Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json)
Hash identifier: fiLUSIUr43EMG+gxhjvOR0JQWG+KssiiRPbWvLxE1ag=
Subject key identifier: 4D:1E:2B:17:1D:EE:55:46:A5:C5:62:07:47:4B:97:F0:84:6E:77:B1
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 01A0016EF02A2EF7211A0FC1862192208D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
Manifest number: 07B6
Signing time: Fri 14 Aug 2026 18:00:42 +0000
Manifest this update: Fri 14 Aug 2026 18:00:42 +0000
Manifest next update: Sat 15 Aug 2026 18:00:42 +0000
Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: bxYTkdAysVPCXrshglSqwTjka67dl3LRLzidaYcYeeg=)
2: A1S7zaMW03197K0PFUGmkuS6qHc.roa (hash: P0RbhOWnYpuPcWIDbY8PS2tuKH+AkCqge3UmcT8QPYg=)
3: HcWgx2MiMP_xtGT9IucxolgQeIY.roa (hash: rcEUsMaoUm7Xd2I+QLC1mGGbjcwOScogc6eZLbEfymQ=)
4: iTT1Go78g5owZfyu9ktxbP5JHAk.roa (hash: Qjj93lcgSQbKTpiPRrMG7KIy0uRqncRntlD8V9IPje4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:f0:2a:2e:f7:21:1a:0f:c1:86:21:92:20:8d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Aug 14 18:00:42 2026 GMT
Not After : Aug 15 18:00:42 2026 GMT
Subject: CN=4d1e2b171dee5546a5c56207474b97f0846e77b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:d6:96:a1:ea:f6:b6:9e:89:13:86:a7:92:
96:a8:a6:c7:96:29:79:cc:69:2b:7f:34:a1:65:1b:
4c:b3:a6:f1:48:16:b3:9d:e3:3f:5b:27:f7:2f:1f:
f8:4f:23:c3:cf:17:3b:34:28:30:e8:10:57:9f:09:
31:38:ec:f3:3e:3e:a3:2b:b5:b1:e1:e1:cc:40:2c:
04:70:05:63:a4:e6:e4:49:b2:d9:4e:14:5e:bb:40:
22:d0:93:72:a8:bb:3d:c2:05:6a:dc:ac:4b:45:85:
1f:8a:2d:b1:d2:91:df:66:5d:ba:3c:0b:bc:44:4b:
05:55:a7:4e:a7:9f:3e:5f:30:40:d4:ab:73:96:ab:
1c:24:62:e1:67:bb:33:30:f8:28:dc:55:fe:47:bd:
0f:fe:66:c7:13:5a:75:e4:70:48:60:5c:91:52:33:
68:17:de:93:4f:bc:f2:77:77:15:6a:90:f8:cc:91:
2a:49:2a:41:60:98:ca:5f:7d:3d:c5:bd:ab:41:94:
f8:21:1b:dd:f3:26:76:0e:b3:f5:f7:89:1d:98:aa:
b0:c9:d1:5e:f5:9e:da:f4:be:d4:1f:96:48:58:22:
81:e8:38:fc:b0:25:fc:11:ff:4e:61:b6:d6:bf:ee:
8c:10:f0:32:bb:64:c9:34:c6:e6:b3:22:0c:6b:8d:
30:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:1E:2B:17:1D:EE:55:46:A5:C5:62:07:47:4B:97:F0:84:6E:77:B1
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:49:05:77:86:57:f9:e3:b9:97:58:0e:93:6b:77:4a:e1:0a:
4b:da:46:b0:15:47:c8:39:cf:cd:3c:26:ee:43:77:b3:5b:04:
24:49:5b:d1:52:14:28:d6:49:4d:35:6f:37:ae:d4:a4:fe:fd:
e9:aa:21:7b:52:20:61:ba:c7:7f:2b:7f:e5:5a:0f:c8:e9:bc:
25:c3:e1:20:d5:32:17:90:10:c0:65:32:13:db:ca:3d:29:88:
74:95:20:cc:67:bd:f1:1d:e1:b4:47:d1:42:f1:ec:00:71:0f:
8d:69:95:b0:95:be:a1:f1:0f:67:65:89:16:52:34:72:3f:3f:
42:13:b8:87:1b:81:7e:6a:13:ca:9b:a9:b1:5a:21:5d:6d:41:
4e:0f:b8:1e:72:a6:80:8d:70:1c:bb:1d:db:4e:9d:7b:69:f8:
92:50:bb:06:2d:a5:ba:5b:f3:db:c9:8b:50:df:89:86:68:42:
5b:03:67:9a:eb:a0:8a:61:70:a5:22:80:e8:0a:a7:ed:df:e5:
bc:f6:82:9e:27:a0:b5:fd:29:24:91:86:b4:6e:da:32:46:fa:
50:90:d8:1e:dd:2e:bc:19:f0:2e:dd:2d:5f:24:50:45:c7:8e:
1d:36:f0:0b:08:c3:0a:bb:2a:5e:a6:f4:b7:d6:cd:bb:3b:c3:
df:db:40:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:07 2026 by rpki-client