Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: BnVAQXGVaIcca4PMP1XQMCAHzgb5oSOxpYIM5qMM/40=
Subject key identifier: D9:A2:92:38:B4:91:EF:37:9E:61:FC:A5:0C:BD:9C:45:C1:13:72:44
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 019CAC103525E02A67E0ED1548E92D7069DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 01:01:09 +0000
Manifest this update: Mon 02 Mar 2026 01:01:09 +0000
Manifest next update: Tue 03 Mar 2026 01:01:09 +0000
Files and hashes: 1: NM6bC8g_JOCJcB_SqI4c_RpTy0s.roa (hash: PVdIpdqsXSW7un2HJAR4RrNhmciVj3imB2fnXeIUv8I=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: np39Yx8iCfz6xN1vrQGb2DLbImHybzFvP0H6cM7qyGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:35:25:e0:2a:67:e0:ed:15:48:e9:2d:70:69:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Mar 2 01:01:09 2026 GMT
Not After : Mar 3 01:01:09 2026 GMT
Subject: CN=d9a29238b491ef379e61fca50cbd9c45c1137244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:ea:fb:0e:d7:49:34:b4:2f:92:a2:6b:cf:
03:79:e0:48:4c:a3:25:88:ee:03:30:d6:be:46:99:
40:07:39:57:83:9c:3e:3b:ef:26:c3:83:3c:dd:fa:
15:8a:54:01:fd:7a:7e:03:6b:75:85:b9:53:ff:2a:
4e:ed:f0:48:b5:41:49:10:4a:47:fe:8a:a7:f5:2e:
47:71:32:d0:98:45:29:2f:f3:fa:f6:f2:54:4a:ac:
0f:b9:16:1b:13:3d:fb:07:63:d6:3a:3c:61:66:ce:
20:75:f2:f5:74:c7:bb:52:fc:3e:13:4d:cd:c4:6c:
ab:b6:24:fd:b4:8a:8a:ef:f7:94:a9:a9:a9:bb:60:
47:4d:be:63:e0:b5:49:ad:63:a1:60:b8:68:b4:bc:
28:f7:57:18:94:a0:cf:13:84:09:f0:6f:52:ee:86:
6c:00:65:ad:f0:d7:e0:13:86:45:b2:32:5e:e6:88:
08:42:e9:27:9f:7b:27:32:f6:c8:41:7d:b1:2f:82:
4d:cd:4d:4f:b2:7b:52:fb:ac:a3:d0:71:6b:d3:4a:
92:50:55:3f:af:be:ac:8a:a0:06:28:cb:88:22:37:
3e:4e:d5:bd:5f:56:07:c5:a6:29:c2:10:ec:d3:3e:
b0:1e:20:a9:47:f0:e1:ad:b4:a7:6f:6c:32:26:c9:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A2:92:38:B4:91:EF:37:9E:61:FC:A5:0C:BD:9C:45:C1:13:72:44
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:17:dd:d2:63:34:f7:ba:c4:60:ad:11:a9:24:75:5d:ea:a6:
ce:93:c0:37:a9:f5:16:38:d4:4c:13:5b:a6:b3:4a:e9:b5:ab:
16:8f:1f:87:73:aa:0c:0a:6e:ab:de:28:7d:d3:6c:3b:33:67:
43:1b:c7:85:48:d5:3e:0d:8f:7c:56:df:ee:7b:0c:b1:b5:69:
01:1e:c6:30:3e:eb:53:9f:1d:dc:78:47:db:94:ea:f1:c8:ba:
ee:1b:2b:15:67:75:57:53:73:88:96:b5:1a:b6:c0:ce:87:e2:
79:dd:fc:df:76:d0:d8:78:bd:54:13:f7:db:0b:0e:ed:de:aa:
13:7f:ef:07:0d:c0:f9:8e:fb:84:ed:ae:d1:7e:43:a7:a6:3e:
db:d2:28:89:f2:20:d6:25:28:6a:08:9d:cc:9f:04:88:21:19:
49:51:ae:ab:cf:4b:e7:9f:fc:6b:fa:29:74:6d:56:1c:fe:fe:
31:c6:bf:c1:c6:ba:c2:24:fd:7b:ea:a8:cf:22:86:8d:6c:ec:
fb:3e:69:46:61:aa:ea:3a:e6:f6:e2:ab:5a:2e:ec:8a:8e:cc:
12:00:00:95:3d:70:20:f5:6e:48:5c:32:8e:d4:de:69:1a:5b:
e5:b6:95:ab:ca:8d:ba:94:9e:45:66:ac:a6:16:e5:9a:f1:b1:
43:b5:1f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:45:14 2026 by rpki-client