Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
File: ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json)
Hash identifier: rElhAvZPtBOBcimnM7FpwQIBLIki3bp6Yfa9WFYjp/E=
Subject key identifier: CD:48:71:F8:B9:31:8F:75:BF:AC:25:6B:73:66:55:1C:C7:57:21:1D
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial: 019D2A0484AF5FF1C18E72FD2313880DFB9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 12:00:32 +0000
Manifest this update: Thu 26 Mar 2026 12:00:32 +0000
Manifest next update: Fri 27 Mar 2026 12:00:32 +0000
Files and hashes: 1: RRd_UXeiD7Rdkue9YMFkD_-Iwlo.roa (hash: KjoTbh2/2oeAXhL3EDRzxg7GIycpq9YCYmNFBZjjVj8=)
2: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: fvQlVBPRa6I1nstDN0muRmeWj0pii9hlM+AKtiP8EZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:84:af:5f:f1:c1:8e:72:fd:23:13:88:0d:fb:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Validity
Not Before: Mar 26 12:00:32 2026 GMT
Not After : Mar 27 12:00:32 2026 GMT
Subject: CN=cd4871f8b9318f75bfac256b7366551cc757211d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:18:10:0e:02:3d:49:c4:24:27:09:3b:c6:a1:
e7:07:a5:22:43:33:71:94:5c:31:44:e8:ea:fb:e8:
38:a9:a8:51:54:7e:76:7a:00:bf:80:ef:f8:f8:f8:
89:81:ac:2c:8e:ce:c6:28:63:3c:6e:b7:91:2c:8a:
af:e7:29:53:ce:f2:91:1b:3b:40:77:86:cd:59:5e:
8b:0d:3c:22:69:b5:d5:79:c4:df:8a:56:4c:2b:70:
1d:14:3c:a7:1b:04:7b:bf:c8:b2:ca:6c:a7:39:b4:
6a:32:fd:85:44:eb:da:85:78:b0:9c:00:77:06:cb:
c4:73:75:13:73:a4:4b:b9:81:d0:e4:ed:49:ed:60:
a6:d9:16:45:99:bf:7d:df:b3:66:ff:f8:bd:99:25:
79:c6:fe:2d:28:f1:25:50:51:56:80:9e:e4:a4:c6:
8f:01:56:a9:49:96:7d:4b:22:3e:03:2b:5e:7e:6e:
12:6e:14:6f:51:0a:f6:8d:e7:97:20:f3:b3:f0:3a:
67:2a:a4:65:72:3f:4c:26:ef:64:00:64:f1:66:6f:
2f:5b:a8:c9:7a:84:87:af:a1:cb:ca:82:4e:8f:5e:
c1:06:6c:70:d6:8c:f3:ae:51:af:d1:82:ae:49:e6:
2b:a9:d8:48:26:1f:69:f7:37:c7:11:2e:11:c0:9d:
b1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:48:71:F8:B9:31:8F:75:BF:AC:25:6B:73:66:55:1C:C7:57:21:1D
X509v3 Authority Key Identifier:
keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3b:4b:ab:93:98:dc:60:54:6c:71:a6:b3:8f:1d:34:2e:ba:
ff:0b:12:e2:90:a6:41:b0:62:66:0d:06:87:0d:48:29:8d:c5:
9a:42:d4:22:0b:0a:56:e5:4b:03:e0:8e:80:8e:09:ec:ed:e3:
0c:22:eb:46:53:13:c9:54:4b:06:50:f9:74:f4:9b:08:1c:3d:
e2:dc:31:f0:b5:66:cd:ca:1f:75:a2:2a:43:52:bf:58:9c:9b:
a8:48:44:40:32:34:e2:48:a0:51:92:74:f7:3b:23:b0:cf:64:
66:fc:58:a7:aa:27:c4:ae:6d:02:99:d6:85:f3:25:39:8f:69:
ab:8d:2a:7b:1b:fc:5c:c3:e1:0a:52:4e:d0:38:23:a8:a0:7c:
d9:bc:cb:9d:a2:72:18:e1:16:5a:96:f1:7d:f9:7b:a7:e0:26:
16:28:66:88:da:1c:83:e7:1e:3c:ac:9d:bd:18:d9:7a:75:5d:
40:58:9b:f0:8b:97:f1:0a:23:24:55:ca:b2:a1:0d:87:38:e8:
88:1f:89:87:a9:07:fb:71:dd:40:f6:f8:29:2e:90:13:6f:fd:
f6:3b:be:c4:68:fc:a2:4a:30:fa:a1:ca:f2:63:83:df:1f:d9:
95:19:24:7b:7c:83:32:75:39:fb:43:db:8f:3b:6c:e9:03:71:
8d:3a:06:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:45:25 2026 by rpki-client