Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
File: 1onLcYkcbZS9nm8U8W5-N8LHKL8.mft (raw, json)
Hash identifier: jTcXgyvqSv86OBOI0V5j4uo2H5//WJnhqjHtsgb0ns4=
Subject key identifier: 01:D1:E4:6B:53:43:EA:28:33:AB:06:CE:24:3D:CE:A7:7C:8F:AC:34
Authority key identifier: D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
Certificate issuer: /CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Certificate serial: 019D996236874E90E2A3ACB1C427F846B14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
Manifest number: 0677
Signing time: Fri 17 Apr 2026 03:00:43 +0000
Manifest this update: Fri 17 Apr 2026 03:00:43 +0000
Manifest next update: Sat 18 Apr 2026 03:00:43 +0000
Files and hashes: 1: 1onLcYkcbZS9nm8U8W5-N8LHKL8.crl (hash: djSmn73qW3cXuGVE19HGc6Wa0+hFfO7ZQ5k5FicyspA=)
2: A1S7zaMW03197K0PFUGmkuS6qHc.roa (hash: P0RbhOWnYpuPcWIDbY8PS2tuKH+AkCqge3UmcT8QPYg=)
3: HcWgx2MiMP_xtGT9IucxolgQeIY.roa (hash: rcEUsMaoUm7Xd2I+QLC1mGGbjcwOScogc6eZLbEfymQ=)
4: iTT1Go78g5owZfyu9ktxbP5JHAk.roa (hash: Qjj93lcgSQbKTpiPRrMG7KIy0uRqncRntlD8V9IPje4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:36:87:4e:90:e2:a3:ac:b1:c4:27:f8:46:b1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d689cb71891c6d94bd9e6f14f16e7e37c2c728bf
Validity
Not Before: Apr 17 03:00:43 2026 GMT
Not After : Apr 18 03:00:43 2026 GMT
Subject: CN=01d1e46b5343ea2833ab06ce243dcea77c8fac34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b8:0e:63:4b:0b:96:cc:2d:13:fc:45:6a:ca:
ae:09:a7:0b:d6:ea:9b:db:5a:66:64:7e:cf:f8:f8:
22:15:e2:48:a7:88:a3:f5:28:b3:20:b2:55:94:cd:
25:9f:9b:78:fc:df:e2:f4:7f:12:f2:e9:45:9e:39:
a0:25:9d:6c:6d:d0:7c:bb:30:11:ca:8d:2c:a3:ea:
4e:b2:23:81:d8:15:87:cd:f9:bc:13:e0:ba:14:c3:
ff:80:e0:61:a9:94:e0:aa:7b:d6:fc:e4:6a:7d:76:
26:0c:38:78:83:a6:bf:86:18:4f:26:66:82:d2:8e:
59:a4:95:1f:f9:bc:73:6e:be:ec:dd:61:14:35:dc:
c8:f8:02:88:00:66:70:7c:4d:81:ba:94:73:77:e1:
e2:a0:09:60:28:60:75:48:b7:f7:95:48:df:d0:9e:
4c:9a:42:16:4c:64:a4:72:03:88:56:87:2d:b3:b2:
ca:fa:cc:27:f8:28:46:e4:e0:7d:52:03:fa:8f:63:
85:b7:04:b9:38:96:15:a5:59:6f:5b:5a:44:7b:35:
c7:d6:1a:ef:31:ef:6d:39:3c:f3:b2:bb:19:42:e3:
9b:fa:14:7f:11:71:2b:5c:08:e5:a2:a3:d8:c3:b9:
4d:f6:2a:2b:02:7d:d0:fa:01:1d:8b:7e:3d:9c:b1:
0e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D1:E4:6B:53:43:EA:28:33:AB:06:CE:24:3D:CE:A7:7C:8F:AC:34
X509v3 Authority Key Identifier:
keyid:D6:89:CB:71:89:1C:6D:94:BD:9E:6F:14:F1:6E:7E:37:C2:C7:28:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1onLcYkcbZS9nm8U8W5-N8LHKL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/0df28d-924d-4b4e-94b8-824ffc6942f4/1/1onLcYkcbZS9nm8U8W5-N8LHKL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:c0:ab:ff:a8:17:b2:46:b6:8e:4a:b7:1b:e8:2f:57:7a:e7:
5d:5f:b4:81:98:64:91:aa:2d:00:56:27:68:08:14:74:62:2c:
9d:e8:0f:93:22:ba:61:5b:c9:b0:be:cc:ad:dc:36:75:7e:8c:
ec:c5:7e:0d:73:58:8e:3e:c8:9c:af:1c:5b:9d:20:9b:44:f1:
75:dc:18:4e:f5:12:bf:07:f8:47:a7:6d:86:e7:e5:0b:a8:44:
bd:22:8d:9f:99:f5:a9:a2:16:7a:54:a6:80:e2:eb:08:d0:cc:
dd:76:96:21:d5:82:5f:94:3c:ec:e1:fd:a3:42:87:83:a7:be:
60:78:c3:31:71:07:39:89:40:7a:26:ac:22:38:83:22:7a:66:
04:d3:ac:77:ee:5a:b4:86:34:fa:6e:c2:10:3f:38:58:50:92:
6c:37:89:83:16:4b:d6:b4:24:0c:da:22:4e:15:6a:7b:bf:6b:
69:5f:cb:2b:ee:5d:d7:a1:5d:99:17:19:29:13:ae:be:29:0e:
86:b6:88:dc:5c:19:4a:15:0e:01:55:3f:6c:c8:82:03:c9:97:
c0:07:52:07:27:ed:47:b9:7c:69:b8:12:e3:41:a9:06:26:ca:
21:7e:2a:2c:e8:32:15:b9:86:0b:18:31:75:6f:d0:6a:ef:0e:
34:5a:79:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:05:11 2026 by rpki-client