Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
File: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft (raw, json)
Hash identifier: yv4evzAmu+kDK/qHuD6ScbaxCGO/iwX3MGpDAaMJSYY=
Subject key identifier: 15:1B:7C:78:1D:2D:86:01:0A:AC:05:BD:F1:DF:22:37:12:56:5C:BB
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 01A0005C5BE682AFC5D35B4E4F0F94AAAD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
Manifest number: 16C2
Signing time: Fri 14 Aug 2026 13:00:47 +0000
Manifest this update: Fri 14 Aug 2026 13:00:47 +0000
Manifest next update: Sat 15 Aug 2026 13:00:47 +0000
Files and hashes: 1: 1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl (hash: nCjDzJZoqxHNMPVahZrWCaXGUnc8odNIcXKZ0c9pEys=)
2: q2-IGhwQSLSx5V9fY6kSeD39pbA.roa (hash: DfOwmBNWH7uAhJlIMJxO08FzHN1+2RmMZDRpAI6F/eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:5b:e6:82:af:c5:d3:5b:4e:4f:0f:94:aa:ad:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Aug 14 13:00:47 2026 GMT
Not After : Aug 15 13:00:47 2026 GMT
Subject: CN=151b7c781d2d86010aac05bdf1df223712565cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:72:8a:8c:cd:e0:7d:da:e5:02:54:bd:76:5b:
86:7b:fd:b4:68:59:ab:96:f6:47:5a:c5:3b:0e:80:
c7:ff:e3:a8:be:db:8a:50:48:1a:ad:28:67:c7:85:
98:8b:39:05:cb:60:54:0d:41:b6:df:6c:2c:ce:f8:
f8:8c:93:ec:3f:40:de:d1:33:91:7f:56:83:ab:53:
d8:dc:6c:ac:55:13:23:21:5a:62:24:8e:e4:8f:95:
c0:a0:42:90:b0:a0:60:aa:c8:55:8b:a8:e8:d4:e9:
38:69:1c:fe:41:83:bb:e3:91:56:cb:d9:ec:91:14:
46:81:b0:7d:d1:19:1b:ba:6e:f3:51:7a:04:e3:0c:
88:00:27:68:bc:87:06:9c:50:aa:c0:97:0b:f3:91:
5e:09:76:1a:32:64:2c:00:44:09:6e:78:29:3e:9f:
d9:95:b6:93:4e:4e:89:f2:da:20:5f:ab:de:ce:40:
19:c4:40:58:f1:22:08:07:1b:35:8d:dc:a6:c0:1f:
00:f4:ae:ac:c9:c0:8c:c0:fc:08:b3:92:85:55:04:
ee:69:21:bf:7b:71:d9:1a:04:6e:d6:46:f9:36:8c:
23:5d:99:39:a0:b2:80:21:2a:d9:06:d6:9d:4a:40:
a1:5b:e4:15:b9:cd:a7:50:6d:25:ab:ba:e2:da:97:
0d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1B:7C:78:1D:2D:86:01:0A:AC:05:BD:F1:DF:22:37:12:56:5C:BB
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:20:79:79:de:2a:c5:36:01:66:f3:c7:50:1e:33:7e:a6:21:
b9:5e:05:c7:b6:7f:75:4e:0f:70:6b:28:8f:0e:89:51:74:de:
15:2c:6c:49:91:0b:93:2c:a5:de:43:fb:d8:e8:75:e8:f4:33:
fe:fa:9e:fd:2b:3e:58:e1:d1:8c:2e:cd:4f:e3:4d:f5:ad:a7:
43:a5:d5:af:ab:9c:bd:8c:de:00:88:bf:64:b1:ab:e8:dd:fa:
12:05:81:09:6a:8c:eb:a3:de:81:bb:25:2d:69:5f:cf:3f:27:
90:52:20:bb:d2:2d:12:18:e5:ca:54:17:1b:07:a7:c4:14:67:
c5:44:5c:bc:91:ee:ee:77:bc:ea:2c:de:61:79:f7:a6:92:d0:
c8:5d:cc:48:3f:8a:e5:80:31:55:93:bb:f5:ae:a3:43:eb:3e:
21:bd:a6:31:94:2d:da:8f:98:0b:20:41:1e:6d:a6:ff:18:89:
db:fd:05:b7:0c:42:01:2e:50:6c:ee:ca:fa:91:3e:15:d6:68:
e4:eb:03:87:91:fc:c7:11:d9:93:30:ca:1a:af:86:60:6f:0f:
6c:73:cd:02:cd:45:26:1c:ea:48:05:3b:02:3f:b4:71:ee:ce:
df:51:43:06:e4:18:94:0b:fd:3c:83:1d:2c:ce:11:51:c4:23:
1e:c4:01:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:28 2026 by rpki-client