Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: vSYWZcKdnKkT1DgFrv1yEhWpQVKQKBFi7v/c7McyZ2U=
Subject key identifier: 76:28:26:30:27:24:5C:AF:20:58:2F:9F:98:9F:B2:A9:53:FE:0F:F0
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 019FACAD087473804E7D7A8845A1BF038001
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 07:00:48 +0000
Manifest this update: Wed 29 Jul 2026 07:00:48 +0000
Manifest next update: Thu 30 Jul 2026 07:00:48 +0000
Files and hashes: 1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: YjJio+zBxlpy5uZy6CXgXmB9k6uDHv9ZpHM+4/hcWEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:08:74:73:80:4e:7d:7a:88:45:a1:bf:03:80:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Jul 29 07:00:48 2026 GMT
Not After : Jul 30 07:00:48 2026 GMT
Subject: CN=7628263027245caf20582f9f989fb2a953fe0ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:52:8e:7d:94:6b:51:c7:fa:c3:d4:4d:12:ec:
05:ea:42:e1:21:ac:4d:00:97:5e:eb:54:ee:b7:b6:
b0:7d:92:7f:14:34:0d:73:a2:bb:11:72:85:5a:44:
81:ca:0d:d1:c7:8c:9b:60:16:7d:d3:65:fd:4b:6f:
c5:49:e7:07:ed:b3:d0:42:b3:a2:77:f3:19:e4:b3:
5f:79:17:7f:dd:f6:cb:f6:88:1f:ac:6a:41:73:26:
1a:71:23:93:90:63:91:01:ee:d4:48:75:b6:79:61:
39:19:c1:f6:1d:c0:1c:17:9b:03:81:45:4c:7f:7d:
fd:c6:5d:85:5d:1c:dc:c8:52:f6:56:b5:7a:16:d1:
6a:d2:ea:c3:bd:5b:8a:70:94:72:0a:8d:12:5b:3e:
95:33:f5:67:26:00:f0:60:c1:94:42:2c:a5:e6:dc:
68:e3:13:05:a4:7e:1b:d5:7c:26:40:5f:03:97:64:
6c:a0:69:1e:15:15:68:3e:8f:5c:89:3d:f0:28:79:
e9:67:b9:64:13:ee:0c:53:65:cc:f9:d2:02:89:d3:
fc:52:64:e5:b8:13:5a:e5:34:a2:da:96:4f:d9:03:
7d:7c:31:43:60:83:55:28:48:26:38:9e:a9:23:7f:
c9:5b:85:dc:87:1d:52:6b:5d:e7:7a:0f:69:9e:7a:
9b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:28:26:30:27:24:5C:AF:20:58:2F:9F:98:9F:B2:A9:53:FE:0F:F0
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:de:75:28:78:75:2f:2e:0e:21:1a:b3:77:a8:48:2b:32:69:
ce:09:9d:33:d3:eb:3d:b6:a2:69:50:7d:6a:50:0f:df:fa:c5:
cb:5f:db:7e:25:e1:f1:ba:95:6d:03:44:50:47:57:b5:79:a8:
4a:68:6a:04:1d:f0:92:fb:4c:e8:73:a7:a4:21:b2:2c:7c:01:
1b:41:68:5a:94:84:ce:d4:44:9d:16:f2:78:85:a9:df:3d:62:
8b:d7:6a:54:5a:b0:13:5a:10:48:5e:e5:1c:7b:df:c8:99:9b:
13:a7:fc:78:6a:06:80:c7:95:2e:bf:be:6b:70:5f:92:55:02:
a1:9d:53:c9:62:f6:a9:ee:97:e9:09:d7:a4:c1:7d:c5:fd:9b:
ab:8a:00:8a:4e:85:d4:44:88:73:e1:84:af:71:ac:03:b9:11:
da:71:d2:6d:74:16:a0:ae:a9:12:0b:23:54:79:5d:9e:b3:7e:
71:e2:88:62:7d:cf:c2:53:a1:7a:43:37:5b:5a:40:0f:cb:82:
c4:8f:a4:57:ad:5a:18:12:e8:a9:1c:92:d8:5f:b8:bc:cd:62:
7d:14:59:80:ab:cb:c5:f3:81:e9:1d:94:21:b5:54:78:c7:75:
e0:f9:6b:37:d2:94:0d:5d:71:d0:6d:83:25:b2:89:27:1d:b6:
f3:26:35:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:00:57 2026 by rpki-client