Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
File: thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft (raw, json)
Hash identifier: VXIYozY6OMe/oNO4f6y1Gk8rkRg7UckgdwpIUB9EGRo=
Subject key identifier: FC:1C:1D:DC:2D:77:DD:93:D4:34:BD:C8:47:B8:1E:7B:F1:E5:6D:B0
Authority key identifier: B6:19:35:CE:85:DC:AB:F0:5F:ED:7B:AF:A4:65:B5:4B:28:3D:41:9F
Certificate issuer: /CN=b61935ce85dcabf05fed7bafa465b54b283d419f
Certificate serial: 019E1D59C5FB6EBFBA7AE8D017AE06785D21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
Manifest number: 59
Signing time: Tue 12 May 2026 18:01:23 +0000
Manifest this update: Tue 12 May 2026 18:01:23 +0000
Manifest next update: Wed 13 May 2026 18:01:23 +0000
Files and hashes: 1: ONCg4S-AwpRcuE8ixHABowEZXG8.asa (hash: PoiPStpGosLtzmokVlXMF0O8+FRd8PTDJBnNZ8l/K9k=)
2: thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl (hash: ysXpqC6wQ7TB4RsnrYWj3MatZ1ABSwhDYLRKE5trpuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:c5:fb:6e:bf:ba:7a:e8:d0:17:ae:06:78:5d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61935ce85dcabf05fed7bafa465b54b283d419f
Validity
Not Before: May 12 18:01:23 2026 GMT
Not After : May 13 18:01:23 2026 GMT
Subject: CN=fc1c1ddc2d77dd93d434bdc847b81e7bf1e56db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a7:a6:46:81:9b:42:1e:4d:95:47:5d:b5:3a:
93:20:f6:16:8c:32:a5:b4:26:bf:e5:a0:f8:62:52:
32:56:e7:9d:05:53:e3:b3:35:cb:23:07:3d:58:83:
6b:a9:5d:d4:09:64:e2:e4:af:05:4b:b4:e1:cb:0c:
e3:eb:61:0c:dc:d8:57:7b:cd:59:df:ff:74:93:d5:
62:d1:b5:fc:d0:75:4a:57:26:15:9c:99:87:89:8c:
c2:22:8d:43:d2:5a:32:d8:bb:b7:f1:d2:63:34:52:
00:fe:e5:7c:a4:43:4f:f2:c6:a8:54:51:bd:fe:82:
6c:11:54:1d:f6:ff:09:75:1b:6f:39:14:28:e1:2a:
6d:a1:87:81:bb:55:63:90:3e:50:97:a2:ba:de:85:
db:45:0d:2e:31:50:9c:9f:73:4f:57:a9:96:99:70:
fd:c4:3b:70:1e:80:2f:de:6f:62:5c:58:3d:54:d4:
f7:06:1f:5e:7a:4c:31:0c:98:96:05:dd:59:00:fa:
f6:a2:76:b4:a9:2d:13:c7:5d:a6:0c:d2:1e:6d:15:
ec:ae:e4:55:e7:92:c0:27:c5:0c:2d:e8:41:ad:9d:
08:49:e0:aa:40:db:4e:a8:94:7f:22:c5:4b:b2:7d:
e6:54:df:30:22:69:67:bb:1d:9c:63:77:bf:68:dc:
95:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1C:1D:DC:2D:77:DD:93:D4:34:BD:C8:47:B8:1E:7B:F1:E5:6D:B0
X509v3 Authority Key Identifier:
keyid:B6:19:35:CE:85:DC:AB:F0:5F:ED:7B:AF:A4:65:B5:4B:28:3D:41:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0aead6-26d8-4370-9c1b-ef086a27c814/1/thk1zoXcq_Bf7XuvpGW1Syg9QZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:5a:ab:ea:06:d4:ec:05:22:a3:74:57:ee:a3:10:7d:12:86:
bc:4c:3d:8f:a5:90:ee:12:4a:2e:10:f6:91:56:4b:44:ed:8c:
34:69:94:57:0a:81:16:4c:d6:f4:20:2d:e4:3c:9f:6f:ff:6a:
3e:7e:b6:68:65:bb:01:d8:02:b5:f5:f8:7b:72:5c:e8:75:90:
98:5c:30:bb:92:2c:33:ec:c6:e7:8e:38:1c:b9:81:ce:75:f8:
14:25:f6:c0:85:ea:9c:6d:11:b3:0b:01:48:63:7c:89:a1:0d:
20:25:d5:6a:83:55:6d:79:a7:28:f8:9b:cf:fd:14:81:3b:9a:
86:ce:e0:99:e5:3f:fa:9a:8b:37:36:d0:e1:c0:d1:2a:60:ee:
cb:97:19:69:7f:d7:eb:45:d9:82:78:bd:15:6f:67:49:94:c8:
0f:9b:46:e3:a1:90:f4:d1:49:0c:36:1e:e8:5a:cd:2d:59:71:
bd:98:11:ff:6b:03:ae:f3:2e:a0:8a:48:fd:63:3e:69:f6:51:
c6:60:d2:b3:ff:98:8b:8d:5f:f0:78:f0:b7:e5:d1:34:d4:00:
8c:2a:36:0f:d7:ca:98:65:d7:9d:e6:68:97:80:ca:0f:02:23:
31:81:50:d8:55:b4:cd:f5:e8:4f:e5:3f:ca:d4:fe:a8:16:a7:
39:ae:41:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:43 2026 by rpki-client