Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json)
Hash identifier: 437KUablkk2iakafLoYZNCzgr3RtNApv+crWIKp0qOk=
Subject key identifier: D7:23:26:A9:7F:47:6D:0E:69:AB:69:09:6F:BD:56:49:4B:C0:8D:99
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 01A0D011C10D02355DEA1E260D12397E6214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
Manifest number: 0821
Signing time: Wed 23 Sep 2026 21:00:19 +0000
Manifest this update: Wed 23 Sep 2026 21:00:19 +0000
Manifest next update: Thu 24 Sep 2026 21:00:19 +0000
Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: m3sCZHaPYWDmLsmSdjb4eIc+pgsNNw7llXHkYu2vet0=)
2: A1S7zaMW03197K0PFUGmkuS6qHc.roa (hash: P0RbhOWnYpuPcWIDbY8PS2tuKH+AkCqge3UmcT8QPYg=)
3: HcWgx2MiMP_xtGT9IucxolgQeIY.roa (hash: rcEUsMaoUm7Xd2I+QLC1mGGbjcwOScogc6eZLbEfymQ=)
4: iTT1Go78g5owZfyu9ktxbP5JHAk.roa (hash: Qjj93lcgSQbKTpiPRrMG7KIy0uRqncRntlD8V9IPje4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:c1:0d:02:35:5d:ea:1e:26:0d:12:39:7e:62:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Sep 23 21:00:19 2026 GMT
Not After : Sep 24 21:00:19 2026 GMT
Subject: CN=d72326a97f476d0e69ab69096fbd56494bc08d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:85:44:a2:61:19:03:a3:ee:af:77:c5:47:
72:85:01:70:d7:87:7d:73:a5:3b:20:9a:13:02:64:
48:e3:6c:75:97:2f:a4:c5:31:c2:e3:49:40:2b:36:
06:37:87:ed:85:98:f1:0d:37:d1:1c:57:a1:d2:81:
d1:40:2e:84:19:2a:5b:3b:b5:bf:e9:62:c8:fa:85:
3a:4d:b8:09:1e:ed:4f:cd:f3:4e:27:dc:0d:e2:32:
d6:90:da:05:00:e2:59:eb:17:ab:5c:45:4f:75:a3:
2f:48:3e:54:89:ec:33:04:43:3e:29:3e:b8:d8:4e:
fa:c3:fd:c7:8c:24:4f:5a:11:61:8b:83:ef:1f:e5:
b1:84:2a:56:db:1f:03:ae:18:ab:5b:39:ad:c1:ea:
13:4c:a8:e5:84:34:4d:2a:f2:56:05:eb:7a:42:34:
d8:97:fa:84:18:99:73:7b:63:23:ad:d5:2e:c0:55:
94:3b:01:d5:2b:13:35:33:14:9c:94:90:4e:72:6e:
86:2c:34:8b:58:e6:e5:48:83:5a:fb:4f:de:3a:4c:
dc:f8:bd:40:85:24:84:3d:76:d7:ab:d0:4e:52:86:
01:68:25:cb:c0:8e:aa:b2:03:08:81:c5:5d:0b:b4:
49:fc:78:08:d7:e5:77:af:18:0f:2d:c0:1a:44:6b:
35:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:23:26:A9:7F:47:6D:0E:69:AB:69:09:6F:BD:56:49:4B:C0:8D:99
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:51:03:cc:c4:ba:fe:43:88:ee:49:05:cc:89:10:0a:fa:35:
2a:01:28:c7:21:5c:fa:30:3e:a5:f9:d4:be:e7:a1:27:4b:94:
df:62:6a:29:a0:4b:bb:2f:4d:2b:b9:7f:ad:60:aa:b1:7f:9c:
a9:c7:b5:21:f3:ed:f4:f1:9c:d8:7f:73:4f:50:89:e1:bd:ea:
2f:23:f4:b7:2c:12:23:8b:d1:b3:36:38:5a:78:4a:d3:b2:9c:
0e:c6:e6:ab:d5:98:30:30:5f:c7:80:89:fe:27:4d:fa:3d:09:
e6:3a:66:75:fe:12:be:95:46:be:67:b8:d8:f4:33:37:cd:c2:
b5:0b:b1:79:e2:ec:f1:9f:1e:cb:2a:f2:5f:1b:5e:47:84:c0:
58:72:d7:bf:80:61:73:1d:7b:cb:b3:5a:b6:d3:34:44:22:4d:
e5:7b:b4:07:ff:1d:5b:9a:96:3b:cf:9a:e1:10:1f:7a:de:69:
71:9c:30:d8:31:19:f2:11:83:26:10:d5:44:28:31:e2:75:30:
ea:ee:19:12:c5:84:8f:a4:6e:19:6a:c7:f7:89:87:ee:a3:cd:
f6:bc:de:94:a5:16:d9:e0:67:d9:d8:9d:15:4f:a7:7d:de:5c:
cd:2a:67:7e:7e:db:bd:e0:7d:43:da:08:d7:0f:a6:ef:ce:c0:
7a:3a:b2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:49:14 2026 by rpki-client