Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: JB+NEv0BNUqoI3QSt1YHsp3rECTroV66R+2Cw2YOpqU=
Subject key identifier: 1F:D2:84:57:BA:47:70:DC:90:1A:EA:7C:83:F4:AC:74:43:5F:6C:9F
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 01A0E399E4913F1751A1E459212BB00DC517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 114E
Signing time: Sun 27 Sep 2026 16:01:48 +0000
Manifest this update: Sun 27 Sep 2026 16:01:48 +0000
Manifest next update: Mon 28 Sep 2026 16:01:48 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: fcpAN8gnuLwmBcyKDF8VOPy5OeYXt953cYYm56zMCRI=)
2: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (hash: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:e4:91:3f:17:51:a1:e4:59:21:2b:b0:0d:c5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Sep 27 16:01:48 2026 GMT
Not After : Sep 28 16:01:48 2026 GMT
Subject: CN=1fd28457ba4770dc901aea7c83f4ac74435f6c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:23:bb:4c:b8:b5:b6:d2:7a:3e:f2:33:46:
7f:32:06:12:22:e7:19:23:a9:f4:64:6c:ed:69:05:
ea:86:67:a8:0b:a6:8d:5d:80:b2:20:54:76:23:8a:
04:fa:e0:32:ec:6c:8c:5a:3f:41:e3:11:39:54:a4:
cc:d0:66:4b:42:5a:5d:c1:e7:0b:bc:0c:94:dd:d6:
02:f8:a4:45:bc:19:59:d6:e2:e1:50:f2:86:c2:54:
d1:05:da:10:a2:5b:47:bd:bf:68:c2:b4:c0:9d:b7:
60:c5:90:95:3d:79:b5:7f:3b:85:ed:d2:8f:df:c5:
90:ce:10:a8:67:63:24:61:b7:d7:42:a3:11:3d:0a:
60:16:b7:71:18:04:aa:02:bc:ef:9b:c7:9f:2f:a6:
1f:50:31:28:c2:91:d1:eb:5e:98:60:eb:ce:a2:84:
f7:61:ae:06:37:5a:d8:ee:19:b4:0c:25:b5:a3:82:
a2:77:33:9c:ef:95:07:99:af:5a:43:d1:c6:45:e8:
3f:2a:fb:be:e0:d5:46:ef:0f:f9:72:79:b8:86:5b:
ac:d9:57:db:6b:1c:37:98:43:a4:79:65:35:38:e9:
81:2c:f6:90:eb:eb:36:bd:cd:39:c1:f5:ab:ee:dc:
4a:aa:b2:52:d5:13:0b:11:2b:25:3a:77:73:af:32:
3c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D2:84:57:BA:47:70:DC:90:1A:EA:7C:83:F4:AC:74:43:5F:6C:9F
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:d3:7c:a2:6d:1e:b5:50:c3:d4:f8:48:58:24:74:26:e1:ec:
22:bc:df:1a:2f:a0:18:6f:06:3c:8e:bf:81:6e:f3:cb:9e:ce:
71:e8:6b:0c:ec:1d:82:77:72:c8:37:77:4a:a0:29:dc:e5:63:
89:3d:d0:d6:d1:b9:6c:d0:5f:47:79:b2:6c:97:c6:cf:a5:23:
25:fc:e6:db:d4:94:09:85:56:15:5e:98:d9:8f:a0:40:71:dc:
df:ce:03:26:3f:3f:11:25:cb:ea:14:18:19:5e:02:4f:88:24:
50:4d:88:20:a5:dc:0e:d0:41:91:92:7a:38:44:95:64:ee:36:
39:b8:6a:9c:33:3a:21:28:5f:2a:89:a6:43:08:35:21:3d:a1:
4a:97:a1:bd:c9:06:cb:78:e6:a6:ca:0c:5f:ea:7e:60:87:c8:
35:c6:e7:df:e9:78:37:8b:b5:50:2b:d2:d1:4f:ad:b3:8f:77:
51:63:73:e0:9d:69:a3:03:81:02:12:ce:db:1e:28:95:c1:63:
8e:57:74:47:40:58:9f:49:21:92:6f:0f:e1:91:12:99:e6:51:
d1:37:1c:e3:2e:52:9b:3f:b6:ea:be:e7:68:f0:4c:43:8a:13:
34:37:c8:f8:94:a2:73:75:8f:7e:36:a0:6a:b7:9a:52:18:7a:
ae:d0:55:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:07:26 2026 by rpki-client