:2a:20:06:54:5c:17:16:35:c1:7b:0d:0b:20:
73:8e:78:18:12:11:ec:d4:86:ce:14:c2:80:09:9a:5c:76:a4:
6d:3e:87:74:8f:e1:79:f4:1e:2c:90:3f:5b:91:35:e0:cf:df:
0e:25:71:ec:78:c8:5d:85:fa:7e:ba:b9:74:28:5c:c2:55:20:
14:37:f7:c6:f4:fc:ea:44:21:0e:17:44:b6:81:f6:76:13:d7:
46:52:ea:ea:47:09:7f:62:94:fe:21:0f:91:62:06:81:5c:33:
85:7d:76:65:1f:34:de:81:c1:a6:8e:00:09:69:33:b0:de:5b:
a9:2e:e3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:47 2026 by rpki-client