Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: RVywT35Gs/i2eo5q6QXEyJPewpLiHHbLlYpY9dFesrQ=
Subject key identifier: AE:71:29:F9:8B:78:8E:02:B1:BB:BF:52:68:35:AF:16:4E:D8:55:F0
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 019D99997F4AB5EE2DCD9E03EDD34EE6821C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 0F9A
Signing time: Fri 17 Apr 2026 04:01:06 +0000
Manifest this update: Fri 17 Apr 2026 04:01:06 +0000
Manifest next update: Sat 18 Apr 2026 04:01:06 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: bTXPUh2M5gZMm4jDtLuizCJsZkK+SJIWjUnA1zKHVwM=)
2: kzwxKQfCF3xX4swU7-jOz9Zkfzs.roa (hash: fIncvrx8pskfVUirWFyGF8SlrzYaWbNWYQWFbpi3LtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:7f:4a:b5:ee:2d:cd:9e:03:ed:d3:4e:e6:82:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Apr 17 04:01:06 2026 GMT
Not After : Apr 18 04:01:06 2026 GMT
Subject: CN=ae7129f98b788e02b1bbbf526835af164ed855f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:ae:67:b3:56:40:f6:5f:f2:bf:2e:75:28:
d4:c3:dd:9f:b1:42:e9:e2:41:84:9d:b9:c3:58:6f:
55:00:d9:c8:f4:c5:14:17:1c:36:89:cd:2d:aa:7b:
b6:2b:37:5f:df:cd:93:53:f8:7d:dc:c9:4a:02:49:
07:4d:f2:c9:da:42:77:28:f4:bc:ed:04:59:3c:df:
8c:fc:60:df:6c:bd:ea:a3:91:8a:3f:71:81:13:95:
42:0a:5c:07:cb:33:08:66:f3:47:75:9d:b7:39:92:
43:62:4f:4f:94:c2:c5:d8:fc:1c:69:e1:7b:ab:39:
60:3f:6d:86:84:89:0a:59:cb:ce:4a:43:d2:12:be:
97:41:e6:c3:32:60:e8:1d:b3:0d:27:e0:b0:d4:af:
cb:d3:fb:66:5b:1d:82:e2:75:00:10:d5:f3:d2:48:
1b:57:0c:19:d6:d9:64:b6:44:85:5b:c3:ea:d5:cc:
4c:60:63:5e:33:f0:7a:49:a0:fa:a4:6d:ad:09:1e:
ed:dc:0a:34:62:03:d8:97:04:d8:32:a6:89:ce:82:
ba:05:78:f0:30:6f:b7:e4:0d:1d:16:78:bb:54:0d:
bb:6b:7f:52:5b:88:62:10:43:17:84:9d:17:98:25:
59:74:ec:21:ef:1c:c2:f8:ef:8b:31:a3:5d:2d:1a:
f9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:71:29:F9:8B:78:8E:02:B1:BB:BF:52:68:35:AF:16:4E:D8:55:F0
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:0e:61:08:fd:94:18:53:c3:74:2e:36:12:72:23:12:80:bd:
52:c2:ac:4b:20:cb:c3:08:af:f6:54:6f:a4:c6:88:df:90:47:
8c:a5:bc:72:ba:29:33:cf:ac:07:15:cd:5d:1c:e2:10:f4:1b:
a6:a7:de:3a:e1:a3:ed:df:f8:9e:f7:4a:94:b7:44:f6:73:88:
b9:23:be:d5:bf:74:f8:cf:9a:09:9e:22:de:ad:d3:35:5d:39:
ee:a0:9e:a3:b1:95:66:65:cb:df:91:df:bf:ab:36:46:8c:f3:
ac:a2:1b:34:cf:ae:9b:eb:bb:26:fc:c2:28:9f:cc:82:0a:0a:
4d:6b:f9:8c:18:8d:3a:20:59:f0:fc:96:e7:ba:16:24:5a:37:
cd:bc:14:7e:10:59:f0:ae:d5:1a:c3:99:e7:a5:36:19:b9:82:
57:83:ba:82:bf:60:bc:10:23:84:f6:5b:fb:d7:ab:94:3a:df:
c0:e6:1e:4d:07:04:69:3f:45:04:da:34:aa:e2:f0:21:37:32:
b0:77:83:87:39:06:c2:90:63:2a:03:75:81:2f:f6:b4:8c:38:
d8:bd:8a:61:08:c2:ea:90:d9:81:43:55:91:ad:65:44:9b:17:
9c:62:2e:11:e3:11:f9:6b:f7:3a:69:d1:dc:f3:4f:51:ea:66:
7a:63:28:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:52:34 2026 by rpki-client