Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json)
Hash identifier: b0DKHz3WzpggYLJ75STEHQjehLjM9J/nij9FVUMybmM=
Subject key identifier: 35:98:B2:23:42:67:E5:93:3C:D6:EE:19:8D:4D:C7:50:F6:BA:24:A4
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 019D2771C1905F7FBA779F2673F130FFC41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
Manifest number: 063C
Signing time: Thu 26 Mar 2026 00:00:59 +0000
Manifest this update: Thu 26 Mar 2026 00:00:59 +0000
Manifest next update: Fri 27 Mar 2026 00:00:59 +0000
Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: 6KGgPRR9n6nqpoU2NMY4vkC6+Pkt4oiXQX+47GzQOwE=)
2: A1S7zaMW03197K0PFUGmkuS6qHc.roa (hash: P0RbhOWnYpuPcWIDbY8PS2tuKH+AkCqge3UmcT8QPYg=)
3: HcWgx2MiMP_xtGT9IucxolgQeIY.roa (hash: rcEUsMaoUm7Xd2I+QLC1mGGbjcwOScogc6eZLbEfymQ=)
4: iTT1Go78g5owZfyu9ktxbP5JHAk.roa (hash: Qjj93lcgSQbKTpiPRrMG7KIy0uRqncRntlD8V9IPje4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c1:90:5f:7f:ba:77:9f:26:73:f1:30:ff:c4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Mar 26 00:00:59 2026 GMT
Not After : Mar 27 00:00:59 2026 GMT
Subject: CN=3598b2234267e5933cd6ee198d4dc750f6ba24a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:89:81:bf:ff:e6:74:41:d2:51:c2:73:a1:8d:
d9:63:19:56:aa:ad:c5:46:f0:41:fe:04:38:36:47:
64:b0:89:eb:5a:4e:c0:2d:2b:05:7b:c0:65:6b:3a:
1b:bd:9f:f2:58:c3:82:92:cd:8a:5a:5b:3e:90:19:
68:05:fc:e2:e1:ed:cc:af:0d:5e:38:fc:2b:75:c0:
27:d9:bd:f7:f5:45:22:92:2b:a3:22:af:41:31:b2:
f2:8d:91:69:f0:ca:36:49:aa:42:f8:fa:33:e5:98:
9d:7e:e0:1c:de:4f:41:24:79:89:45:80:00:c2:b6:
17:e9:42:6e:f8:9c:63:ae:e5:6f:a9:27:88:14:6b:
1f:e5:6e:81:7d:58:db:d1:15:43:91:27:3b:88:a9:
bc:3e:ca:8f:7d:44:6f:a4:d3:de:3d:34:2b:49:4d:
3b:1b:9a:7c:bf:08:f5:91:04:3a:19:8d:1f:a0:bb:
50:c7:e7:e8:0b:0c:ba:13:69:5c:cf:79:28:ea:04:
18:52:65:85:2b:33:41:e9:78:91:e1:18:ae:58:13:
35:39:fd:06:06:b0:f9:60:c3:81:6a:8d:0e:94:49:
37:13:56:38:40:42:0c:b8:69:26:ec:a1:f2:7c:d0:
78:99:ca:c5:2d:69:9f:88:9b:6c:f4:ef:7b:d5:75:
78:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:98:B2:23:42:67:E5:93:3C:D6:EE:19:8D:4D:C7:50:F6:BA:24:A4
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:1b:43:37:07:c6:7f:b3:2c:b9:de:cc:6a:54:87:6d:d4:31:
4d:87:bc:89:2b:47:a0:11:72:76:c3:e7:d5:c1:9c:b7:6d:87:
e0:a7:d9:d2:b2:72:a9:7b:2a:cc:5c:71:23:dd:26:da:e0:9d:
de:8c:62:24:67:b3:a5:1e:16:85:6e:2c:61:87:79:59:b1:d8:
5d:6d:54:7a:89:6b:fd:ff:83:ca:04:cd:35:fc:6f:a4:2a:c1:
13:aa:23:80:5a:a4:1b:09:8b:1f:f8:d2:81:2b:e9:83:39:4f:
b1:4f:d7:c5:9e:d9:3c:02:a6:2e:43:fc:24:8b:6b:e7:23:6e:
7e:49:2f:a7:36:e8:31:a0:6e:8d:f6:f7:5c:92:d9:75:48:bc:
49:1b:e7:84:ac:bc:c8:88:c7:f2:4a:87:43:22:4f:36:51:08:
f1:8f:90:68:00:d0:01:55:c7:fc:b6:39:a7:4b:06:15:4a:f2:
9f:80:5e:06:55:eb:d0:ba:f4:fc:d0:26:85:e7:af:aa:f0:c2:
2c:39:6e:b3:5a:0a:89:ad:35:e6:c1:4c:3d:6c:99:6f:b5:15:
f9:85:8e:4d:b8:ff:62:54:87:ca:75:e1:62:5d:ee:35:90:1f:
6e:73:76:1c:bf:d8:5a:a7:5f:c2:00:f8:8d:0b:5f:48:10:35:
bf:47:69:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:45 2026 by rpki-client