Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: Kh1ASIaQEuBFOaNGLTSnfgSq6WW8YdYF1sAtfKRxqSM=
Subject key identifier: 3C:4E:AC:85:D9:74:61:7D:8E:BF:0A:15:CE:1F:3E:70:02:C2:87:56
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 01A1DEA7D01166B6B66A3D506155590DB3E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 11D0
Signing time: Sun 15 Nov 2026 10:01:42 +0000
Manifest this update: Sun 15 Nov 2026 10:01:42 +0000
Manifest next update: Mon 16 Nov 2026 10:01:42 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: +bCVU7U1VCRMxptuQEK2d40gCDUtObvnso9C/oDLqIM=)
2: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (hash: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:d0:11:66:b6:b6:6a:3d:50:61:55:59:0d:b3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Nov 15 10:01:42 2026 GMT
Not After : Nov 16 10:01:42 2026 GMT
Subject: CN=3c4eac85d974617d8ebf0a15ce1f3e7002c28756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:eb:51:aa:f2:f4:ad:1d:2a:75:e1:75:b0:
46:0c:50:ed:16:36:c4:eb:bf:de:18:05:89:2c:d0:
96:ce:8c:d8:1f:33:0f:5e:49:ec:bf:47:ef:d0:81:
08:64:39:16:59:4b:94:3f:ac:d2:f1:76:8e:ca:fa:
e0:20:b7:e7:c1:10:4f:5c:39:c9:ea:40:19:a6:db:
dc:75:ab:3b:e0:22:54:f2:cd:1d:f9:08:9f:49:71:
b0:3c:fe:39:23:a4:f5:d8:53:83:12:45:3b:79:30:
43:72:23:ba:80:73:3e:1c:16:ac:c4:de:c6:e9:ed:
82:67:f7:43:18:3c:56:97:c5:2a:bc:bb:bc:e9:a5:
49:74:96:1b:8d:8b:ca:b3:11:26:c3:d4:f2:42:de:
79:0a:b5:29:50:4a:97:26:b6:d6:ac:87:4d:97:f0:
2b:06:53:03:53:bc:22:7f:3f:99:0b:61:59:2e:a8:
1b:f4:05:f5:93:70:79:c3:d1:6e:4a:94:8b:7e:e3:
9e:a0:ec:a0:73:13:e9:28:f6:9a:1e:de:dc:e2:03:
05:d9:4e:a5:85:0d:25:b8:84:fe:58:8e:c0:f2:3f:
c9:d1:92:56:47:28:b1:ba:fd:88:43:cb:e4:16:40:
87:d5:f4:90:10:3c:c6:e7:7b:76:b3:ea:fc:49:03:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4E:AC:85:D9:74:61:7D:8E:BF:0A:15:CE:1F:3E:70:02:C2:87:56
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:55:b7:be:a8:00:dc:0b:ae:b1:5a:76:6b:18:5d:a3:57:f4:
f9:d5:93:1a:94:bd:bc:a3:df:6c:74:9e:9f:6d:e7:09:f6:6d:
60:f5:43:ff:08:78:4e:95:c5:b0:cc:79:ca:2d:d2:58:b3:6a:
2e:55:24:26:32:de:80:71:36:0c:f9:f6:45:b3:ec:0f:25:bf:
56:bb:45:fb:0a:b3:fa:c2:7a:65:27:84:4a:14:3f:03:e3:0e:
d0:75:6e:29:64:0a:cb:bb:bb:58:7c:18:ea:f9:17:68:57:4b:
73:4c:3c:4e:c1:d2:fb:01:33:95:73:9c:c2:08:3d:92:49:e7:
03:06:0f:63:33:39:87:7c:40:4f:73:37:e6:94:46:56:82:11:
97:e3:27:f4:15:aa:a7:01:13:e6:d5:bd:2f:2e:8f:4d:25:39:
cd:16:94:75:11:64:70:df:e6:19:1b:a0:6f:e2:bd:88:f2:26:
b6:f5:70:8c:2d:0a:32:8c:1c:27:cd:b3:bd:bf:cd:31:33:db:
e2:b4:17:40:14:14:ef:6d:c5:c7:cb:77:5b:11:24:ad:10:86:
1f:71:04:b4:8f:6b:fa:ae:85:de:d3:31:ec:53:72:99:27:6b:
87:26:0b:86:d2:3c:b2:35:8f:78:3a:92:d4:33:e8:f9:50:02:
8f:36:53:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:36:24 2026 by rpki-client