Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json)
Hash identifier: n2slBr9dp1NnqH51JpahJN42fwRN9LN6piNa9vKqWz0=
Subject key identifier: E3:8D:19:7A:58:0B:3F:05:BC:FB:17:03:2F:F0:1A:1B:00:FA:40:97
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 019EBEED60DEFD36D4C8965F8FF065D9E50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
Manifest number: 070F
Signing time: Sat 13 Jun 2026 03:01:28 +0000
Manifest this update: Sat 13 Jun 2026 03:01:28 +0000
Manifest next update: Sun 14 Jun 2026 03:01:28 +0000
Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: JxzOS2hhqJ9CXll44d86pVUESazUbI67wwhUf2iidWA=)
2: A1S7zaMW03197K0PFUGmkuS6qHc.roa (hash: P0RbhOWnYpuPcWIDbY8PS2tuKH+AkCqge3UmcT8QPYg=)
3: HcWgx2MiMP_xtGT9IucxolgQeIY.roa (hash: rcEUsMaoUm7Xd2I+QLC1mGGbjcwOScogc6eZLbEfymQ=)
4: iTT1Go78g5owZfyu9ktxbP5JHAk.roa (hash: Qjj93lcgSQbKTpiPRrMG7KIy0uRqncRntlD8V9IPje4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:60:de:fd:36:d4:c8:96:5f:8f:f0:65:d9:e5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Jun 13 03:01:28 2026 GMT
Not After : Jun 14 03:01:28 2026 GMT
Subject: CN=e38d197a580b3f05bcfb17032ff01a1b00fa4097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:73:01:b5:bc:b3:a1:e1:f5:a7:39:df:b0:ed:
34:d7:df:40:e0:df:05:3d:bf:77:63:c8:fb:57:96:
fe:3a:8d:cb:fe:03:00:c2:3e:65:b2:d1:19:c3:d5:
4f:13:0d:ac:62:83:31:54:2b:2c:7f:56:80:eb:f0:
52:4a:f9:09:fd:7b:b4:05:4d:57:47:ef:0c:20:c1:
56:32:f3:e7:48:6f:bf:63:3d:f5:2d:e8:03:7d:ac:
7b:e9:f5:e0:e7:d2:42:b9:00:84:fd:88:c4:f3:65:
bf:99:ed:01:b2:99:42:88:14:27:dd:74:23:39:8a:
8e:06:fd:9c:3d:2d:68:16:1f:7c:8c:6e:78:27:42:
0d:14:a1:08:af:6f:a9:0d:5d:28:90:0c:26:b3:d9:
92:85:66:7a:cd:6a:d4:fb:42:86:d0:fc:70:25:20:
4b:f1:44:5a:54:fd:e3:a6:6f:cf:6d:45:ac:bd:a3:
8b:7c:c3:58:bd:ae:8a:51:77:7c:92:79:7a:46:16:
ce:be:7a:3d:70:71:14:2d:de:bf:56:6b:ae:0e:36:
b4:ad:85:d3:84:47:4b:66:7e:bb:df:53:45:0f:f2:
25:97:ac:14:a4:92:af:f6:43:2a:fc:fb:a8:69:15:
ff:fc:da:56:8e:09:79:c2:4c:fe:70:43:72:9b:ab:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8D:19:7A:58:0B:3F:05:BC:FB:17:03:2F:F0:1A:1B:00:FA:40:97
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:fa:d5:75:b2:76:c1:36:b6:2f:6e:07:16:fc:41:71:e8:c4:
b2:b9:c1:e7:6e:3e:b7:3a:9d:41:00:5c:55:d8:75:3b:d4:92:
53:48:e4:d1:3c:3c:a6:23:b2:4b:3a:1f:ff:63:77:d1:ca:3a:
0e:5b:ad:e5:69:94:38:21:4a:93:90:6a:05:55:37:ee:bf:57:
ae:fb:c3:8a:2b:1f:9d:ab:03:af:ac:57:6f:9b:03:fe:02:26:
f5:33:73:87:41:57:53:53:38:6a:6a:42:27:0a:89:13:0e:55:
06:b8:d5:b0:c8:19:79:98:61:99:69:ab:e8:d1:07:40:3f:c6:
3f:f3:a3:06:31:60:82:5b:37:d9:18:24:6a:d3:a6:95:21:e8:
91:56:9e:d4:f2:2c:13:fa:7d:19:45:51:9b:67:43:8c:d7:85:
bb:b1:5e:b3:2d:93:e3:ab:66:20:9c:db:8c:77:1d:b1:a6:ae:
7c:d5:97:41:2d:d7:f5:d9:b4:29:c4:3e:aa:60:bf:98:b2:70:
d2:c2:12:e3:ff:c8:34:5a:a7:ae:89:6b:57:b5:6d:8a:37:35:
3c:7d:9d:f0:fa:47:dd:58:3e:1e:b2:86:cc:6a:5f:3f:b0:4b:
51:51:93:15:32:20:76:eb:e6:37:49:4c:a4:27:89:73:b4:55:
82:32:11:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:32:29 2026 by rpki-client