Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: 3cTaZw0TVvewwxvry48A7BYT3IvmJc6vWDU+dK4Bgi8=
Subject key identifier: C4:6A:4A:7F:30:1F:0E:E1:60:F3:C4:22:D0:1E:BC:07:7D:82:DA:FC
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 019D9D76688D8AEF90D3FC3699E2753D2EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 22:01:15 +0000
Manifest this update: Fri 17 Apr 2026 22:01:15 +0000
Manifest next update: Sat 18 Apr 2026 22:01:15 +0000
Files and hashes: 1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: ZBFgOteGDqe1gv2ahJC+JYrMZiFUUdAscP3SOT/eaRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:76:68:8d:8a:ef:90:d3:fc:36:99:e2:75:3d:2e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Apr 17 22:01:15 2026 GMT
Not After : Apr 18 22:01:15 2026 GMT
Subject: CN=c46a4a7f301f0ee160f3c422d01ebc077d82dafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d1:1f:f0:ec:b3:d4:5b:e6:d6:f7:76:dd:57:
2b:ed:3d:1c:b9:95:34:e6:e9:11:fe:5f:7d:91:16:
4a:de:c7:84:a6:7d:58:20:ad:fb:6d:0d:3f:bc:44:
7f:a5:12:61:8c:4f:41:8b:af:8b:af:07:fc:9d:7f:
9a:30:f0:23:3e:ce:3f:62:b0:89:8c:62:14:de:94:
ab:7c:46:5f:ad:2d:b4:53:32:38:af:eb:74:cc:95:
cf:64:6d:19:de:cd:42:74:e8:be:ff:e8:4d:ae:78:
b8:a2:e1:4b:d0:1d:13:9e:97:90:03:f5:8d:d4:49:
e5:1e:7c:1f:8f:05:58:ab:cd:ea:2c:9e:f6:aa:cb:
2d:aa:50:45:1b:00:43:3d:96:ea:83:e0:4e:3d:66:
14:8b:3d:49:fc:96:64:6e:8e:44:48:47:0f:49:1e:
90:5e:85:43:0a:e1:76:6c:b7:18:78:b3:ab:75:f8:
df:49:81:93:c3:e3:3c:f6:da:cd:86:7c:aa:bd:23:
58:e7:2e:d7:b0:45:50:81:de:b0:d7:99:a2:c1:65:
18:b9:03:96:2b:9b:7f:4a:6d:73:7b:0d:dd:11:fb:
6d:77:17:50:26:57:c4:7e:3d:49:38:03:1b:f6:29:
c9:12:c6:ba:4e:d1:3a:13:59:0a:37:5e:fd:ae:f0:
f0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6A:4A:7F:30:1F:0E:E1:60:F3:C4:22:D0:1E:BC:07:7D:82:DA:FC
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:44:65:9b:02:a0:b4:32:ac:38:82:96:93:34:01:17:b6:0d:
e6:ae:66:ba:0b:71:ed:9c:34:a2:c5:c2:c1:45:3c:4a:7f:af:
8d:7a:e2:8a:15:89:0f:52:21:8b:8c:77:d0:4f:74:66:1a:1f:
1e:03:dd:8f:19:a9:da:67:61:8b:32:9e:fb:8e:67:a9:61:ae:
03:1a:f7:53:8b:0e:cd:fb:2a:d5:ee:d1:29:89:26:42:69:f4:
8e:3f:4b:3f:55:b1:b5:a2:d0:04:4b:ed:06:10:a2:d8:16:03:
39:9c:37:1d:82:14:be:0d:d8:c6:73:6e:9e:42:d8:3a:fe:42:
fa:eb:02:ac:5e:e7:0e:20:02:97:8d:6c:50:14:0e:50:4f:47:
53:e6:b7:36:be:44:78:c4:0c:99:89:0c:40:ad:7b:0d:73:41:
a1:1b:a6:83:b3:33:3a:1e:c1:cb:e5:ed:b8:be:47:0b:d9:3c:
fc:6c:a1:07:76:d1:5a:5e:b9:51:69:1b:5f:93:db:46:5b:c6:
49:d8:8c:ff:90:a0:1a:1c:68:7c:6d:b3:9f:d0:b1:e6:77:d5:
5f:da:b2:2d:4b:d2:e0:84:f6:24:22:8e:5c:67:83:42:b5:45:
01:00:3f:f9:08:df:2a:8e:36:82:15:2b:51:ba:44:cd:f3:74:
0b:e5:56:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:07:34 2026 by rpki-client