Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
File: ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json)
Hash identifier: +9Fv0YUYEW6iMeqwx6xOp8KPqsOIUGX04QEckic/G9Y=
Subject key identifier: 87:FF:7C:4E:A2:47:3B:18:26:A3:E3:3C:0E:E2:B0:96:A9:D9:F7:2B
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial: 019DD019E6CF6C24ACB332B715FEFCDCE1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
Manifest number: 18DF
Signing time: Mon 27 Apr 2026 18:00:51 +0000
Manifest this update: Mon 27 Apr 2026 18:00:51 +0000
Manifest next update: Tue 28 Apr 2026 18:00:51 +0000
Files and hashes: 1: RRd_UXeiD7Rdkue9YMFkD_-Iwlo.roa (hash: KjoTbh2/2oeAXhL3EDRzxg7GIycpq9YCYmNFBZjjVj8=)
2: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: kpc8TdtynwGmbX1bgX3/IQFcZTDxGgqcKC7iMn2Bbr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:19:e6:cf:6c:24:ac:b3:32:b7:15:fe:fc:dc:e1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Validity
Not Before: Apr 27 18:00:51 2026 GMT
Not After : Apr 28 18:00:51 2026 GMT
Subject: CN=87ff7c4ea2473b1826a3e33c0ee2b096a9d9f72b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:58:74:9c:33:08:47:40:da:df:9c:b8:a6:
d0:8f:d2:83:bd:01:2a:56:e1:8f:1f:4b:57:c4:e5:
18:64:24:b5:db:a6:f5:6c:ef:47:ca:62:e2:7b:81:
d3:1f:92:be:58:2c:3a:84:a4:3a:3c:e9:9f:16:b5:
a9:bb:fd:cc:b5:64:31:d3:74:3d:d2:13:f0:1d:f2:
c1:2b:f4:15:b9:ab:87:97:d4:07:04:f7:04:03:51:
77:b2:a2:21:40:09:8a:c6:22:1f:4e:ff:c8:33:94:
55:01:84:78:71:88:e2:07:b4:46:d7:8d:97:c5:5f:
73:24:1e:93:ae:d1:24:22:18:53:2e:77:03:9c:48:
cd:04:a4:48:c0:04:fc:f3:7e:5d:e9:b6:eb:0b:f1:
e7:1a:78:c5:a6:d5:df:9a:e4:98:ea:c7:63:1c:8c:
6a:de:16:2d:50:80:57:7f:56:76:4b:ed:d6:a9:25:
b2:e9:dd:7b:cd:4d:62:99:25:7e:64:dc:b1:3a:c0:
32:74:10:d1:b3:f9:53:75:6a:7d:49:4a:7a:00:ba:
9a:b8:f9:37:33:a9:fe:d3:72:80:63:8d:09:33:86:
e1:d8:8b:d1:8b:a4:ba:b3:4a:b9:f2:56:68:d2:1a:
31:01:70:d9:90:3e:f2:b0:a3:af:2e:9d:8a:a4:6c:
2b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:FF:7C:4E:A2:47:3B:18:26:A3:E3:3C:0E:E2:B0:96:A9:D9:F7:2B
X509v3 Authority Key Identifier:
keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a3:35:6c:e6:07:9b:f3:b3:b8:57:29:0b:0c:83:2f:7b:e9:
fb:6a:5d:f9:2f:df:f5:9d:e0:bc:59:5b:9d:cc:27:67:3a:8a:
71:bd:57:ad:ca:80:a6:6d:5f:31:d4:ec:52:bd:f9:9d:9c:26:
7f:67:75:86:dc:bb:1e:4e:dc:55:59:43:5f:de:a4:08:92:de:
60:cb:84:be:e4:7a:48:ed:b7:14:5f:e7:d3:14:3b:76:6a:79:
b8:cc:b0:4d:d6:80:7b:87:83:fc:ce:ff:89:9a:0d:d9:f5:91:
f1:21:9f:47:d2:c7:1c:e1:18:66:00:d1:58:d8:c4:28:a6:9e:
84:d0:7c:21:2d:9d:42:01:54:ec:a5:df:cd:6e:b4:2e:92:a2:
e1:fa:4f:20:5b:aa:a3:9c:ef:51:c2:3f:6d:78:fb:b8:8f:aa:
11:a6:a0:ed:a2:ed:4f:95:1b:e7:23:6a:59:27:4d:22:32:02:
f1:65:52:d4:ff:e6:0e:75:72:1a:c3:69:52:0c:12:5b:a5:d6:
b7:f5:43:d4:49:13:4c:9b:84:a6:4b:cc:d9:e0:6e:7f:c4:1f:
01:78:1e:03:bf:df:be:4d:35:d2:59:ef:bc:4a:5a:23:78:99:
e3:1a:40:d7:12:8f:7b:d3:88:f6:76:4a:58:e2:27:2d:63:31:
5f:b0:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 22:10:21 2026 by rpki-client