Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
File: thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft (raw, json)
Hash identifier: nOTAeCXj3FAIrWZ03X8/f4yb/kQjmClg7lwltYBUCDU=
Subject key identifier: 8C:BB:48:A5:C6:F9:B9:44:96:0E:FA:68:32:24:30:00:A4:75:D0:AC
Authority key identifier: B6:19:35:CE:85:DC:AB:F0:5F:ED:7B:AF:A4:65:B5:4B:28:3D:41:9F
Certificate issuer: /CN=b61935ce85dcabf05fed7bafa465b54b283d419f
Certificate serial: 01A0DA287727ADF5BC19048D7B8CF46DB272
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
Manifest number: 01C5
Signing time: Fri 25 Sep 2026 20:01:19 +0000
Manifest this update: Fri 25 Sep 2026 20:01:19 +0000
Manifest next update: Sat 26 Sep 2026 20:01:19 +0000
Files and hashes: 1: MGjsww8dheuqhfZB-Sl8UJO86Mw.asa (hash: AZGCGxLEPOvdWoCLwq3terzeoueGaHqdJ950j2ixYt0=)
2: thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl (hash: 3gYjukonrXMCB0lFfv/jVkpCobeYI1BQhNC3Qgf+12g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:28:77:27:ad:f5:bc:19:04:8d:7b:8c:f4:6d:b2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61935ce85dcabf05fed7bafa465b54b283d419f
Validity
Not Before: Sep 25 20:01:19 2026 GMT
Not After : Sep 26 20:01:19 2026 GMT
Subject: CN=8cbb48a5c6f9b944960efa6832243000a475d0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:d2:ec:8c:37:09:2b:03:2a:96:ea:d1:f1:
15:a4:3a:a5:63:85:dd:3b:26:f1:b8:c4:cb:f9:5c:
34:4e:2b:9e:2e:c8:2b:66:a0:8c:70:b2:77:8c:8d:
61:4a:4d:f0:69:bc:8c:1b:2a:d9:e4:e6:72:c6:25:
33:bd:09:ad:b0:66:d2:98:e1:ff:c1:14:21:73:45:
bb:f8:f8:6a:89:e7:47:b7:a2:c1:1e:88:ce:fd:28:
8a:18:ee:f6:03:4c:1f:8c:ec:13:f9:70:61:c7:da:
0c:2a:c9:fb:52:ba:f9:0e:86:da:43:26:0f:91:38:
7c:22:d9:93:f4:35:7c:b5:3a:b4:36:f4:fc:63:1d:
8c:dd:d4:f3:e5:50:7c:4b:3a:98:d8:18:be:ca:54:
c2:34:0f:fc:5b:a5:60:60:82:88:a5:cd:23:eb:2b:
15:3e:89:48:a2:9e:1a:85:7d:9b:e9:67:99:9c:d6:
b0:e8:af:03:df:6f:6b:1c:14:8d:41:cf:5f:3a:b5:
75:7f:1c:e0:3f:74:01:aa:43:e1:19:07:ad:5a:cd:
d5:3a:ca:46:eb:de:7e:10:33:1b:03:09:fa:9e:24:
40:c9:e8:f0:e9:81:cf:92:2f:03:55:ae:1d:5a:d7:
85:4c:ac:7d:4a:ca:67:9b:7d:49:c7:dc:d4:71:99:
3d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BB:48:A5:C6:F9:B9:44:96:0E:FA:68:32:24:30:00:A4:75:D0:AC
X509v3 Authority Key Identifier:
keyid:B6:19:35:CE:85:DC:AB:F0:5F:ED:7B:AF:A4:65:B5:4B:28:3D:41:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:1c:10:a2:36:14:c7:b6:43:be:22:94:00:d1:22:61:32:ed:
1d:e3:5c:dd:49:e1:89:47:91:d9:06:9f:2d:d6:14:00:d0:50:
fe:f1:04:e6:0b:10:14:23:87:95:9f:4c:5b:8b:4c:05:da:96:
40:42:28:5d:2c:da:96:2c:94:a1:56:2d:a6:ab:c0:b3:2f:30:
31:84:18:62:0d:b6:fb:4c:4f:9b:a6:3b:c8:fe:dc:dc:ab:51:
ce:b7:3b:41:ff:5e:a5:e5:36:b7:1f:16:74:96:df:b3:fd:f5:
43:af:ea:a5:e2:8a:91:72:d0:ad:4d:bc:a5:d9:6a:63:13:b4:
14:88:e5:47:fe:34:37:a0:8b:33:a8:3c:ed:05:6b:df:41:c4:
76:ca:bf:8e:2b:4c:fb:55:ea:76:92:8d:06:b5:90:6d:34:d0:
37:a5:f4:4b:71:ec:e9:91:55:e5:ad:e9:97:b7:e2:0e:69:c6:
45:53:70:63:18:c5:fd:ef:ff:73:91:87:e8:c5:26:b5:45:2b:
4a:dd:e8:7f:cf:e6:ef:8a:b8:3b:a5:36:b5:3a:51:b9:69:d8:
0b:c3:80:14:da:c8:7b:c3:b9:b3:82:39:bb:b4:69:15:db:48:
d2:82:28:e1:01:30:72:71:bb:65:08:01:cb:1c:d2:4a:8b:32:
d1:83:d3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:22:05 2026 by rpki-client