Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: oz68IXk/wDe7+YvUt61vXfi6QfuRlUc4VaIj5zVn5Hc=
Subject key identifier: 63:1D:2E:C7:E6:1A:6F:BD:8C:B2:10:00:A0:C4:46:B8:41:BD:E7:3A
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 019F17F98DE85F717A27977AE742CFCFEC70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 1060
Signing time: Tue 30 Jun 2026 10:00:58 +0000
Manifest this update: Tue 30 Jun 2026 10:00:58 +0000
Manifest next update: Wed 01 Jul 2026 10:00:58 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: kJwLJsOSqpc5s+EWLk4UF5Babo/cH8JhIkfbLhMV4gE=)
2: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (hash: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:f9:8d:e8:5f:71:7a:27:97:7a:e7:42:cf:cf:ec:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Jun 30 10:00:58 2026 GMT
Not After : Jul 1 10:00:58 2026 GMT
Subject: CN=631d2ec7e61a6fbd8cb21000a0c446b841bde73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:63:99:5e:8d:9a:5c:c3:a2:a2:c8:57:ed:bb:
73:5e:81:eb:d2:e3:12:bf:9b:d2:53:9f:f3:24:28:
18:d7:4e:ff:fe:9c:a2:ea:df:00:6c:72:24:a7:23:
0c:29:23:e6:dd:13:32:0a:c7:93:72:7a:50:13:d0:
a9:3b:73:b7:ed:f8:59:7b:90:c9:74:8b:aa:20:92:
bb:d9:9b:6f:bb:3a:9d:bf:5c:fc:3a:25:11:bb:3a:
71:4c:75:5d:41:88:48:5f:d9:e2:4f:c3:0d:a6:dd:
21:80:fd:10:48:a9:61:69:0c:ef:fb:f9:e9:f3:6e:
58:8d:f7:59:1c:a1:5f:4c:c8:b9:45:84:d9:4b:bb:
14:94:ab:5c:88:e8:18:70:72:47:b3:32:52:8e:ec:
f3:97:51:54:6e:21:51:d3:69:72:89:3a:f5:b8:d6:
b3:e8:38:0d:a3:03:4c:fc:9c:b5:17:eb:81:21:b1:
70:bb:e7:b2:49:f4:a1:f7:1c:a2:52:10:fd:5c:bb:
9c:53:28:0a:2f:18:f5:b4:04:fd:a7:30:20:6d:15:
10:d0:be:80:22:3c:79:f2:67:f1:c6:a2:ba:47:87:
a9:11:d0:75:c1:e7:9c:5a:a0:a2:a1:ce:27:fd:eb:
4d:46:5c:25:2f:21:87:6a:0b:22:cd:e4:4d:3a:fe:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1D:2E:C7:E6:1A:6F:BD:8C:B2:10:00:A0:C4:46:B8:41:BD:E7:3A
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0b:42:1a:73:fa:52:5d:1d:72:53:0e:b2:f3:66:8f:ba:15:
cf:0d:9a:7b:b2:47:1a:71:85:76:96:90:09:71:9a:ec:14:9a:
b1:5a:65:eb:b3:f8:6c:d7:eb:f1:2b:32:bf:46:63:54:c1:57:
5a:4d:08:92:16:cd:e8:30:b8:ce:f9:f8:1d:72:b0:79:30:22:
56:43:cd:2a:8d:55:26:5a:d5:69:f8:b3:65:ef:62:7f:7d:42:
b0:7f:d7:f4:d4:62:b0:54:f3:ea:31:93:6e:44:e5:1a:4d:b6:
fc:7d:bd:c0:68:71:3a:22:b5:2a:09:ba:4b:a8:b7:1e:73:7e:
8c:2a:5a:28:de:6a:66:a1:10:8b:b7:a7:ec:b6:a2:dc:ae:d4:
9b:a7:0b:77:ff:43:ab:ba:d9:b7:70:1d:be:f5:11:e5:4d:00:
83:aa:be:98:b8:84:40:fd:0c:eb:94:12:61:c0:61:4d:ca:ce:
f4:ce:9f:bf:4a:13:04:1b:3b:9b:04:bc:1d:12:d2:29:f5:32:
ac:34:38:87:4b:09:2e:0f:f7:00:51:09:1f:10:9d:f2:5b:34:
bc:50:c7:3a:7c:a6:e5:7e:43:34:31:ed:d6:01:2b:42:e1:cd:
1a:ff:ab:1a:14:91:5e:7b:4a:8b:44:06:18:d0:35:5b:32:4f:
84:25:e4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:28 2026 by rpki-client