Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: AiseIBcBNIgpKgFFrMaLG2JYJZ+CFG9xqZpOYWjdbWA=
Subject key identifier: C6:7E:08:70:EB:05:91:3C:4E:DF:71:BE:66:A5:9B:E7:7E:F7:05:09
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 019EBD359B0F2F96B919AE4A401D3C4253F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 1031
Signing time: Fri 12 Jun 2026 19:01:07 +0000
Manifest this update: Fri 12 Jun 2026 19:01:07 +0000
Manifest next update: Sat 13 Jun 2026 19:01:07 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: HptGywZ9c632WEOyV0wVTFDzbkOi38+YYV9AgzmJ44c=)
2: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (hash: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:35:9b:0f:2f:96:b9:19:ae:4a:40:1d:3c:42:53:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Jun 12 19:01:07 2026 GMT
Not After : Jun 13 19:01:07 2026 GMT
Subject: CN=c67e0870eb05913c4edf71be66a59be77ef70509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:5a:59:f7:e0:fe:f2:f9:ef:1b:bd:a1:d6:
39:59:af:80:49:9f:bd:e4:c9:a7:d7:f0:45:c9:a4:
6f:e7:2c:96:eb:40:06:c4:ae:1b:17:82:28:67:49:
93:d2:9e:35:60:df:6f:2d:06:eb:f4:25:68:06:e5:
bd:97:1f:5b:7a:01:6f:db:51:8f:7d:7d:42:b8:fd:
3f:4f:d0:7a:ef:77:96:9a:df:0f:c3:e1:67:73:80:
08:fe:91:ac:4b:64:84:eb:70:dd:5a:08:5d:de:4d:
0b:5b:d3:a1:64:e1:4e:dc:93:7e:1b:00:76:93:9c:
1f:50:92:96:84:a7:a0:a6:fd:d7:c0:b0:62:20:ba:
bd:3f:9c:c2:e2:cd:b8:10:65:34:4a:74:18:30:66:
9e:e9:ff:ae:12:1d:5a:02:f0:65:71:bc:04:30:ca:
13:e0:fd:97:b4:08:6c:a1:13:b0:c6:e8:69:32:1d:
64:2e:f1:78:82:b7:cf:32:7e:b0:5a:5d:13:26:83:
cc:5a:fd:4c:3f:90:39:8a:1f:e5:e5:fb:25:4b:32:
1e:ae:30:ec:b6:fd:ef:96:f8:fa:53:63:02:33:2a:
92:47:8a:9d:5c:92:fb:d1:87:3b:3c:b5:c6:48:1e:
e8:a0:82:44:54:05:f0:b3:e6:c9:d9:67:f0:6a:95:
0b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:7E:08:70:EB:05:91:3C:4E:DF:71:BE:66:A5:9B:E7:7E:F7:05:09
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f1:2f:82:ac:53:03:a1:30:a4:b4:82:8e:12:ae:e7:d4:5d:
c4:61:d5:de:fd:fd:c8:fe:67:3a:01:e0:f2:e3:bd:2f:3a:4a:
b9:2e:69:9b:9e:6e:5c:70:90:2b:44:6c:9a:98:fc:eb:9d:de:
72:c3:a8:cf:e1:71:79:b8:c2:d1:06:a0:cc:ca:c7:39:58:62:
c2:41:5b:b0:e4:56:a4:03:48:d7:3c:a3:da:3b:5f:43:2f:9d:
04:64:29:fd:d8:93:cf:14:d8:4a:84:92:6a:7e:c9:96:b0:8a:
f1:cf:ee:a3:81:c6:be:47:92:ef:80:e0:fa:83:89:ed:87:5c:
2b:2d:70:06:8d:e0:0e:c9:66:ef:3f:4c:18:b2:4d:30:37:e5:
86:3a:6e:88:c2:d6:d8:83:51:12:44:a7:c9:0f:2d:28:13:56:
2e:a1:f1:d0:92:46:db:cf:3e:20:c6:79:1b:27:60:d6:a5:1e:
ed:70:c1:3d:31:07:3e:c7:04:db:67:73:d1:ed:00:4e:f8:f7:
cf:97:29:d9:d7:97:86:95:57:64:76:ff:2b:b4:6c:fa:2d:33:
48:9b:0c:ad:65:cb:de:81:77:34:c9:58:58:e8:7d:68:59:94:
18:6d:17:10:f5:ec:85:10:03:e9:80:2a:8d:9b:b2:26:13:5c:
03:f0:42:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:57 2026 by rpki-client