
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json)
Hash identifier: Py+l0qsxZkllyQaq5WVgyPsGpCcazYwSYsH1EwHu0rg=
Subject key identifier: 1F:4D:8F:E0:5C:96:0A:D8:0A:20:B8:B9:51:E3:E7:4F:94:C0:AD:F1
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 019E1EA2A83A87EF657D64933A8475465575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
Manifest number: 06BC
Signing time: Wed 13 May 2026 00:00:36 +0000
Manifest this update: Wed 13 May 2026 00:00:36 +0000
Manifest next update: Thu 14 May 2026 00:00:36 +0000
Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: VbFLRmcqq1rNJFrZmLRP7i7JXIJKJNxXs7Ez7uoiatI=)
2: A1S7zaMW03197K0PFUGmkuS6qHc.roa (hash: P0RbhOWnYpuPcWIDbY8PS2tuKH+AkCqge3UmcT8QPYg=)
3: HcWgx2MiMP_xtGT9IucxolgQeIY.roa (hash: rcEUsMaoUm7Xd2I+QLC1mGGbjcwOScogc6eZLbEfymQ=)
4: iTT1Go78g5owZfyu9ktxbP5JHAk.roa (hash: Qjj93lcgSQbKTpiPRrMG7KIy0uRqncRntlD8V9IPje4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:a8:3a:87:ef:65:7d:64:93:3a:84:75:46:55:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: May 13 00:00:36 2026 GMT
Not After : May 14 00:00:36 2026 GMT
Subject: CN=1f4d8fe05c960ad80a20b8b951e3e74f94c0adf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:74:69:00:66:a0:fc:ba:fb:4f:ab:78:bd:fd:
1f:7d:1a:b6:f5:6a:56:d2:b1:59:70:27:2b:89:ae:
6d:57:96:00:89:1b:e8:28:35:51:9b:8c:f0:77:a1:
7f:3d:a2:b8:a4:fe:2f:f8:fe:dc:4d:28:7c:71:44:
1b:8e:9f:23:ae:49:99:bf:3f:8f:3e:dc:e6:6c:91:
9d:39:24:81:cc:aa:96:9b:a8:ac:65:a2:c1:05:de:
9d:70:53:ff:54:42:b9:57:5a:32:85:03:cf:a4:7c:
af:d9:7a:4c:48:1c:da:0d:ca:2e:a5:a5:35:85:9a:
69:78:39:d1:19:0a:5d:d4:4d:6c:a4:74:97:1e:d1:
46:1a:8b:af:97:40:8e:d0:02:4b:5e:fc:99:03:5e:
91:5f:56:b4:44:3f:00:a2:93:a5:ec:3d:54:f4:6a:
18:79:b9:23:86:56:3d:49:f7:c1:2a:27:ea:31:4d:
5b:b5:d4:42:8a:ea:fd:f3:d9:7b:24:f8:cd:61:60:
1b:7f:df:d4:8f:e2:32:d8:36:a8:2b:dc:bb:1a:9c:
fb:5b:8e:f8:76:4e:4b:60:dd:62:d0:a3:46:75:8f:
7f:ad:fe:a9:90:be:80:28:ae:bd:62:1c:c3:8a:84:
75:f7:51:cf:54:87:7a:dd:65:8e:62:69:dc:24:94:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4D:8F:E0:5C:96:0A:D8:0A:20:B8:B9:51:E3:E7:4F:94:C0:AD:F1
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:dd:97:9f:40:5e:f7:e4:13:f4:06:f9:c0:1d:10:61:e0:5a:
70:61:b1:3e:0e:5e:cf:d1:b8:5e:87:6b:df:f1:8a:3d:4e:4d:
09:8e:55:b6:bd:db:61:a3:43:5b:04:d2:b7:61:2e:73:a4:64:
36:b7:fd:aa:a5:9f:29:15:11:6a:d0:5e:25:4b:75:38:bb:c7:
17:1b:d5:48:02:48:8a:a9:9a:2f:58:96:34:fc:a5:55:45:25:
6a:dc:b9:89:1f:29:7e:f2:73:f0:0b:8c:00:33:13:f1:33:0a:
7e:f0:7e:52:89:8f:85:98:5e:f2:4f:e7:f3:2e:8b:9c:2c:58:
dd:5e:ed:17:76:fb:b3:02:85:29:30:54:ec:40:d8:ef:48:1b:
ab:1b:05:e9:4c:19:96:32:68:fc:22:43:90:c8:1a:da:e1:f0:
d6:45:ad:56:07:a8:b3:b6:3f:6f:19:2b:b2:c6:0d:28:8b:ee:
9c:af:47:43:be:f9:ea:b6:82:c5:e6:c5:cf:31:a0:84:2d:99:
74:e0:cd:a0:0a:42:af:d3:82:4d:3a:06:70:bd:fe:f2:a0:2f:
5a:18:16:f5:2b:cd:f0:8a:4e:cb:df:50:8c:44:db:5f:f0:b8:
a2:56:30:bf:f5:22:b4:a6:65:49:75:4a:a9:95:a6:8d:6f:9d:
cf:b8:e3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:22 2026 by rpki-client