Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
File: thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft (raw, json)
Hash identifier: Hm+CrKvMKcoXAwYJubFvjzznLCbBy12il09/qukbRe0=
Subject key identifier: BA:37:92:2F:A2:27:2B:65:35:D4:3F:39:4A:E6:06:9B:E8:3C:7C:C0
Authority key identifier: B6:19:35:CE:85:DC:AB:F0:5F:ED:7B:AF:A4:65:B5:4B:28:3D:41:9F
Certificate issuer: /CN=b61935ce85dcabf05fed7bafa465b54b283d419f
Certificate serial: 01A0E3D0CEC7B2CC0848977B40A7CB4D6B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
Manifest number: 01CA
Signing time: Sun 27 Sep 2026 17:01:47 +0000
Manifest this update: Sun 27 Sep 2026 17:01:47 +0000
Manifest next update: Mon 28 Sep 2026 17:01:47 +0000
Files and hashes: 1: MGjsww8dheuqhfZB-Sl8UJO86Mw.asa (hash: AZGCGxLEPOvdWoCLwq3terzeoueGaHqdJ950j2ixYt0=)
2: thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl (hash: S03KYHporyuxU+N7/Vf0uStbl4MtS8iQGUYf2Pz8pvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:ce:c7:b2:cc:08:48:97:7b:40:a7:cb:4d:6b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61935ce85dcabf05fed7bafa465b54b283d419f
Validity
Not Before: Sep 27 17:01:47 2026 GMT
Not After : Sep 28 17:01:47 2026 GMT
Subject: CN=ba37922fa2272b6535d43f394ae6069be83c7cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:38:02:30:87:b2:df:75:ce:8a:c1:25:b3:
ce:7d:45:05:01:18:54:64:3e:64:90:d4:81:d1:7e:
87:c5:ba:77:84:51:e6:9d:92:9b:09:c7:cb:35:d5:
dd:18:36:8d:cc:a8:84:2b:7a:7b:8c:ba:34:50:b3:
49:8c:10:a7:ec:ba:91:92:34:ee:e5:94:2a:c5:ec:
88:7f:fb:c2:90:70:0a:fa:7e:4a:2a:91:52:85:c9:
30:f7:24:a3:1c:c1:92:60:98:0e:cc:fa:5c:95:50:
e3:5e:39:ce:7b:c6:43:39:8e:17:f1:7a:69:8c:c0:
3f:b6:cc:b5:f1:ba:09:c8:97:3f:08:84:5d:76:27:
6f:49:89:7c:52:b7:fa:54:04:a5:ea:ac:b9:ca:b8:
38:3f:50:82:fb:25:10:9e:a1:4f:61:51:73:1b:49:
92:b0:76:04:ac:88:f3:c6:95:d8:aa:48:1f:fd:fa:
f3:42:18:ac:fb:0f:e8:37:6e:99:a1:69:65:ea:90:
0e:f7:1f:a9:13:53:0b:ee:97:93:88:0f:a1:8d:a9:
ea:c8:1d:d8:d7:67:6f:a5:67:de:c7:e2:01:8c:0e:
2f:74:78:9a:a7:e0:10:de:3d:74:f0:d0:be:57:d9:
73:51:d3:cd:bd:6a:cf:bf:a9:92:92:da:f9:28:cd:
d1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:37:92:2F:A2:27:2B:65:35:D4:3F:39:4A:E6:06:9B:E8:3C:7C:C0
X509v3 Authority Key Identifier:
keyid:B6:19:35:CE:85:DC:AB:F0:5F:ED:7B:AF:A4:65:B5:4B:28:3D:41:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:98:10:e6:de:eb:b8:31:c2:45:41:ff:77:e1:bd:dc:be:63:
64:ff:86:69:13:65:92:b1:2f:3e:25:8d:ef:b2:ee:41:b4:9e:
e2:fd:6e:f3:82:6f:04:85:f6:59:a6:b2:fb:e1:35:fb:18:60:
3d:3f:a5:6a:32:b0:e8:76:7a:52:66:46:bc:54:c1:7c:eb:1b:
d0:66:ed:4f:51:c8:cb:aa:f0:2c:12:bb:3e:e8:2e:0a:d2:69:
5d:37:23:2b:00:4c:df:57:0e:dc:65:95:0e:8c:7a:f5:21:52:
21:d1:a4:60:fc:c9:9d:d7:87:b2:0d:9e:10:93:f2:37:45:b6:
10:12:39:90:e4:b6:66:86:32:6d:00:a1:bb:0c:6f:25:b0:d7:
6e:49:b5:75:f6:84:21:5f:e0:12:99:1e:5e:0e:68:55:ee:01:
8d:47:52:01:ec:9c:bd:95:ce:ff:c5:8e:8e:e0:32:ea:f9:1f:
97:4d:44:51:fc:c3:e6:57:7a:13:15:ed:3f:ec:e2:5b:3d:10:
2f:ed:fe:1d:c0:af:9f:89:69:b9:1a:2a:9a:93:26:5e:19:83:
14:45:41:be:5e:54:a0:ac:0c:1c:6c:48:15:34:16:df:34:f1:
46:83:48:1c:ca:0d:29:6d:ac:dd:5a:ca:23:03:26:70:9e:3f:
20:ff:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:48:45 2026 by rpki-client