Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
File: thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft (raw, json)
Hash identifier: oi8YDVpZ2Nzq7x0E/O9Ctq5f2KX6zfWFi4oXqQNBUfc=
Subject key identifier: 6E:DC:43:EF:99:CA:C3:83:94:D5:11:ED:53:1B:0A:F0:04:6B:3A:6B
Authority key identifier: B6:19:35:CE:85:DC:AB:F0:5F:ED:7B:AF:A4:65:B5:4B:28:3D:41:9F
Certificate issuer: /CN=b61935ce85dcabf05fed7bafa465b54b283d419f
Certificate serial: 019FA906F0C6DD88EEB50377B37E700D0C6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
Manifest number: 0127
Signing time: Tue 28 Jul 2026 14:00:31 +0000
Manifest this update: Tue 28 Jul 2026 14:00:31 +0000
Manifest next update: Wed 29 Jul 2026 14:00:31 +0000
Files and hashes: 1: MGjsww8dheuqhfZB-Sl8UJO86Mw.asa (hash: AZGCGxLEPOvdWoCLwq3terzeoueGaHqdJ950j2ixYt0=)
2: thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl (hash: OtOS4+fRibbgoQaAwBc9t/h8p9+7luU53QTDjLkaJXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:06:f0:c6:dd:88:ee:b5:03:77:b3:7e:70:0d:0c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61935ce85dcabf05fed7bafa465b54b283d419f
Validity
Not Before: Jul 28 14:00:31 2026 GMT
Not After : Jul 29 14:00:31 2026 GMT
Subject: CN=6edc43ef99cac38394d511ed531b0af0046b3a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:aa:a6:3f:33:4c:93:36:bb:f2:53:72:d5:
88:c3:85:63:57:b3:bb:97:1f:a1:1e:bb:99:f5:1a:
40:bc:59:49:e3:81:66:ab:21:4a:c6:17:97:79:1c:
74:86:b0:39:81:65:e5:6e:5f:e3:2d:58:3c:ff:b0:
b5:bb:b6:0a:96:45:31:4b:1c:b6:3b:c1:6f:2a:ae:
a7:9f:a2:a3:38:5c:95:c8:78:71:ee:23:aa:48:cf:
0b:e3:71:5e:3b:02:c4:6a:c0:61:bb:9f:9e:03:b4:
78:b8:8f:60:51:56:ca:6c:3e:15:f4:fd:ca:99:6f:
7e:75:8e:cc:84:74:ca:33:2b:3d:c8:65:24:b6:5b:
81:fe:1d:67:56:63:d8:89:94:23:e0:84:f2:69:af:
d8:bd:ba:33:64:c5:21:f3:27:f7:22:1f:a6:0a:e0:
87:4b:b3:be:a8:71:8a:72:61:03:2b:14:ec:24:1a:
c8:1c:9f:5d:31:bc:ad:4d:be:af:2c:d3:e8:18:10:
60:12:59:2c:11:d0:6c:c0:53:db:61:44:d7:a5:ce:
9a:c9:04:f1:2a:63:28:db:19:8c:14:c0:45:19:64:
84:aa:b1:64:f2:26:6f:6e:6e:f3:71:8b:84:20:78:
a3:1c:b0:cf:3f:b0:54:35:9e:ef:a3:7a:18:82:49:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:DC:43:EF:99:CA:C3:83:94:D5:11:ED:53:1B:0A:F0:04:6B:3A:6B
X509v3 Authority Key Identifier:
keyid:B6:19:35:CE:85:DC:AB:F0:5F:ED:7B:AF:A4:65:B5:4B:28:3D:41:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c0:29:6b:fc:d4:70:75:3f:38:2c:c2:7f:4b:e0:c7:de:5b:
1a:ba:a6:bc:55:10:e3:8a:98:8d:36:76:15:77:19:38:2a:55:
eb:16:73:41:2c:86:67:d7:12:46:95:2c:12:ab:10:ef:85:ea:
f2:a4:09:51:07:7a:5e:24:41:58:a0:f3:e3:91:ed:fa:c4:2a:
9d:7a:a8:dc:36:09:c1:b2:28:ac:af:7b:18:75:85:a4:34:20:
9d:80:2f:8d:f9:c9:a3:2f:fb:51:35:f1:af:82:59:ec:ed:5c:
23:a8:6f:4f:0e:24:2b:99:1a:07:a2:5f:62:f1:af:f5:2a:28:
83:37:73:1c:d5:5a:62:66:dc:a4:ce:e1:89:ec:fd:64:b1:6c:
dc:82:97:3d:2e:90:b2:34:d2:21:7b:56:20:11:80:9d:28:48:
3c:a1:f5:06:8b:36:c8:6f:99:a6:6d:35:dd:88:68:a5:91:51:
e4:7d:0a:ed:91:68:49:77:44:b9:2b:a2:45:d2:b2:d3:a1:e2:
0b:c9:31:2e:b1:4e:f6:98:84:be:93:f1:73:5b:81:50:c9:74:
12:06:7a:b3:3f:0d:cc:c7:ae:06:0b:2a:2c:9f:5c:93:1d:34:
ec:8a:6d:b5:52:89:05:7a:5c:e8:11:7a:5b:a8:67:5d:2b:bc:
7b:c5:27:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:20:10 2026 by rpki-client