Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier: jv97lopd/OgH6+tVlvcCh2tE8SzpDUYuZOg0eZ7qpo4=
Subject key identifier: 8B:09:F5:EB:57:22:F8:18:22:CF:23:0D:E5:83:D0:A9:8C:E5:EB:D3
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial: 01A0103D6AA36FB4905BA0A79840A5B70BB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number: 03D9
Signing time: Mon 17 Aug 2026 15:00:55 +0000
Manifest this update: Mon 17 Aug 2026 15:00:55 +0000
Manifest next update: Tue 18 Aug 2026 15:00:55 +0000
Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: 29bDLpHK8H35ZaiecOWbobEUpwySSgv0SLWBUbqRBpk=)
2: ksxu6ED0JYb4LkMNNBkeQrtTihg.roa (hash: hNrbAjwRe4DO2TxA72QQ5fqj3uvFtHcLzhkdLVrG1xA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:3d:6a:a3:6f:b4:90:5b:a0:a7:98:40:a5:b7:0b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Validity
Not Before: Aug 17 15:00:55 2026 GMT
Not After : Aug 18 15:00:55 2026 GMT
Subject: CN=8b09f5eb5722f81822cf230de583d0a98ce5ebd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ae:a0:b6:05:fc:36:3d:34:f6:5e:a1:de:b4:
6c:7e:99:31:51:83:57:f5:f4:0a:0c:e2:e3:1a:75:
bd:fe:86:8c:40:8a:e2:85:56:09:93:26:67:58:35:
3e:20:23:db:58:63:f6:05:2a:a5:6a:cc:b7:90:ad:
f6:4b:99:79:16:12:3c:60:77:a9:68:c0:c6:50:c1:
93:82:a8:5a:6b:f5:54:e4:6e:8b:57:d1:b5:87:f1:
5a:e9:44:23:e1:b5:7c:7a:d4:8d:58:cc:c1:58:4b:
f7:32:86:80:67:39:90:04:4a:a7:40:5b:14:3f:b5:
69:fc:69:7b:84:00:1a:7b:45:4e:40:c8:c6:20:08:
5d:70:26:aa:db:ed:88:cd:d0:a3:de:e3:eb:51:52:
ad:af:bb:d4:b5:82:79:d5:d4:cf:1d:bc:1e:2b:cc:
a6:7b:83:8b:49:20:d5:21:6e:96:58:2e:d4:3c:d9:
7c:d8:e9:83:2d:f2:94:93:3f:a7:ee:3a:6b:1b:78:
0d:71:af:c5:3c:28:c4:2b:e0:b6:bd:4c:62:fe:5b:
6f:ec:91:c7:06:81:d0:b3:f7:55:75:84:c5:47:b5:
a0:0f:09:af:5a:eb:fc:a7:7e:f5:24:bd:1b:0a:c5:
a9:b0:c2:a5:49:e9:a7:3b:fc:30:52:01:35:e0:16:
a4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:09:F5:EB:57:22:F8:18:22:CF:23:0D:E5:83:D0:A9:8C:E5:EB:D3
X509v3 Authority Key Identifier:
keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b5:ad:b0:0b:ae:4c:37:91:c8:21:9d:1e:03:96:e0:76:cb:
11:74:44:67:e9:fa:0b:42:da:ca:96:cd:56:80:0e:99:8f:6c:
0d:20:91:bf:f8:d5:c4:6e:91:91:de:dd:ea:89:9f:f1:68:b0:
62:14:20:74:28:16:6c:0d:8d:9d:1f:30:e1:10:ea:b4:14:68:
9d:b1:11:29:b0:30:75:6c:70:ab:23:1d:1a:e7:a4:00:e4:a1:
bf:eb:0b:41:b5:cb:4d:58:05:2e:5e:f4:b4:69:bc:29:5f:cc:
85:e6:8a:66:14:00:ea:ae:60:06:9c:c7:e1:1d:11:1a:d3:35:
4d:f0:5d:68:e4:10:6b:64:7a:a3:88:89:56:db:0a:5b:97:79:
39:16:98:d7:2c:60:f0:6d:1a:7c:9e:de:a0:5c:ee:f4:9f:76:
74:c8:47:34:8c:fa:68:9e:8d:e3:5f:87:2b:b2:92:1d:89:e4:
b2:d3:ac:1c:e0:4d:94:1e:10:4a:90:d9:ea:01:35:63:d9:b1:
ad:da:18:08:bf:af:8c:67:c3:43:7f:43:d3:be:a6:4e:2f:d9:
ac:d9:39:84:b1:ed:28:a9:b4:d3:b4:69:d1:55:6e:d4:02:55:
1e:86:a0:3b:99:86:54:ae:87:8a:d6:a3:ec:a7:73:66:b0:23:
a9:ac:53:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 21:16:57 2026 by rpki-client