Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
File: 1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json)
Hash identifier: Rd6lucpfP5PiGVxT4F4iHn7aFeJsOyFfNwxIBD657UY=
Subject key identifier: 3C:F2:BF:1E:FF:B5:A6:0A:85:B5:3C:26:5F:2A:6B:F6:9F:8A:92:7D
Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
Certificate issuer: /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Certificate serial: 01A0C47C636ABCE0B95EDABF93DB2806CEB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
Manifest number: 0F22
Signing time: Mon 21 Sep 2026 15:01:21 +0000
Manifest this update: Mon 21 Sep 2026 15:01:21 +0000
Manifest next update: Tue 22 Sep 2026 15:01:21 +0000
Files and hashes: 1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: 8cwzCGsIMVILCRs7STQJdLRvuCtfPQET7aYsqDJpwxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:63:6a:bc:e0:b9:5e:da:bf:93:db:28:06:ce:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Validity
Not Before: Sep 21 15:01:21 2026 GMT
Not After : Sep 22 15:01:21 2026 GMT
Subject: CN=3cf2bf1effb5a60a85b53c265f2a6bf69f8a927d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:74:64:59:2f:d7:cf:5f:e3:29:1f:40:ed:
5c:bb:c7:14:aa:cf:b7:3e:a3:ca:bd:60:2c:5d:f3:
f9:0f:f1:ec:e9:7f:98:4b:a9:f5:1f:14:3e:ad:a4:
96:1f:70:c3:cf:ca:e9:1f:4a:39:b8:28:5d:2f:10:
07:36:b1:44:25:cf:6e:d3:2e:71:cd:88:6e:78:18:
67:55:60:a8:e0:87:e0:33:1e:af:42:c4:ca:2b:db:
43:50:f3:ac:b3:9a:7a:3c:29:64:3b:4c:11:66:5f:
4b:71:11:b8:4e:f4:25:e6:32:44:62:61:71:df:40:
3e:dd:7d:f0:16:f4:3d:99:43:c0:d4:3f:23:c3:b1:
72:87:ed:6c:c5:e3:ef:ef:1d:9f:4f:a6:31:24:e4:
14:60:62:a3:bd:c6:42:50:82:59:95:38:38:25:af:
8d:b4:1d:1b:c5:18:05:6e:f2:e2:7a:80:ae:92:34:
2d:82:06:16:78:23:27:10:46:9b:68:5c:71:a3:48:
12:e7:76:2f:09:8b:43:c0:35:e4:bf:0f:3d:b7:e2:
dc:1b:ab:c0:18:b2:a3:32:46:ce:0a:5d:13:75:e1:
af:fd:aa:f8:e3:50:f3:1b:91:41:a7:8c:f1:b2:26:
e0:cf:8b:b6:35:f7:d5:2b:64:9d:69:50:c1:5d:bd:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F2:BF:1E:FF:B5:A6:0A:85:B5:3C:26:5F:2A:6B:F6:9F:8A:92:7D
X509v3 Authority Key Identifier:
keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:e1:11:3a:91:4f:30:83:4c:36:a4:43:fb:92:4e:b3:7d:c1:
e0:ee:a2:23:4f:0b:02:e3:a2:cc:10:14:01:45:17:eb:af:77:
69:43:55:eb:a8:2b:16:be:6f:b7:28:00:5e:74:68:26:12:06:
cb:a2:50:ca:6a:b6:33:f6:c5:f5:c6:4f:f3:90:e0:ba:90:f8:
e0:31:34:7a:79:7d:ec:48:69:50:dd:48:92:6c:a8:71:56:e6:
2b:87:f6:41:5d:a9:da:fa:10:d3:4b:06:c7:7d:71:5a:5c:c1:
7f:ff:a5:6f:75:3a:8b:65:bc:43:83:c2:1a:57:c6:bb:ed:49:
0e:f3:84:ac:f6:47:26:2a:07:82:e8:d3:d4:0a:70:c8:e9:7a:
16:55:73:9f:b6:46:16:03:9f:d5:00:24:89:a3:91:60:b4:f5:
51:53:12:43:57:b0:fa:6a:a3:82:f6:d4:ba:9e:ad:93:ca:d0:
77:52:7c:6b:51:ca:ca:26:68:0d:6d:43:54:58:1b:10:7f:6f:
e2:d5:4e:dd:0a:ab:58:29:1a:71:fd:ff:30:4b:0a:2b:40:e1:
30:95:ed:b9:6c:ba:5b:49:64:af:11:74:8a:df:ba:04:70:b3:
76:9a:a1:85:ce:98:0b:df:03:ca:22:c9:f8:b3:53:92:74:38:
da:f6:df:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:20:05 2026 by rpki-client