Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: FSbv1amtElcscnz6EqSZXrR5knJYs60/UzOdmB0No1I=
Subject key identifier: 69:F9:D3:6F:8A:DA:9D:57:F2:3D:F5:C7:24:25:18:46:C6:71:D9:81
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 019CAC0FF4DB2C36E819AE6C3B240D9523B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 0F1F
Signing time: Mon 02 Mar 2026 01:00:52 +0000
Manifest this update: Mon 02 Mar 2026 01:00:52 +0000
Manifest next update: Tue 03 Mar 2026 01:00:52 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: bh8QpKTcZYu8oqeb5UPfai0lmbAo/OZmGYhOTsp2Mw8=)
2: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (hash: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f4:db:2c:36:e8:19:ae:6c:3b:24:0d:95:23:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Mar 2 01:00:52 2026 GMT
Not After : Mar 3 01:00:52 2026 GMT
Subject: CN=69f9d36f8ada9d57f23df5c724251846c671d981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0f:3e:d5:43:ab:6a:7e:f8:91:b0:07:9d:c5:
a8:9a:07:79:34:e6:f1:61:9c:0b:af:9b:01:2f:3c:
57:89:c6:77:16:18:e4:d8:6d:64:60:54:d1:82:3c:
e2:e4:0d:aa:99:6e:3a:a8:70:5d:12:c6:20:54:72:
d5:d0:67:00:73:c7:3e:37:f0:a8:1e:1e:8d:ec:cc:
1b:d1:36:33:93:cd:cf:e8:d8:c3:59:14:24:9d:3f:
70:9e:1e:56:81:3d:2f:e0:12:da:6f:d8:bc:d9:bc:
3a:4f:55:d4:43:79:2e:89:df:3b:7a:22:ab:2a:62:
4a:eb:6b:93:e0:70:44:66:12:94:6d:7f:28:9d:7f:
fe:6d:d9:36:cf:ed:a4:0d:06:8f:e2:97:02:4a:e7:
d7:a5:d7:3f:94:7c:2a:83:4a:3c:fa:8c:d7:a7:87:
4d:d5:0b:4e:a1:52:82:bb:51:06:c4:ef:bc:65:ac:
e6:99:fe:ee:c3:0e:78:e6:49:87:7b:bb:5b:d7:50:
70:1e:b3:67:30:de:94:a6:61:d5:d7:d5:f7:0c:73:
2e:f9:fb:49:09:df:ca:7d:9a:60:95:c3:6b:8e:6a:
da:26:b1:27:3d:02:0c:87:2c:c7:fc:82:6c:f1:02:
f6:6d:5e:37:6a:b4:2d:ce:aa:11:7e:ae:86:0c:9f:
7f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F9:D3:6F:8A:DA:9D:57:F2:3D:F5:C7:24:25:18:46:C6:71:D9:81
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8e:49:65:c4:ef:2b:10:c0:95:18:c2:92:68:65:69:2c:46:
47:1f:21:e6:32:02:98:c3:97:89:92:f7:d0:8e:9d:10:95:b2:
66:af:2d:eb:4c:c3:2e:0a:3b:36:20:9d:dd:20:f8:15:6a:2c:
bc:b0:31:2e:f5:c2:98:00:3a:55:9d:79:41:3d:b7:35:7c:eb:
7d:4e:d1:3e:d2:7d:92:ab:c4:03:eb:37:91:fe:5d:19:1d:20:
c3:1e:47:08:48:8d:a9:cb:df:77:b0:5a:0d:1c:2f:ba:3f:c2:
28:62:79:58:96:d0:01:e0:c2:8e:cc:60:c3:3e:c7:42:54:6d:
74:b4:a1:2e:27:17:32:10:19:8a:18:cb:ea:d8:1b:76:25:98:
26:e5:0d:11:66:90:0a:d5:f5:80:9a:72:b8:bc:63:55:78:f7:
40:c8:5d:6a:8b:99:6f:29:19:f7:f0:84:01:79:e6:36:be:68:
98:d1:c4:22:8b:8c:f8:6c:cb:3b:e2:23:99:06:a4:9d:e9:5e:
ea:2b:91:df:2f:76:02:64:53:f7:4a:ae:3d:c9:43:3c:de:57:
b4:e3:3a:a7:74:6f:c6:00:22:e8:14:2f:f8:96:1f:00:8d:f9:
13:44:28:49:bc:bc:b4:66:e0:73:5c:d5:5e:92:7a:7e:29:fa:
36:b7:b5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:59 2026 by rpki-client