Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json)
Hash identifier: htus512p7ZiaA8ymCzC4qdvWqlI/ah43n2Yh1y5zZJk=
Subject key identifier: 80:FB:D4:4E:68:EB:8C:A9:68:F5:54:BA:3B:AC:76:EC:B7:71:9A:82
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 01A0C28D29340D48FF770CE85EE1607D70A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
Manifest number: 081A
Signing time: Mon 21 Sep 2026 06:00:26 +0000
Manifest this update: Mon 21 Sep 2026 06:00:26 +0000
Manifest next update: Tue 22 Sep 2026 06:00:26 +0000
Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: Iae1jGuyiNtw3UKVKbXodi97pDsQkpTYniAch5Ni0H8=)
2: A1S7zaMW03197K0PFUGmkuS6qHc.roa (hash: P0RbhOWnYpuPcWIDbY8PS2tuKH+AkCqge3UmcT8QPYg=)
3: HcWgx2MiMP_xtGT9IucxolgQeIY.roa (hash: rcEUsMaoUm7Xd2I+QLC1mGGbjcwOScogc6eZLbEfymQ=)
4: iTT1Go78g5owZfyu9ktxbP5JHAk.roa (hash: Qjj93lcgSQbKTpiPRrMG7KIy0uRqncRntlD8V9IPje4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:29:34:0d:48:ff:77:0c:e8:5e:e1:60:7d:70:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Sep 21 06:00:26 2026 GMT
Not After : Sep 22 06:00:26 2026 GMT
Subject: CN=80fbd44e68eb8ca968f554ba3bac76ecb7719a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2a:5d:0e:e2:e6:d2:b5:89:4f:25:59:f2:7b:
ad:9a:8f:3a:04:59:53:80:98:a3:6c:68:ce:35:1f:
94:a3:41:56:3f:a4:d2:a1:a8:c6:6c:0c:ac:28:22:
db:cc:81:de:fb:41:63:8c:7a:87:df:29:ea:cc:f1:
cc:c4:c7:b6:42:a4:68:aa:b3:9f:9c:5c:25:df:5c:
8f:b9:bf:03:69:3b:cf:f6:f1:9e:43:06:b1:76:93:
e0:85:c1:53:83:e6:48:bd:ee:50:ae:4b:23:93:3d:
c5:6e:67:31:5b:40:d2:04:9e:c7:0f:19:52:ed:82:
18:9e:f5:20:20:9d:58:f6:d7:ca:9f:39:fe:99:79:
45:81:09:0b:f4:a8:51:13:13:a8:65:ae:94:28:9c:
d9:b9:2e:69:d2:16:ad:cb:13:d4:3d:f1:b3:f1:66:
d8:95:10:a8:ce:f5:d1:09:ed:3e:7d:da:f6:8b:42:
62:7f:1e:9e:ae:c6:a2:04:0c:96:bd:5c:97:e7:f4:
04:5e:68:c8:1d:ee:4c:f0:48:27:08:85:73:ac:04:
fa:22:b8:26:29:bf:d0:3e:8d:a8:9b:fd:48:80:01:
f7:3d:8a:95:b7:2d:6d:a5:e0:ed:b2:47:b9:30:85:
99:9f:e8:6e:30:92:48:23:4a:fc:9d:02:37:5b:7b:
c0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FB:D4:4E:68:EB:8C:A9:68:F5:54:BA:3B:AC:76:EC:B7:71:9A:82
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f5:68:e1:f1:64:62:38:59:79:98:10:6d:0d:bf:ce:bb:99:
f4:6b:88:36:1f:c0:02:42:89:ee:70:b5:ef:0a:8d:f8:ec:e9:
30:3d:3d:b0:e8:d3:60:14:15:d8:57:e2:ab:b4:95:9d:3e:3c:
a0:6f:55:d2:3a:06:22:a0:cb:8e:f4:6d:5c:00:7f:42:47:a0:
e4:6c:7d:cd:9a:27:6e:37:20:4e:2a:67:26:66:7a:5a:d0:4f:
cd:aa:7f:23:27:c6:a1:1c:86:5a:db:96:61:69:8b:20:2e:5f:
ea:6c:fc:a6:74:63:85:23:8a:45:76:42:01:95:82:60:10:d4:
2f:a6:a2:61:3a:3c:36:62:66:94:d2:0b:ac:ba:27:0a:98:90:
94:9e:cc:f2:aa:6f:c9:9b:4a:b5:8e:4e:cb:ae:ed:27:a7:f3:
90:27:97:3b:de:52:7d:a1:c4:9b:75:d5:eb:b5:f1:b4:1a:34:
fc:a1:9c:53:03:5b:3c:87:0e:fb:3c:e4:e4:85:bf:2f:a6:5d:
2b:f3:ea:f2:2d:bf:72:5d:17:0b:9d:ae:23:e9:7a:88:f5:b3:
32:fa:e0:54:2a:65:dc:7c:85:a1:af:08:be:63:83:35:c5:0b:
65:2e:eb:51:59:52:e0:71:55:8a:cf:dc:f5:85:5d:9d:9a:0e:
dc:7d:ca:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:28:54 2026 by rpki-client