Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: cTU0v42dMYHILcNi3N6DEalXm7I6QvQ/qRdFbCRWunY=
Subject key identifier: 29:89:0E:D9:01:69:06:C4:77:A7:77:E7:FF:53:24:72:A7:B3:89:31
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 019FA8D05331E012D68E35C88425E3B16009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 10AB
Signing time: Tue 28 Jul 2026 13:00:52 +0000
Manifest this update: Tue 28 Jul 2026 13:00:52 +0000
Manifest next update: Wed 29 Jul 2026 13:00:52 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: Vgrluq3XO6wGH/2U2nj+Bw0IfLv4hH2Wh9PcGdc4vHE=)
2: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (hash: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:53:31:e0:12:d6:8e:35:c8:84:25:e3:b1:60:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Jul 28 13:00:52 2026 GMT
Not After : Jul 29 13:00:52 2026 GMT
Subject: CN=29890ed9016906c477a777e7ff532472a7b38931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:c5:71:a1:fe:52:77:25:ab:43:66:ce:3d:
9b:67:85:1b:37:18:f9:b4:94:68:d0:83:98:a7:1f:
cc:1a:35:03:71:a5:3e:58:73:26:7f:8a:26:fd:60:
92:91:a6:13:ac:30:8d:15:95:76:03:74:ab:1d:34:
c6:f1:7e:05:89:94:1f:e6:15:65:20:2d:b2:e7:d6:
34:d1:88:b9:6d:85:41:1f:8b:20:db:d2:02:3d:d9:
55:c3:1d:2c:dc:92:19:6b:95:59:66:55:77:ae:f3:
52:08:71:18:cb:82:83:f2:8d:11:a7:d9:b8:c6:1f:
03:99:61:ed:91:a3:8b:d2:e7:ec:48:0b:f3:61:0d:
c6:de:ef:32:9d:d6:48:20:ab:0d:22:ec:c1:cf:c8:
b9:9b:94:9e:45:f0:c3:e8:ad:c7:ef:90:a0:27:60:
e2:6c:ff:f5:0a:69:3c:50:30:3a:b5:b9:08:92:01:
01:15:b2:3e:d3:2a:e8:79:36:fd:71:a5:44:ba:db:
11:5c:fd:53:a9:b2:2f:30:fd:e1:1f:cb:a1:51:27:
af:3a:92:13:1c:d5:53:3f:4d:c8:da:6b:89:8f:11:
a2:ee:a2:27:d1:6e:f8:a5:8f:af:20:83:12:3a:15:
9c:e6:48:7b:93:ce:00:c0:79:72:56:6a:91:84:79:
2f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:89:0E:D9:01:69:06:C4:77:A7:77:E7:FF:53:24:72:A7:B3:89:31
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2e:5d:23:31:40:43:fa:da:bc:dd:2c:1c:0f:f3:d6:08:fb:
06:0f:96:13:18:c0:4d:0f:35:a2:10:46:a0:d3:71:ab:93:0b:
aa:51:bb:d4:cd:a3:85:bd:a8:6b:34:e2:a1:be:66:58:17:e8:
55:4f:f0:b5:d2:54:6b:ff:f3:f0:d9:f7:5c:16:e4:fd:68:98:
f3:63:a6:37:80:69:7f:21:65:c9:87:8e:ab:74:fc:b2:21:9e:
36:5e:dd:e5:dd:27:d6:7b:38:6d:5b:39:07:e2:32:65:6c:08:
7f:62:0c:f1:6c:33:7c:f4:1d:30:1f:4e:de:fc:16:62:25:b5:
2e:50:ab:e6:c3:ac:c6:57:bb:10:82:60:24:3f:e5:dc:8a:0b:
9b:6d:7d:c0:f1:48:3f:ad:5a:23:d5:79:eb:4b:99:11:88:fd:
85:d2:11:c1:05:49:d7:cb:d3:8e:9d:4a:82:98:67:0a:57:54:
f7:c5:9c:99:af:21:21:94:c2:e3:9e:39:bd:e2:49:8a:58:50:
b5:57:94:98:32:ba:f8:af:c8:46:9b:7c:95:a6:1c:71:e9:46:
7d:e6:fa:4c:0b:7a:3d:5c:d2:e7:c0:aa:6a:2d:0e:b4:10:2e:
77:7e:b1:5b:53:ea:b2:96:28:c8:3e:85:b0:cc:29:26:11:12:
9b:ec:3f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:33:12 2026 by rpki-client