Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: DZk8i6OqEtNMlaA1woSi+MrdpIiVI9Fi8qzLkWCGPSM=
Subject key identifier: 6D:72:8C:CB:FA:70:8C:EB:E1:D2:D4:E7:F5:3A:84:E6:35:B1:63:3A
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 01A13E5D1FD2386D91565251EA30E7DB0BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 117D
Signing time: Thu 15 Oct 2026 07:00:52 +0000
Manifest this update: Thu 15 Oct 2026 07:00:52 +0000
Manifest next update: Fri 16 Oct 2026 07:00:52 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: xQ54aDKvSD8MhCzRUOAUboAZKfJ75TupHiYCDMEUJbg=)
2: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (hash: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:5d:1f:d2:38:6d:91:56:52:51:ea:30:e7:db:0b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Oct 15 07:00:52 2026 GMT
Not After : Oct 16 07:00:52 2026 GMT
Subject: CN=6d728ccbfa708cebe1d2d4e7f53a84e635b1633a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:6d:c9:61:3c:2a:c6:fc:18:c3:53:45:4c:
cf:3d:08:6a:ee:ce:02:81:e8:47:95:85:f3:53:cb:
65:92:48:8b:5f:a3:32:96:66:db:c1:c4:02:cc:bc:
30:35:95:26:83:90:db:18:c2:2e:ea:d1:b3:87:a2:
9d:32:cd:b7:29:8c:68:b6:58:7b:70:9c:4c:4d:42:
39:e3:e6:56:1d:ff:cc:4a:7f:2b:ec:66:87:a8:61:
5b:88:78:07:55:a4:5a:11:1b:8b:d5:86:8f:ef:ec:
72:28:21:5d:54:6e:cf:c8:45:d7:de:83:93:bc:5d:
21:cd:1a:ad:b8:c5:28:2e:fd:a1:22:10:0b:0e:3b:
ff:c5:4d:57:bb:72:4c:df:f0:43:72:41:45:bf:e4:
e1:85:fe:c1:9b:70:43:d2:68:80:ea:a2:22:4b:f8:
8e:ae:b2:86:9e:40:9d:4f:83:35:55:f1:cc:a1:21:
f6:9b:16:40:e1:a4:fe:48:4b:7c:b3:5f:1f:78:b9:
6b:1c:ac:2f:49:87:29:54:a6:30:2a:92:0d:fd:2e:
09:87:62:27:a8:42:69:82:95:b9:6b:4c:0d:7d:92:
64:51:9e:c7:4c:a1:fa:b6:62:ad:f7:34:dc:98:27:
bb:dd:e8:ee:fa:5b:62:e2:d2:07:84:d4:9b:92:1a:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:72:8C:CB:FA:70:8C:EB:E1:D2:D4:E7:F5:3A:84:E6:35:B1:63:3A
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e9:52:27:88:4d:b6:51:d4:f1:53:fd:43:de:92:2a:5e:41:
7b:ca:be:ad:f6:86:75:be:7c:9b:0b:b3:d0:8e:7c:a4:3c:95:
4e:ba:7b:4a:cf:d0:52:c6:99:53:a7:5a:59:c7:cd:49:ef:a2:
45:ac:4e:c2:26:ee:61:d2:90:7f:c1:98:fa:f1:ab:a8:86:31:
ef:04:0e:ab:85:a7:29:bd:9b:43:bb:ac:6a:97:0f:12:4c:92:
c3:73:da:71:ae:94:66:2e:0a:82:67:c0:1a:21:54:f3:62:3b:
95:9b:80:56:c6:1b:f1:78:c6:50:c9:81:21:1a:bf:ca:8e:c8:
48:21:5d:d7:af:4e:da:f4:27:8c:8c:5a:c6:73:72:58:27:2c:
60:a2:a4:76:52:59:17:52:84:0a:9f:3c:52:6f:ed:d2:b9:28:
4e:48:b9:28:ff:ad:1b:90:5d:d9:55:90:6c:09:3a:27:66:4c:
6d:18:85:88:74:95:c4:64:78:35:e9:32:97:de:ca:dc:c4:1a:
1d:85:ba:86:03:a9:bc:33:f2:f5:af:25:3a:aa:f0:60:7a:44:
8b:9c:d9:d6:ff:45:79:e0:e4:1e:06:c6:ef:e2:8e:6b:0d:63:
59:dd:cf:f4:81:c9:ab:02:e1:e0:2a:7b:c4:7a:67:1d:88:cc:
f2:53:c6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:16:14 2026 by rpki-client