Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: Udb8DjxbDl7NpP853phu7N8p+JC8j4BTq8u/Lq95z8A=
Subject key identifier: 08:60:C8:FC:94:EC:D2:D3:71:E8:1E:A3:CD:14:11:88:00:1C:36:60
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 019D39098FD392E48FF86C3EB14FBD48C81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 0F68
Signing time: Sun 29 Mar 2026 10:00:21 +0000
Manifest this update: Sun 29 Mar 2026 10:00:21 +0000
Manifest next update: Mon 30 Mar 2026 10:00:21 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: xE/z7NJR+arM8tx3jg6zB4StGJ8J8213DyFpO3p9+Es=)
2: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (hash: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:8f:d3:92:e4:8f:f8:6c:3e:b1:4f:bd:48:c8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Mar 29 10:00:21 2026 GMT
Not After : Mar 30 10:00:21 2026 GMT
Subject: CN=0860c8fc94ecd2d371e81ea3cd141188001c3660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:13:9a:30:7b:cf:c6:ad:ef:bd:7a:db:89:
43:5b:16:c1:ad:e3:f9:e0:0a:08:d3:c1:2c:dc:83:
b3:65:de:45:87:8e:47:d9:8b:f7:2b:30:65:f7:10:
cf:44:de:4b:89:7b:cb:f8:fa:22:18:42:46:97:6c:
89:b8:2d:aa:d1:87:63:8f:20:2a:24:75:1b:88:d3:
08:26:c8:f4:f8:e4:89:16:33:a1:23:80:1d:2f:fe:
e3:1f:24:eb:0b:d7:c1:20:cf:e8:58:56:96:11:1f:
26:40:7e:60:4d:cf:85:e6:47:34:9f:6e:cc:5d:00:
99:2b:9b:a2:2b:36:04:49:66:e5:52:53:bf:dd:c7:
39:15:61:93:82:c2:bd:a8:ff:f8:21:17:94:c3:de:
00:fd:7f:c4:3e:6b:1f:47:4a:e1:08:20:6c:29:f4:
d2:ee:b1:b5:61:aa:b1:8d:f1:72:18:df:b8:35:01:
dc:f1:16:75:8d:02:7d:43:06:55:8c:0b:f3:a6:93:
cb:72:4a:bd:0b:7c:82:2e:a0:1f:6d:92:62:19:87:
35:1b:73:96:08:37:2f:a2:83:5a:e3:09:b0:02:4c:
0b:d0:2f:55:85:7c:91:41:32:f8:0f:cc:1c:a3:46:
4a:81:38:ba:84:e7:4b:89:73:2e:38:ff:ee:2e:ad:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:60:C8:FC:94:EC:D2:D3:71:E8:1E:A3:CD:14:11:88:00:1C:36:60
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c0:90:b0:38:68:47:cc:f5:e5:27:a1:f1:cc:fb:4c:bd:d0:
87:07:6a:0e:9a:de:13:4d:e7:d2:ec:e5:05:0e:70:f9:1c:ea:
da:a5:91:16:0d:7f:49:2e:80:da:21:e5:4e:28:8a:6d:ec:b7:
c5:04:aa:b7:68:44:7c:49:d9:33:81:2b:60:6d:cb:56:b3:12:
89:c7:6f:a2:2a:57:a2:46:7d:34:61:6d:ff:e0:a7:6d:9d:e4:
8a:c5:7d:40:d2:42:b6:0b:9f:59:36:e0:38:5f:6d:16:49:a7:
7a:e9:fe:b4:e5:b3:f8:e5:8b:44:f1:ef:3a:46:b1:3a:c8:19:
bf:78:6c:ca:5e:2c:74:02:45:9e:8a:73:d2:9c:9c:8c:95:2b:
8e:ab:7e:25:39:42:f6:50:89:22:e6:43:d9:78:b0:13:a4:2c:
dd:74:5e:79:81:37:fa:7b:7d:a8:59:fd:b9:f3:61:09:ea:e9:
67:45:9d:7f:b5:b1:d3:24:2b:bd:f0:be:8a:f9:02:d9:85:24:
4d:8b:b7:92:98:d0:18:49:c4:98:78:a3:1c:94:de:83:3a:f5:
e4:e7:58:96:58:5b:dd:03:2d:e3:de:0c:e4:33:49:2a:75:42:
db:f0:af:32:3b:29:a2:44:71:6e:eb:39:7c:35:99:d0:e3:90:
d5:4a:1e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:34 2026 by rpki-client