Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
File: 81ROkj2IO6zkqj9-9wByr-NRHyg.mft (raw, json)
Hash identifier: LxIv0EDm0pnHt9+4g6pmqTrX6rYxX9JeM94un3q93mQ=
Subject key identifier: 61:E1:B6:CA:88:1E:BF:20:E5:26:CB:18:AD:76:3A:E8:71:2A:74:DE
Authority key identifier: F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
Certificate issuer: /CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Certificate serial: 01A0E2875B4B0F4FCEBFBFC5B5A09FBA6D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
Manifest number: 07B4
Signing time: Sun 27 Sep 2026 11:01:56 +0000
Manifest this update: Sun 27 Sep 2026 11:01:56 +0000
Manifest next update: Mon 28 Sep 2026 11:01:56 +0000
Files and hashes: 1: 81ROkj2IO6zkqj9-9wByr-NRHyg.crl (hash: URuILQSpm52SmFAJQi87fm/0P+GA9oXREzABB+eeOeI=)
2: TrhXkCJb8q-vuCZF4exUSreBB7E.roa (hash: EGX2grrS3l79QBgl+a645PR4w0grZD/PxlFuVBj36pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 11:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:87:5b:4b:0f:4f:ce:bf:bf:c5:b5:a0:9f:ba:6d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3544e923d883bace4aa3f7ef70072afe3511f28
Validity
Not Before: Sep 27 11:01:56 2026 GMT
Not After : Sep 28 11:01:56 2026 GMT
Subject: CN=61e1b6ca881ebf20e526cb18ad763ae8712a74de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:5b:e4:db:4f:04:85:e9:03:b5:fe:7a:eb:
a1:fa:92:b1:16:a5:79:8b:df:12:2c:bd:54:97:eb:
9d:fe:be:2c:54:d4:77:f6:34:a1:7d:85:16:f3:08:
02:0c:ca:e2:a4:19:ca:15:3e:e5:40:d0:67:41:67:
2a:ae:f6:e1:78:ba:1c:14:47:ff:44:78:78:0b:f0:
2f:63:1e:46:2d:0b:b6:d4:b9:b5:28:9f:a2:fb:ef:
1a:ab:a5:c3:1f:a2:9c:ce:0d:c5:cf:17:61:48:15:
c9:86:6e:67:1d:ba:95:97:0a:3a:d0:d1:8f:10:d5:
10:26:b4:30:3d:61:3f:2a:35:87:85:8c:39:50:dc:
bb:a5:90:12:b1:41:89:80:47:24:15:d0:74:4f:42:
b9:4f:fd:a9:29:89:02:bc:2a:92:7b:51:9b:37:72:
03:69:f6:71:5e:dd:3a:35:5d:bc:94:00:9b:be:67:
a2:6f:f1:1e:01:ad:75:42:d8:5d:4b:56:ea:db:b4:
79:0e:90:37:28:70:7b:0b:f1:15:35:b2:58:e6:96:
79:ce:4f:98:20:7e:e2:df:0e:02:34:0d:2c:15:a7:
92:95:b0:24:42:61:d0:8b:af:3a:90:ab:9e:af:d5:
98:f8:45:47:56:15:60:df:35:89:66:c9:aa:06:28:
17:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E1:B6:CA:88:1E:BF:20:E5:26:CB:18:AD:76:3A:E8:71:2A:74:DE
X509v3 Authority Key Identifier:
keyid:F3:54:4E:92:3D:88:3B:AC:E4:AA:3F:7E:F7:00:72:AF:E3:51:1F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81ROkj2IO6zkqj9-9wByr-NRHyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/86d1aa-6475-4013-86ea-38c756aa4b50/1/81ROkj2IO6zkqj9-9wByr-NRHyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:e7:09:95:0a:4d:a5:fe:e5:89:4c:b8:67:08:28:0e:49:12:
f4:f1:86:65:24:96:4a:45:92:05:e4:05:db:f3:41:26:f0:a9:
af:42:7e:09:98:0a:38:69:1f:68:51:2c:44:ee:a3:45:60:77:
02:96:24:7c:16:b4:cf:33:56:ce:01:a8:ac:55:a3:12:bb:6b:
d5:62:51:67:07:98:2d:fc:a1:2f:97:aa:cd:32:de:b8:7b:db:
20:cb:fe:13:54:5c:7c:2e:dc:5b:57:0d:1a:bb:5e:a0:9c:41:
d7:ca:85:6c:5a:e9:d4:d8:26:87:6f:5b:89:80:d2:ff:d6:dc:
5e:af:3d:ce:a1:0a:8a:1d:79:72:36:18:b2:50:21:35:a0:9f:
09:b1:89:d9:5e:99:7c:4e:54:ee:6b:16:63:ee:ed:1b:df:52:
17:66:63:30:08:f4:b1:43:3f:26:d3:24:0b:06:11:1a:f5:c9:
12:69:33:62:56:d6:f1:e4:46:05:38:cc:bc:82:d1:02:74:56:
75:b0:2a:8e:32:e5:c4:6a:88:5c:26:dc:f3:12:95:87:08:ec:
5c:1d:44:3b:41:5f:ff:6e:fc:2c:39:28:da:97:ef:ea:6e:f0:
33:95:e5:1e:8d:12:41:22:a8:66:53:2b:ae:a5:27:e5:23:7d:
ce:a3:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:30:25 2026 by rpki-client