Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
File: ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json)
Hash identifier: 463o72WIVk3lCXvls/NT4jbQrgx0X2mKnMoKj1z6JzE=
Subject key identifier: 83:DC:A8:C0:8E:F7:F1:30:AB:FE:1B:65:1F:5D:B4:E2:47:46:8D:CA
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Certificate issuer: /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial: 019F921134943E130676669A168C070A6C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 03:00:28 +0000
Manifest this update: Fri 24 Jul 2026 03:00:28 +0000
Manifest next update: Sat 25 Jul 2026 03:00:28 +0000
Files and hashes: 1: RRd_UXeiD7Rdkue9YMFkD_-Iwlo.roa (hash: KjoTbh2/2oeAXhL3EDRzxg7GIycpq9YCYmNFBZjjVj8=)
2: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: 50lsRIe4AjfciFUxQA5Hnrnh7RfMiFErsgF4/CCwcQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:34:94:3e:13:06:76:66:9a:16:8c:07:0a:6c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Validity
Not Before: Jul 24 03:00:28 2026 GMT
Not After : Jul 25 03:00:28 2026 GMT
Subject: CN=83dca8c08ef7f130abfe1b651f5db4e247468dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a6:d2:62:73:ef:fe:1d:84:50:11:fe:a8:b1:
af:03:2e:2c:45:de:6c:46:c5:c2:9e:85:d3:0f:a7:
0e:78:39:ef:ec:07:89:81:98:81:07:2b:e5:95:68:
29:dd:fa:87:f6:a2:35:25:5d:bc:02:92:0b:3f:9d:
82:cd:31:9e:25:b0:f7:19:dd:d8:d6:59:56:11:ba:
3f:9a:81:78:30:aa:9d:f3:c2:f2:b6:04:b9:6d:42:
ec:b1:0e:7e:29:80:62:5d:27:08:04:8a:31:b5:24:
93:1d:6d:51:dd:53:cd:3a:6a:e3:a9:a5:9f:65:cd:
c8:4e:5d:7d:e6:c5:12:7c:f6:22:7c:54:b2:cb:d2:
3a:dd:70:d7:b8:46:9d:2b:a8:a3:d2:4f:d7:49:8a:
b5:b5:5c:62:36:65:79:6c:ab:62:31:9c:46:75:30:
61:ee:f4:63:45:be:74:2b:8b:7c:00:c1:b5:64:f9:
3b:d4:3a:c9:a0:bc:b6:34:18:5e:c1:c2:67:09:cb:
3a:f2:5a:5d:a7:0c:64:05:23:48:84:1f:97:22:83:
65:f7:f9:9e:bb:c8:1a:86:d9:c4:87:22:1c:51:04:
96:9e:65:91:0e:ca:2d:c2:b9:56:1b:e6:f6:42:56:
ec:c4:15:d6:9a:8a:a6:7e:59:e1:51:e4:a9:32:c8:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:DC:A8:C0:8E:F7:F1:30:AB:FE:1B:65:1F:5D:B4:E2:47:46:8D:CA
X509v3 Authority Key Identifier:
keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7b:bd:d2:2d:99:1a:f6:db:ce:de:5d:6e:92:b5:ad:9f:ae:
65:df:8f:40:24:56:ab:70:67:b5:f4:82:8e:d5:5a:ea:81:b0:
ca:9a:e1:33:24:21:7d:f4:ee:08:0e:2a:d5:91:74:d4:c6:7c:
c3:3a:d4:43:e2:60:b4:49:91:17:d2:eb:09:97:80:5f:33:2d:
a6:81:46:81:91:50:35:20:93:88:ba:d4:e6:ed:fa:bb:ae:72:
90:b8:80:bf:20:94:44:9b:1d:93:09:8b:cc:16:a2:4b:a3:cb:
9c:e1:42:4a:a5:7f:22:0b:fa:3e:5f:38:04:54:5e:58:e1:a1:
ea:7d:05:5a:74:52:90:65:a6:03:b8:3a:16:21:ab:25:56:32:
68:68:75:a4:af:e6:1a:c8:e3:1a:b2:f1:7a:35:9c:2f:0a:d0:
68:73:ac:a5:50:f8:41:85:01:c5:57:d0:c8:11:2e:58:74:64:
18:b2:e8:02:f1:3d:9c:66:3f:38:74:aa:93:a7:0d:4c:0b:e0:
ee:38:45:6e:84:b6:a8:07:a0:84:f8:f2:09:f4:89:c4:99:52:
18:b2:74:54:14:ea:fc:7c:ec:5a:18:b6:da:bb:e9:b9:b4:4a:
3a:04:e2:80:05:17:b9:0c:eb:3b:4c:d6:25:65:a0:d0:3c:f7:
48:69:57:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:01:36 2026 by rpki-client