
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: 9gKrbUbJe3YlVwyMzhg4/uR5h26TuleCf7Utcq1pb/E=
Subject key identifier: 76:F8:0D:7F:75:E7:A7:47:CA:B7:7C:CB:5E:5F:8D:81:4F:6D:4C:66
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 01A0C0D5DB82752C55D3A648D1F2DD3483B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 113C
Signing time: Sun 20 Sep 2026 22:00:35 +0000
Manifest this update: Sun 20 Sep 2026 22:00:35 +0000
Manifest next update: Mon 21 Sep 2026 22:00:35 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: JmjbqKXz+zmo3OpXo3UnkJGp+DIwjbBcsiNakbSO334=)
2: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (hash: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 22:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:d5:db:82:75:2c:55:d3:a6:48:d1:f2:dd:34:83:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Sep 20 22:00:35 2026 GMT
Not After : Sep 21 22:00:35 2026 GMT
Subject: CN=76f80d7f75e7a747cab77ccb5e5f8d814f6d4c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:c2:6a:72:75:d3:08:75:a1:75:31:63:33:
3b:af:08:8c:7f:76:98:6b:c4:19:e2:aa:77:eb:98:
3a:dd:25:85:d2:59:0e:5e:23:5b:33:9c:3c:4c:be:
0f:3d:67:2d:19:ab:fd:17:70:7d:1f:87:64:e0:bd:
b5:4b:ec:6f:d7:00:3f:3a:0f:ac:5a:82:36:a8:5b:
6b:23:d3:ff:c5:04:f9:4b:95:a7:c3:ea:9e:fa:e1:
84:b5:5c:fb:e1:38:32:11:8e:d3:52:fa:ea:06:a4:
11:96:1c:da:66:e8:49:9a:a5:40:77:45:cd:45:08:
a2:f8:49:77:16:1a:92:6b:61:66:18:c6:75:58:1e:
7c:0e:88:34:fd:35:07:c4:55:97:63:40:8b:a1:9d:
f1:d0:a5:59:2d:2e:87:e5:21:f4:87:e2:43:cf:e2:
c8:22:8d:d4:39:bb:2c:30:be:8d:02:45:3a:18:b9:
c6:10:ee:80:97:a6:6c:ee:0e:49:08:b5:06:eb:52:
02:7c:c6:08:b3:ba:ff:66:c5:89:ee:55:4d:19:c2:
3c:2a:c4:b1:82:21:08:db:59:02:16:fd:2a:65:c1:
4b:e4:fd:83:ca:4b:d7:5c:4a:b5:3b:38:22:ea:83:
ff:3d:1b:a2:72:dd:58:70:84:15:c7:2d:7f:14:68:
7b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F8:0D:7F:75:E7:A7:47:CA:B7:7C:CB:5E:5F:8D:81:4F:6D:4C:66
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c5:80:34:44:78:a5:62:a6:81:70:03:19:aa:9f:51:fe:6d:
86:19:8c:75:5a:d6:69:e3:4a:c9:69:34:36:42:a3:e1:e7:97:
ce:06:c5:e8:7f:a4:63:b2:95:02:0e:7c:88:eb:6f:9a:0f:e8:
59:b2:87:35:76:3d:c8:ae:e9:88:de:54:66:d5:33:2d:0b:65:
fe:90:2f:f4:88:88:19:78:08:eb:b0:ad:a0:36:18:83:91:6d:
fb:be:eb:ca:b3:2a:09:af:7e:c2:b6:1f:bb:48:e3:45:85:c1:
1a:06:c0:55:62:71:22:70:8e:bc:d6:ac:9d:10:af:7f:8d:00:
1f:c2:65:bf:1d:7c:5b:e7:53:41:62:8a:7f:ec:98:28:4e:af:
41:5b:e3:4e:9d:01:a7:45:c6:2c:90:97:b3:33:dd:8b:1b:6f:
96:cb:0c:3f:10:91:1e:99:91:a4:4e:4f:83:b4:76:21:df:d9:
26:9d:0f:a3:71:16:df:79:cf:96:a9:2a:d1:b8:77:f9:17:5c:
e4:60:b1:f1:51:01:01:a5:b3:9d:b3:51:2e:65:16:84:21:97:
de:42:68:dc:6a:c6:9b:97:81:9f:4c:db:ea:ef:cb:36:1c:34:
35:5c:59:54:2e:f4:c7:a4:50:e2:ad:59:41:0a:f0:c8:34:cb:
b5:75:95:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:30:55 2026 by rpki-client