Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: RlwJO3rNg0LhIEsgqwpNI3HWf8IbDeQImbzi06EZYUQ=
Subject key identifier: F3:09:61:9A:8A:8A:34:3F:F7:16:2D:E4:EE:86:2D:F6:42:EB:07:07
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 019E303B8A0B271A397B8BAD52BAACCA1984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 0FE8
Signing time: Sat 16 May 2026 10:01:08 +0000
Manifest this update: Sat 16 May 2026 10:01:08 +0000
Manifest next update: Sun 17 May 2026 10:01:08 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: ikf2b+HzKHWXJpJynfNXNpn6psKKevVVVmVC4GCgMhk=)
2: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (hash: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:8a:0b:27:1a:39:7b:8b:ad:52:ba:ac:ca:19:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: May 16 10:01:08 2026 GMT
Not After : May 17 10:01:08 2026 GMT
Subject: CN=f309619a8a8a343ff7162de4ee862df642eb0707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1a:0d:40:36:15:91:d8:ee:96:6f:c7:b3:6a:
00:a5:b1:61:b3:f9:54:d3:d8:88:4f:d5:3b:7c:c5:
13:09:c0:44:15:70:fa:f7:3a:46:2a:72:d5:55:5a:
d4:f2:b2:a0:bc:72:aa:a8:ce:3b:02:54:b1:d0:3b:
36:27:2a:b8:7f:92:7d:ff:d8:8a:b8:a4:8a:66:29:
ab:83:b5:59:1c:ca:0d:2a:4d:7b:62:f2:d9:11:b6:
3e:97:34:3f:b9:c7:d5:77:e9:59:98:12:22:22:b6:
40:40:e6:2a:ba:91:73:7f:26:1d:ba:40:d5:87:d0:
93:20:3f:fb:eb:cc:df:09:2d:d8:04:c0:1d:d2:fe:
eb:f1:ee:a4:48:ac:e9:d5:5c:bb:f0:b2:68:50:52:
c5:e4:a8:44:fd:80:26:16:3d:28:c7:64:41:38:1a:
88:f0:23:2b:65:e8:d3:5a:a6:b8:4e:37:83:50:b6:
d4:ff:c8:ba:c3:e5:88:3d:ee:ed:96:d7:08:64:28:
a8:4e:6e:eb:91:dc:5f:bd:db:1f:2a:92:86:9a:ba:
e9:70:d9:af:c7:91:63:b1:ee:c9:5f:ce:8f:59:a3:
0f:3a:6c:6b:31:70:10:05:64:32:28:21:ce:80:9e:
46:e1:fd:2d:85:d5:3b:84:a4:0f:e7:45:f0:44:ac:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:09:61:9A:8A:8A:34:3F:F7:16:2D:E4:EE:86:2D:F6:42:EB:07:07
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b9:fb:26:04:f7:50:57:05:e1:44:37:66:de:a3:43:c1:e9:
a7:09:7b:93:a0:22:d3:12:1f:8e:f0:45:76:db:b2:77:c7:62:
51:9c:04:04:b4:d0:65:33:d7:1c:ac:b6:a6:78:51:c6:56:30:
11:99:ef:f4:c7:3f:94:4f:44:b1:f6:32:2b:e8:78:ad:8d:98:
95:d2:27:85:e6:6e:4e:f7:3e:3b:83:ba:2b:19:16:a6:f7:d0:
67:1d:3a:9e:03:67:05:ae:20:85:0a:22:0a:f7:27:50:34:c9:
8b:6a:8b:8a:be:01:40:ba:35:f7:65:9a:ab:f2:0b:25:0a:a8:
a2:74:5d:b4:65:ce:97:7e:6e:e9:f1:d1:4f:37:43:e1:34:a7:
f2:de:9d:17:f3:7b:8e:40:5c:68:c1:6d:ff:1e:ca:03:4d:65:
0e:ab:36:e7:b6:95:d0:4f:ac:c3:e6:e7:81:06:bf:5f:dd:55:
74:1a:de:7c:a4:7f:35:83:09:a6:f8:5a:5c:13:8b:f5:ec:7a:
a2:d9:0f:1a:5f:1b:c1:3f:70:b5:70:76:0e:74:b1:e7:79:2b:
0b:15:05:4b:c0:7e:3e:91:d2:ef:e8:8f:ca:9c:4c:4c:cc:cf:
05:e2:ca:fc:11:81:d7:87:5c:80:ad:b2:d1:62:bb:7b:04:66:
75:e3:a6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:46 2026 by rpki-client