Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
File: 1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json)
Hash identifier: IjHXIDkH9+NpVUF1C7sIxQMNjNyCTdUj/e03iCIuzDw=
Subject key identifier: 0C:78:28:85:DA:AA:B6:72:EC:FB:5C:1F:22:FF:59:6A:BD:51:CF:0E
Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
Certificate issuer: /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Certificate serial: 019EC0DABCD117D1CBFBA892761AFCE6418F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
Manifest number: 0E17
Signing time: Sat 13 Jun 2026 12:00:21 +0000
Manifest this update: Sat 13 Jun 2026 12:00:21 +0000
Manifest next update: Sun 14 Jun 2026 12:00:21 +0000
Files and hashes: 1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: DecyntO8dEWX+IAsbmouGIHc0irkO/aOXGpSfuzVnmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:bc:d1:17:d1:cb:fb:a8:92:76:1a:fc:e6:41:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Validity
Not Before: Jun 13 12:00:21 2026 GMT
Not After : Jun 14 12:00:21 2026 GMT
Subject: CN=0c782885daaab672ecfb5c1f22ff596abd51cf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:2e:1e:ab:58:5d:38:28:33:ba:fd:e5:42:
0c:cb:05:4d:4e:47:be:5b:ec:b8:75:df:2a:10:65:
27:aa:1b:7a:5a:90:ab:ed:94:fd:f6:75:19:5e:cb:
8c:93:d9:89:4a:b9:57:5e:d7:00:3d:31:46:2b:fa:
d2:71:66:0e:d2:57:d3:56:a9:8e:60:10:b9:bd:95:
7f:85:5c:be:5b:e5:fd:09:2b:1e:b5:92:7b:db:6d:
5d:99:a0:85:36:a2:1e:21:66:49:37:f9:fa:43:6a:
87:15:ae:ae:66:e9:43:2e:98:2c:0f:d1:20:e6:96:
d7:a1:4d:36:bb:4d:e3:ce:80:29:05:c7:79:ce:88:
66:0d:b6:a4:72:6e:a4:7f:b9:54:2d:a1:6d:07:1e:
72:98:66:8c:11:d6:45:cd:a9:1e:b8:9a:75:8e:a7:
9a:0c:a6:23:7b:03:ba:28:5f:41:c4:a7:1d:1e:09:
08:fb:a4:11:e1:a4:dd:3c:80:46:5b:ce:23:77:97:
dc:43:8f:69:9c:be:ad:86:3c:ef:4c:ba:fd:68:21:
6b:da:24:cc:e6:90:b2:d3:f4:7e:8f:f9:e8:13:c7:
d4:dd:cb:ac:fe:f9:65:40:d4:fa:25:33:6c:58:76:
af:b1:9c:09:1c:1d:36:f7:ff:06:d7:a0:97:86:9b:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:78:28:85:DA:AA:B6:72:EC:FB:5C:1F:22:FF:59:6A:BD:51:CF:0E
X509v3 Authority Key Identifier:
keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:2e:54:66:88:02:c3:cb:64:59:20:67:db:4f:c3:23:5c:c6:
3e:34:34:62:75:1f:4c:0f:e5:bc:c2:a7:c2:72:ff:7c:b0:a8:
50:f5:53:36:c0:14:8f:5f:e1:28:08:8f:15:f2:e9:de:20:bb:
0e:2a:53:12:d5:e0:4e:a8:86:69:d4:87:c7:1e:29:a7:d6:7e:
00:ae:2c:7d:b0:33:28:4e:c9:3a:f0:06:57:5f:71:8d:9f:0e:
dc:23:08:f6:44:7e:d4:5a:0f:ea:bf:f1:83:07:dd:ca:8a:fd:
f7:ce:7b:3f:0c:11:a8:55:16:b8:60:ae:e9:9e:83:86:6b:54:
3f:59:89:ff:2d:81:77:24:29:67:72:ff:e1:df:66:d0:31:8c:
e3:ad:26:54:70:f4:0e:d8:c0:54:9f:15:73:2d:a7:a2:05:13:
a3:58:bb:13:66:ab:94:ca:b0:59:8b:51:69:ef:16:b0:2d:ed:
8d:e9:94:9b:8e:03:1b:39:f9:eb:ea:66:8e:44:14:ad:d4:34:
6a:bb:4a:fd:10:1e:8d:99:22:f2:70:e0:46:28:ed:c6:5f:82:
2e:8c:9b:f3:6d:91:4b:65:2e:22:93:98:d5:08:d9:a1:90:51:
af:33:76:83:73:a0:57:8a:51:d5:76:95:5a:0d:40:03:ca:e2:
6b:14:07:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:07:59 2026 by rpki-client