Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
File: ThPQwKcD4JzaZMErCN2it0mgQpw.mft (raw, json)
Hash identifier: PFNvRIIPw7uKLnZVKZbY07ivSVYqEJphDOsKLf/6QcQ=
Subject key identifier: 35:67:4E:C6:6D:B8:36:AD:EB:3B:C8:B0:72:B3:20:F3:B6:C9:88:75
Authority key identifier: 4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
Certificate issuer: /CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Certificate serial: 019CAA640B40E7B3A3D3EC36682E0DED80C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
Manifest number: 312E
Signing time: Sun 01 Mar 2026 17:13:27 +0000
Manifest this update: Sun 01 Mar 2026 17:13:27 +0000
Manifest next update: Mon 02 Mar 2026 17:13:27 +0000
Files and hashes: 1: R1P8e6O4LZ4CH8IZV3ShaXCpW-Y.roa (hash: m6kKh5H6S/5fmrMROPKaEmT/nU0ot/OQReI9dUcBaws=)
2: ThPQwKcD4JzaZMErCN2it0mgQpw.crl (hash: 2SDSzPRdj3fX1TNXVdk+srbKCFQ0CUUoR6sJifAsTiY=)
3: cICVe4KZ675m8Dg1RqECpOJ8Dp0.asa (hash: ezQu+wOZ+7v7t2FdNh7IJPPoUwXLmpeXhU+n9wR9WKU=)
4: w15_5Pw6YNCa9BuZawakXYCf3M8.roa (hash: KKbNWbjHOrntBAMd1tqvEzHYIX6t8YcsC3l308ukvLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:64:0b:40:e7:b3:a3:d3:ec:36:68:2e:0d:ed:80:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e13d0c0a703e09cda64c12b08dda2b749a0429c
Validity
Not Before: Mar 1 17:13:27 2026 GMT
Not After : Mar 2 17:13:27 2026 GMT
Subject: CN=35674ec66db836adeb3bc8b072b320f3b6c98875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:7d:dd:05:e1:06:77:61:88:f0:41:9e:d5:
f1:c3:73:d5:95:43:3e:4c:5e:69:6e:f2:ed:10:01:
1e:cc:03:e5:f9:9f:37:ae:47:dd:13:dc:15:25:aa:
b3:be:04:5e:85:1f:74:cd:5b:5d:bc:c9:75:76:91:
32:97:fb:ca:84:5d:97:53:0d:99:51:42:2c:aa:46:
4b:e8:d9:94:f8:2f:be:1f:e5:ad:b5:40:75:51:f9:
1f:72:70:40:ac:d9:3d:06:5a:8b:2d:ff:92:bc:2e:
d0:b5:60:d7:4c:00:d3:66:35:fc:6a:d5:a3:73:66:
cc:97:77:89:f4:ac:11:d4:05:b3:dc:ee:03:96:a6:
02:5a:bb:bd:8a:e0:a4:d1:34:34:4a:8d:cc:ba:8c:
30:6b:9a:61:70:e4:d8:ea:07:6d:c5:05:47:5e:ac:
4d:a1:99:9c:39:36:3f:29:f8:46:d4:3a:c7:d1:36:
56:d8:22:db:d5:42:8d:bb:14:cd:a2:4a:25:39:ed:
1c:c4:de:e8:30:58:ae:7e:c1:80:27:f4:ec:03:39:
1f:64:52:dc:fb:20:84:cd:47:f3:3e:56:79:74:da:
c5:84:ce:99:f8:78:7c:f1:34:ee:0d:01:6b:f9:c0:
45:52:3c:4e:a4:ae:bc:38:fc:54:54:3c:87:d8:22:
bb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:67:4E:C6:6D:B8:36:AD:EB:3B:C8:B0:72:B3:20:F3:B6:C9:88:75
X509v3 Authority Key Identifier:
keyid:4E:13:D0:C0:A7:03:E0:9C:DA:64:C1:2B:08:DD:A2:B7:49:A0:42:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThPQwKcD4JzaZMErCN2it0mgQpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/ae049a-078b-42ed-a28f-6aa443528ce5/1/ThPQwKcD4JzaZMErCN2it0mgQpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c7:7b:31:1a:a7:3c:81:ff:04:77:61:91:6d:44:2d:7d:5d:
65:5c:aa:6e:e8:16:94:3a:c7:4f:c1:fb:01:69:38:e4:10:2f:
44:60:86:c6:bd:13:b9:46:b2:94:48:65:27:2d:c1:86:a5:50:
bf:22:29:1a:39:58:05:31:f6:bb:49:fe:fc:70:db:f6:22:21:
72:1e:b0:8d:d4:1a:0f:dc:99:39:55:1d:b4:7b:0d:e2:db:a0:
27:5e:6a:a2:a1:4d:ec:44:42:b2:86:81:e1:80:1c:5c:e0:e6:
b1:16:66:ee:9e:dd:3a:6b:cb:0d:8a:74:37:21:8e:01:ba:41:
64:af:9d:d0:c2:57:58:2f:f0:b1:37:1a:4f:ff:e7:09:d1:31:
34:2d:e5:d7:98:0d:1a:68:60:d8:8d:ee:0b:9d:2b:29:6d:6c:
0c:72:36:7b:0b:5c:0b:11:35:10:c7:43:eb:9f:5c:e4:ae:99:
75:a5:4a:d7:e1:71:91:a3:62:60:f2:77:9b:59:89:93:05:dd:
67:96:37:40:3d:f3:b7:e0:38:45:80:65:1e:c4:64:d1:97:6d:
74:08:24:f3:d9:d5:01:87:ad:9c:cc:dd:4f:35:c5:43:bd:2b:
ad:e4:84:25:f5:3e:69:10:ee:d9:ed:28:30:26:6a:89:1d:eb:
86:6d:f8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:17:46 2026 by rpki-client