Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: VNkbZAjXesTfZY4X2mKBg2Lgb/AjAFydQeba20hdexA=
Subject key identifier: BE:72:D8:59:9E:16:9B:27:6C:7B:44:72:72:47:F3:3A:55:BE:CD:56
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 01A130D85F628FE8B6869150C69B0858DF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 1A9C
Signing time: Mon 12 Oct 2026 16:00:48 +0000
Manifest this update: Mon 12 Oct 2026 16:00:48 +0000
Manifest next update: Tue 13 Oct 2026 16:00:48 +0000
Files and hashes: 1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: ZF3okLn8DX1jYJ0IOW05HlrhiW1R2q1stUHjsNm9hDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:d8:5f:62:8f:e8:b6:86:91:50:c6:9b:08:58:df:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Oct 12 16:00:48 2026 GMT
Not After : Oct 13 16:00:48 2026 GMT
Subject: CN=be72d8599e169b276c7b44727247f33a55becd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:61:f7:17:b6:36:ab:19:19:57:2b:1e:80:
de:7e:b6:98:78:f5:b8:eb:02:28:17:d5:45:dc:b3:
54:e0:da:1b:a4:81:78:c2:54:09:9d:5e:b5:db:05:
a5:72:5b:c7:2e:a9:2d:a6:e7:9e:77:2b:bf:af:fb:
89:1e:c9:95:15:48:55:3e:ec:67:6a:be:ef:01:ca:
b5:36:76:79:66:65:ee:cb:9b:3b:bb:68:1e:bb:61:
80:6f:7e:d6:29:b5:0b:6b:5f:45:ad:c5:76:14:39:
9c:d5:3d:ca:f0:b5:1b:b3:a1:39:9e:82:53:93:13:
24:ba:02:7c:de:58:fa:75:79:f6:29:0b:7f:45:ac:
e9:59:1b:ca:21:cc:6a:bf:78:ba:25:4b:76:e1:86:
6c:e7:aa:e8:52:c3:99:16:e3:fc:6d:93:77:a0:f5:
27:d4:4e:9c:48:bf:c6:34:a4:89:3f:30:fc:00:fa:
f6:18:f1:df:72:31:20:f4:36:e9:e4:14:69:99:4e:
ed:36:44:fc:90:fe:b0:d5:3d:5b:fe:c3:90:de:ce:
67:42:61:f9:19:37:7f:eb:85:04:d4:69:d5:a3:84:
1e:9c:98:24:87:96:90:7b:38:5b:87:f7:8a:c3:7c:
6d:0e:28:68:f8:ef:06:55:55:81:45:3f:e0:12:20:
1d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:72:D8:59:9E:16:9B:27:6C:7B:44:72:72:47:F3:3A:55:BE:CD:56
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4f:7a:b6:18:8d:30:3b:da:1a:3e:da:af:f9:88:dc:18:2e:
a5:ea:16:98:0d:aa:2b:d1:ae:58:a0:87:0e:e9:93:a4:65:3b:
15:27:7c:32:c3:81:04:cd:fa:65:39:b2:9f:3b:84:3f:f0:2e:
3e:a7:8d:ce:43:0d:33:2b:dd:cc:39:65:d0:4c:59:00:87:70:
2d:89:59:6e:17:15:8a:47:40:e5:62:5d:7b:92:c2:ce:f3:1c:
f6:e6:72:92:b7:ce:80:3a:d8:22:02:34:e8:2c:31:92:7f:61:
bf:64:67:32:5c:b9:3c:a6:75:85:a2:c7:60:07:00:26:84:53:
90:43:f7:cd:d2:14:10:62:0a:1c:a6:fa:57:15:00:b4:d5:05:
15:08:ce:0c:54:77:2d:1f:75:51:7d:75:2c:4f:01:fe:f0:8a:
35:a4:39:76:5f:b8:fb:8f:ad:bb:e8:1a:7e:cd:b8:7c:68:cc:
77:9d:bf:78:d7:e4:ff:1f:46:2d:e2:65:f6:07:cd:82:e9:e8:
1d:0a:18:69:51:de:08:a1:e9:4d:2b:b9:91:aa:78:0b:93:b8:
e1:5b:33:28:c9:20:37:48:ae:ab:6e:34:2a:1e:a5:77:87:b8:
99:eb:ea:94:d6:06:76:e8:2e:52:97:c8:30:ab:10:ae:42:78:
39:24:58:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:12:19 2026 by rpki-client