Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
File: tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft (raw, json)
Hash identifier: 0mhWaaNqXCCW45Mk4My0dCQy6eazMn/HgqbWJ0YIYOU=
Subject key identifier: 0C:1A:69:7C:10:40:91:5F:3C:8A:3A:D3:8D:B0:B1:FE:6C:CA:4B:C4
Authority key identifier: B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
Certificate issuer: /CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Certificate serial: 019CABD92E4492D1E18FFFC2B1B8B38B5728
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
Manifest number: 0EAB
Signing time: Mon 02 Mar 2026 00:01:02 +0000
Manifest this update: Mon 02 Mar 2026 00:01:02 +0000
Manifest next update: Tue 03 Mar 2026 00:01:02 +0000
Files and hashes: 1: DgrTVtP0jXJ4OGfuPKYULY4Onk4.roa (hash: 8Lr7Jf5noSRWbE2rMCrFS+5F3tinLkNtJ9p8Cr6DKmI=)
2: tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl (hash: 5oYWZE0RuAaZ5kcXfiN61GusYhPt2/QbgOe8kvP4f34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2e:44:92:d1:e1:8f:ff:c2:b1:b8:b3:8b:57:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b473167913af73e4f6374170c4f945f8b0dd7d64
Validity
Not Before: Mar 2 00:01:02 2026 GMT
Not After : Mar 3 00:01:02 2026 GMT
Subject: CN=0c1a697c1040915f3c8a3ad38db0b1fe6cca4bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:da:09:de:55:23:79:5b:0c:91:9e:46:f7:9c:
d8:83:2f:4a:89:fa:ef:1a:e0:8e:65:d3:68:0a:65:
a4:a0:ce:d6:99:1d:43:fa:09:83:e6:ca:af:b5:43:
da:2c:12:4b:5c:cc:3a:3f:63:5d:69:f7:1b:b5:2d:
cd:be:b9:3d:b4:70:60:69:ab:ef:ee:b9:70:d4:05:
03:2d:e1:02:56:17:17:70:b6:67:04:a1:42:ec:92:
07:aa:e4:f6:a5:32:50:b9:f7:54:4c:9f:95:2d:08:
f9:cb:30:49:58:ae:08:df:9a:0e:ff:73:52:b0:d1:
23:11:30:62:79:52:31:c4:1b:3c:aa:52:7f:75:7e:
d5:4e:bb:39:2c:f9:30:81:9a:65:cf:32:c0:01:87:
8a:b3:f5:84:dd:73:19:87:33:42:61:e1:d4:ed:f5:
49:09:e7:5c:69:d0:49:86:26:44:37:aa:44:21:3a:
5a:db:d3:15:f0:7a:c9:45:91:78:18:78:90:1f:57:
40:55:d8:82:43:8c:6b:79:01:d9:5f:08:51:f5:48:
32:0f:d8:41:30:8d:d2:e4:0a:2e:1f:19:5d:cc:b8:
63:30:3e:7f:ab:cf:1e:08:ba:ef:b4:dd:d6:5b:6c:
bf:89:d4:bb:71:a5:23:6f:b0:d7:1c:c4:97:bf:ae:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:1A:69:7C:10:40:91:5F:3C:8A:3A:D3:8D:B0:B1:FE:6C:CA:4B:C4
X509v3 Authority Key Identifier:
keyid:B4:73:16:79:13:AF:73:E4:F6:37:41:70:C4:F9:45:F8:B0:DD:7D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHMWeROvc-T2N0FwxPlF-LDdfWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/e56d41-5bb8-4a91-a4f0-f86dcaad8c49/1/tHMWeROvc-T2N0FwxPlF-LDdfWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:41:99:d9:da:db:03:74:26:5c:86:b1:7a:53:96:26:2f:96:
94:97:c7:56:e5:a4:a3:a2:80:da:ff:f4:87:99:04:ad:6f:e9:
3e:c7:88:e1:93:ba:5b:07:ae:cf:cd:af:05:6e:69:c4:29:34:
bb:91:79:be:e1:77:b1:41:13:c2:fd:a5:80:a3:e7:17:47:dc:
8c:0b:0d:5a:aa:58:84:de:fd:9a:f6:d8:83:5e:b1:a1:9c:b4:
eb:51:2e:31:0a:69:1c:3a:47:2b:ee:36:13:74:49:e6:7a:21:
9e:a8:6b:c2:fb:e5:d8:83:6a:10:e4:bf:d2:78:10:b5:32:99:
e9:34:1c:38:72:f6:96:22:fa:7c:2b:b2:e6:18:5e:c2:86:91:
58:98:25:84:08:bd:e2:3e:15:26:1d:f0:28:ee:28:a5:ff:0b:
1d:53:42:c2:ba:c8:9e:4a:55:21:5f:4d:f2:30:70:04:ca:32:
32:ba:5c:57:24:b0:15:bf:7d:7e:e2:f4:34:d4:0c:dc:9a:a0:
32:5a:75:dd:f3:5b:83:a5:b8:a6:fa:28:a4:79:1b:4b:d1:da:
16:62:4b:2f:a3:b1:32:33:76:fc:31:f1:e8:0f:ce:e5:02:e3:
8d:32:8f:e5:1e:e3:13:67:ba:39:f0:3d:46:70:12:e5:21:22:
5e:70:21:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:03 2026 by rpki-client