Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
File: thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft (raw, json)
Hash identifier: Gnf4xTPygbApwPXodfrTWvGpdfUWPFCkTv5NZTN6xwk=
Subject key identifier: 3B:AB:38:E3:FF:AA:66:91:7E:EF:1A:68:F8:FE:E4:50:1A:C8:3B:19
Authority key identifier: B6:19:35:CE:85:DC:AB:F0:5F:ED:7B:AF:A4:65:B5:4B:28:3D:41:9F
Certificate issuer: /CN=b61935ce85dcabf05fed7bafa465b54b283d419f
Certificate serial: 019DDDCE2BD14797A56E099A3868690207EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
Manifest number: 37
Signing time: Thu 30 Apr 2026 09:52:49 +0000
Manifest this update: Thu 30 Apr 2026 09:52:49 +0000
Manifest next update: Fri 01 May 2026 09:52:49 +0000
Files and hashes: 1: 2Fe6ZEjKYOJ1m7GtQXlhXu9ksnE.asa (hash: FbVdA38BILuA+hdLDARFGglETRl4ckoZcfNXBjjUflo=)
2: thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl (hash: h0Oo1fYngtyRYmde4j/p2FsJeByNKsIw3ZfAc/YSvas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:ce:2b:d1:47:97:a5:6e:09:9a:38:68:69:02:07:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61935ce85dcabf05fed7bafa465b54b283d419f
Validity
Not Before: Apr 30 09:52:49 2026 GMT
Not After : May 1 09:52:49 2026 GMT
Subject: CN=3bab38e3ffaa66917eef1a68f8fee4501ac83b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:90:60:1f:36:bb:46:2c:fb:8c:ba:e5:2c:
e4:09:e4:d9:c2:11:14:2e:32:c0:59:25:38:d8:a7:
68:58:22:44:90:17:2a:37:a5:66:1b:f7:41:b6:a2:
c6:02:ec:31:a6:83:95:4b:a0:4f:16:b6:85:a5:2f:
13:d2:de:36:16:81:ef:0e:95:8c:d4:50:30:a3:ce:
2e:6a:c6:6b:db:d5:17:97:b5:c4:ec:1c:f8:04:50:
16:67:11:eb:f7:eb:e9:af:0b:c1:3d:aa:0d:2d:19:
e3:26:cd:53:7e:04:6e:d7:55:2b:b8:bf:db:d5:3d:
93:6b:b2:2f:5f:2c:e4:0c:ce:b6:b7:69:77:5e:46:
39:9c:75:06:1c:b3:08:02:99:b5:58:75:8f:98:a3:
24:bc:27:35:d4:c5:68:91:a6:37:07:e6:11:ad:4f:
4f:b5:2d:32:5b:37:ed:fc:e2:27:18:ac:c2:23:06:
04:4e:ef:e8:03:70:71:9a:e7:7c:66:a1:00:32:4c:
0c:e6:24:b5:5c:88:c7:89:e9:37:43:d9:f5:47:4a:
76:1f:ca:b0:18:72:cf:3d:1d:65:71:3b:32:9a:b4:
78:ef:9d:87:87:de:f6:6e:b3:36:3f:d7:26:08:b6:
f3:43:74:26:da:f0:6e:dd:a3:9f:b9:ab:81:6c:f4:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AB:38:E3:FF:AA:66:91:7E:EF:1A:68:F8:FE:E4:50:1A:C8:3B:19
X509v3 Authority Key Identifier:
keyid:B6:19:35:CE:85:DC:AB:F0:5F:ED:7B:AF:A4:65:B5:4B:28:3D:41:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:53:f4:4c:04:e0:f1:aa:51:a0:49:a0:c3:d5:33:a4:5b:8a:
1a:8c:83:1b:d0:87:17:1e:f5:ef:7f:06:cb:6e:6c:f0:58:4b:
42:60:c7:53:2c:03:4e:34:07:f1:0a:77:b5:51:c2:2c:d2:0e:
f5:68:37:7b:fc:c5:d1:b5:7a:3b:51:ff:d1:01:cb:83:6c:e0:
25:79:86:6b:0c:d4:57:18:9e:59:73:8c:24:6c:e5:de:31:29:
b3:4f:d2:76:a8:82:68:65:75:5b:25:bc:14:af:f8:d0:08:f4:
3f:fd:06:78:af:93:cd:57:5b:9f:06:f7:6e:25:98:39:cd:68:
68:a3:6f:1d:4f:87:56:ae:32:89:e1:95:b9:34:f3:7c:27:87:
83:7b:ce:4e:09:3f:85:e6:c2:15:32:f6:38:90:f0:93:f6:31:
eb:c6:e4:b4:99:6e:54:1e:0e:8e:02:18:cc:3d:63:ea:54:e4:
de:81:f4:64:b3:f0:07:d0:9c:89:be:21:03:3b:04:d0:04:93:
47:61:48:f5:20:43:5a:fa:a1:20:51:39:83:fe:60:9f:e4:af:
29:82:b1:bf:bf:32:91:af:90:33:44:4d:a3:c9:35:ae:24:0d:
fd:e4:92:90:25:b0:c6:5c:e3:80:ab:ba:d2:72:a0:bd:6a:ed:
82:50:42:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:43:11 2026 by rpki-client