Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: xfGvdodhCmhKM1Zy15dgUp0I5/u7yYDJLNq3TGzjCiA=
Subject key identifier: 61:A1:25:3C:D1:C4:AF:1A:D0:8B:01:E6:D7:48:34:41:E9:8C:C2:70
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 019F9059F438166359043EA75461E17976D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 1688
Signing time: Thu 23 Jul 2026 19:00:42 +0000
Manifest this update: Thu 23 Jul 2026 19:00:42 +0000
Manifest next update: Fri 24 Jul 2026 19:00:42 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: TYZh+xY/INhwD6iXd7kYHheBmgiiJ2ceD7148byAyFY=)
2: q2-IGhwQSLSx5V9fY6kSeD39pbA.roa (hash: DfOwmBNWH7uAhJlIMJxO08FzHN1+2RmMZDRpAI6F/eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:f4:38:16:63:59:04:3e:a7:54:61:e1:79:76:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Jul 23 19:00:42 2026 GMT
Not After : Jul 24 19:00:42 2026 GMT
Subject: CN=61a1253cd1c4af1ad08b01e6d7483441e98cc270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f7:32:7e:16:a1:ab:61:4f:37:ca:71:b0:1c:
38:a9:63:62:da:da:07:2f:1a:d5:2c:ce:5a:86:0c:
2b:89:9e:e7:eb:d5:da:7d:0b:9e:cc:08:16:c7:39:
12:db:4e:e8:d6:a5:43:d4:ba:df:85:47:85:bf:89:
4e:ae:46:e7:b4:dc:fc:84:0c:1f:6f:43:7b:9d:62:
53:e5:64:ea:e7:25:b2:3a:db:fd:ec:66:a4:e8:85:
29:b6:07:22:ac:d7:3a:68:da:12:f6:5f:ae:d2:29:
1b:3d:dc:8a:c8:c7:59:25:7d:bc:70:01:60:7f:89:
55:33:e7:a9:73:41:15:1d:38:1f:60:bd:a7:fa:17:
78:2c:d4:83:97:c3:dd:da:d1:c7:25:47:0c:9a:21:
f9:a4:2c:e8:c5:56:4d:6b:a4:7f:f6:e5:9f:cb:fd:
78:1c:32:b4:54:a9:54:d1:91:94:75:94:13:6b:9c:
7a:94:64:c5:47:6d:28:30:28:38:50:62:92:83:b6:
29:7f:a2:09:db:fa:14:fa:63:c6:05:a7:41:ad:f0:
95:3d:69:03:de:32:05:db:62:b2:ec:8b:5d:47:25:
d7:75:9b:69:18:a8:b1:da:49:80:04:ef:6a:28:89:
77:15:7e:ff:e9:29:37:48:c1:a9:9a:c9:16:c0:2e:
aa:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A1:25:3C:D1:C4:AF:1A:D0:8B:01:E6:D7:48:34:41:E9:8C:C2:70
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:e2:9e:45:9a:93:6e:6f:a8:cf:ab:2e:6c:2c:62:5c:51:64:
ea:f1:07:ea:1a:2a:d1:74:4f:8d:99:12:10:55:3d:14:d0:06:
41:27:34:be:f9:23:14:c0:f9:ef:36:92:a4:3c:91:7f:83:40:
b2:4c:4c:92:8e:b5:39:30:34:bc:ca:68:80:29:32:91:44:ba:
0c:c8:fd:16:85:b0:80:ec:a7:82:dd:da:c9:2f:f2:14:ce:ca:
3c:08:cb:5e:7c:58:ef:96:ce:d0:8d:a8:32:a2:6a:85:58:3f:
5f:04:00:5c:e9:c3:67:b1:b2:a8:bd:c1:59:f2:fb:23:25:bb:
59:54:26:75:ac:b7:f9:16:41:fc:c2:3e:5e:cc:98:d6:2f:29:
bb:c9:bb:71:9e:70:00:bd:33:68:e3:e6:87:7d:89:7f:16:b0:
42:85:d4:68:be:46:43:a0:fa:42:60:61:d7:aa:8a:2a:e3:e3:
de:da:10:38:0e:6c:aa:f5:2c:e8:0c:28:8c:26:9a:35:f0:9c:
f9:2a:7e:46:b5:26:ac:a5:fc:72:94:ab:5b:7f:7e:d3:e6:a6:
de:dc:fb:ed:cb:63:8c:c3:f4:eb:e2:be:88:ee:08:a3:ae:51:
e2:be:87:3a:a6:b3:3a:5b:65:c0:58:98:54:a6:72:62:75:80:
a7:08:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:31 2026 by rpki-client