Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: HtWT1xpJ8F5pTZVQiYjUO2Q/w8oGcOny7sdlJg9yOXI=
Subject key identifier: 80:BA:8E:9B:AC:B0:70:36:07:89:DA:A0:72:B8:43:EF:A4:66:61:3F
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 019D2996DCAE3229BFE1659C1B302B97776B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 0F60
Signing time: Thu 26 Mar 2026 10:00:45 +0000
Manifest this update: Thu 26 Mar 2026 10:00:45 +0000
Manifest next update: Fri 27 Mar 2026 10:00:45 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: oEaiaca28UKk+WwhqwE1ZPc3haTPu9o2M/WFOR/3moQ=)
2: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (hash: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:dc:ae:32:29:bf:e1:65:9c:1b:30:2b:97:77:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Mar 26 10:00:45 2026 GMT
Not After : Mar 27 10:00:45 2026 GMT
Subject: CN=80ba8e9bacb070360789daa072b843efa466613f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1c:44:9f:78:0c:c6:89:eb:b2:3d:92:48:15:
2f:10:b6:d9:b3:77:30:03:73:e5:8a:e9:81:02:4a:
c4:64:2b:dc:f2:6c:cf:31:03:06:f3:2a:03:e9:25:
f9:58:97:9a:88:74:63:b1:b9:60:5c:6d:7d:05:52:
9e:a8:0d:ee:a7:78:84:ee:ee:44:8e:c1:d5:fa:0d:
70:54:ca:08:74:9e:f3:08:bc:a9:f6:90:f8:a3:49:
1f:78:8a:50:4f:b1:72:b0:19:64:43:09:38:fc:43:
5a:e2:8e:e6:78:b3:30:13:c9:86:2a:38:e8:ac:66:
d1:97:e3:b4:b7:cf:1d:66:65:6e:c2:45:5f:e2:1b:
50:0f:82:4b:70:a1:58:47:16:9f:72:46:11:be:aa:
d4:3a:d7:3a:bf:a5:42:db:9e:df:ea:fa:53:11:ba:
ec:57:23:ca:dc:ef:ca:67:fd:32:50:2c:0c:16:6e:
3e:15:c0:a8:97:ee:4f:95:64:d5:29:ee:64:f3:a5:
57:9b:30:63:68:87:01:ee:1a:8a:2f:b1:49:d6:37:
14:e5:bd:87:57:31:fa:2a:21:f8:d7:9f:27:a4:6c:
84:bb:f6:b3:72:f0:d0:c4:d8:7a:f7:7b:9d:33:f8:
3b:79:71:69:fa:43:27:c8:1c:dd:7b:d5:67:09:94:
11:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BA:8E:9B:AC:B0:70:36:07:89:DA:A0:72:B8:43:EF:A4:66:61:3F
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:1a:ff:b2:3c:18:6c:16:61:39:ec:61:1f:05:dd:f3:a0:ee:
52:c7:6c:47:8b:81:2b:b7:be:6d:71:ec:a3:35:69:ad:a4:ff:
cd:52:2a:bb:dc:f4:24:ee:1c:17:e6:1f:d0:5c:6a:1c:65:da:
38:9d:6f:6c:ea:3e:94:37:54:04:a5:84:8f:c9:e5:98:57:f0:
19:52:6e:d6:d4:3e:ae:5a:8a:a9:a7:ee:6d:80:3f:1e:fe:0f:
02:3a:d4:d7:81:8f:e3:11:bb:1a:ae:fa:51:e8:6c:54:43:1b:
43:19:85:38:86:6e:44:57:f8:6d:17:9f:c4:6d:42:ce:8d:7f:
c1:8a:c2:15:63:c8:38:5d:d0:a6:78:c1:8a:c8:f4:71:7f:67:
b4:50:ce:9a:32:5c:92:8b:4d:4f:6e:8c:0c:32:7b:17:d6:0c:
8c:19:a0:7a:33:b7:dd:47:04:ae:00:26:23:b4:81:86:d4:df:
6f:2e:c1:25:01:4f:5d:cf:88:56:b2:89:ec:a2:11:43:3c:1a:
a1:08:91:8c:3b:21:72:6d:20:ca:f3:a2:17:ac:66:6d:c0:32:
0e:a0:fa:5a:f1:2f:2a:45:30:20:41:eb:3f:2e:4d:9d:6c:32:
6f:52:a1:83:39:bf:5b:9a:6d:aa:0e:4a:22:25:78:d8:7a:09:
4a:3d:b8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:24 2026 by rpki-client