Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: CZaLhAlqeyyw/8vqetgyq34vMa3LcaE3D1/uQm7Tga0=
Subject key identifier: B5:64:A2:CA:3D:05:C4:5E:82:29:3E:3B:60:DF:9A:F5:A6:9B:01:1F
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 019E1CEC06A68272A0CF3F95D8997F4CE9B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 0FDE
Signing time: Tue 12 May 2026 16:01:30 +0000
Manifest this update: Tue 12 May 2026 16:01:30 +0000
Manifest next update: Wed 13 May 2026 16:01:30 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: io1O9bHO3PB1PEbLJeik8/UcUa9OAXmPeGhQDJ+zcmw=)
2: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (hash: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:ec:06:a6:82:72:a0:cf:3f:95:d8:99:7f:4c:e9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: May 12 16:01:30 2026 GMT
Not After : May 13 16:01:30 2026 GMT
Subject: CN=b564a2ca3d05c45e82293e3b60df9af5a69b011f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d6:22:5e:74:40:d9:63:cf:07:3a:1d:53:2a:
51:4c:78:2f:34:28:30:97:a0:6f:9d:36:a8:e4:3d:
ef:3a:14:f2:f1:90:7e:30:1b:c0:ea:0c:42:ad:3e:
3f:a0:48:36:9e:dc:45:52:09:ce:1e:c6:ad:94:9d:
1c:dd:6b:25:c4:0a:0f:32:d4:73:69:52:38:e7:6b:
70:62:56:eb:31:28:e7:42:f8:8c:09:b3:ac:b4:fb:
04:46:4a:f7:ed:b8:5f:f1:ca:1f:a7:b4:cd:23:38:
7f:f6:a7:e6:71:7b:8d:7d:03:1e:4c:70:b0:6f:26:
c0:f8:57:04:7d:98:e7:49:8c:4b:eb:04:22:88:4e:
9e:ec:52:0f:6c:c0:f8:4b:cc:2e:68:c1:c5:86:e5:
68:d2:b0:bf:e7:e1:3f:06:71:af:32:83:ef:44:05:
c2:ca:c3:31:00:86:aa:5c:b4:56:80:7c:5d:a1:f5:
25:de:91:d5:81:4c:d5:34:ed:e3:f1:71:4f:0d:ad:
12:2a:51:45:95:3d:39:45:c8:70:09:17:1f:50:13:
11:e9:37:d4:a6:94:f1:a7:0d:ac:9f:98:e7:21:9b:
b2:ea:07:54:62:03:9a:d3:43:7c:7f:3b:5a:40:1e:
7d:6a:65:3b:e8:7f:56:fe:9b:64:fb:f1:dc:41:84:
7d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:64:A2:CA:3D:05:C4:5E:82:29:3E:3B:60:DF:9A:F5:A6:9B:01:1F
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ee:a4:b7:45:c9:80:85:d8:06:0e:c3:37:d6:85:bf:c8:00:
17:78:0e:f0:10:ba:5f:20:f3:f3:25:44:e2:06:d9:b4:60:bd:
c3:66:51:8c:3a:51:e7:69:67:4e:a2:e0:d2:2c:63:ac:23:e4:
ad:64:97:68:11:29:09:fc:6d:dc:cd:6c:8e:02:c4:2a:ec:3c:
20:b6:6c:fb:6e:ff:1a:34:39:b4:9b:16:d5:fc:0e:2c:e1:aa:
54:eb:90:35:1a:a6:82:1b:4b:b4:ef:99:90:54:a7:71:af:e5:
7f:82:47:fb:bb:f1:a3:e7:cd:39:56:f3:61:bd:91:34:04:7b:
8c:c8:c3:85:4b:47:58:00:93:bc:cf:34:d8:66:3c:28:c5:58:
e4:08:73:5d:5b:27:6b:4a:45:27:4d:b8:46:e1:17:08:63:46:
02:b3:3e:c5:b8:49:2d:21:51:60:48:5c:2a:96:3b:d5:d4:a7:
68:74:24:b1:11:90:b3:ca:f5:10:f2:aa:09:40:5c:c2:8f:8c:
1a:09:94:c5:81:0e:61:32:19:18:3b:31:79:1c:de:e5:54:bc:
ce:cc:6a:8d:10:8f:2e:91:20:3d:57:e3:c4:af:a0:d8:8c:f9:
a0:69:e8:5d:22:54:17:92:ec:73:b2:0f:74:65:fc:58:c7:ab:
75:2b:3b:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:00:45 2026 by rpki-client