Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
File: 1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json)
Hash identifier: b3MsDqmtZXCQKy/j3oM4OxTY+vpepqAoZ0oYNZpzV9Y=
Subject key identifier: BC:E9:83:A5:D2:EB:52:04:CB:6B:B2:04:8F:45:DA:91:05:70:82:01
Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
Certificate issuer: /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Certificate serial: 019FAA88077B5FA3142CF2ECB5360E8C01DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
Manifest number: 0E90
Signing time: Tue 28 Jul 2026 21:01:09 +0000
Manifest this update: Tue 28 Jul 2026 21:01:09 +0000
Manifest next update: Wed 29 Jul 2026 21:01:09 +0000
Files and hashes: 1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: WZApNxDNzD7vs+YlPUUI5vcAmrU52aR2MZ1PJa1Q+kk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:88:07:7b:5f:a3:14:2c:f2:ec:b5:36:0e:8c:01:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Validity
Not Before: Jul 28 21:01:09 2026 GMT
Not After : Jul 29 21:01:09 2026 GMT
Subject: CN=bce983a5d2eb5204cb6bb2048f45da9105708201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:58:56:55:d5:9c:e5:aa:8b:e6:11:a5:d1:
66:7f:61:42:34:74:ca:32:f9:22:50:1b:27:4c:ba:
f1:63:a7:2f:2d:9c:11:b9:a0:c2:2c:03:bb:bc:1e:
69:60:c6:b3:45:d6:a6:c3:2f:73:c5:2c:73:fe:fc:
cd:bf:dd:e6:69:af:8a:a3:c9:ac:8a:d8:b3:7f:b7:
49:b7:2e:68:1e:c1:c6:f9:8e:8f:61:87:79:87:0a:
af:92:d0:04:f4:4a:94:cc:32:1a:29:ea:58:a1:f9:
6d:2a:e3:27:5a:6c:10:b8:dd:00:8b:ae:a0:96:a9:
d2:d3:3d:7c:78:3b:3f:57:92:21:68:c0:1e:2e:dc:
b9:74:9f:37:b7:16:ca:de:03:b6:d6:03:b0:c0:72:
4a:9f:dc:f9:6e:37:f5:0f:29:b6:a1:2e:13:63:45:
43:43:db:d5:07:79:92:c9:08:38:fd:e5:6e:88:6f:
a1:61:b5:c4:df:c8:df:7d:1f:7d:e7:ad:52:b0:8d:
10:9e:7a:9d:2e:e0:82:f8:e7:cc:fb:4f:02:ae:87:
10:19:eb:ce:5c:11:20:b1:54:7a:8d:59:e5:81:88:
b1:5f:b5:ca:da:f7:91:cb:44:0e:98:3d:cf:d3:84:
92:81:45:87:ef:8c:e3:d8:18:ce:84:e3:0b:60:c6:
72:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E9:83:A5:D2:EB:52:04:CB:6B:B2:04:8F:45:DA:91:05:70:82:01
X509v3 Authority Key Identifier:
keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:69:96:9f:f9:0f:7a:9d:1c:ff:6b:95:ac:2b:57:32:94:96:
ea:a4:20:e2:25:cb:99:bb:31:5a:3b:6e:db:31:6c:5b:3b:ba:
39:bc:11:05:7e:19:65:8c:48:0b:66:f8:10:2f:bb:75:fc:65:
6f:ca:54:f3:b9:a4:31:f6:06:2d:9e:12:f0:c0:f8:ff:81:c3:
d6:53:4b:b9:d4:a8:f6:a4:92:44:19:73:d5:63:59:11:b9:f6:
25:e7:7f:60:4c:56:f7:31:26:4a:84:b8:44:e3:db:c4:dd:05:
b6:0d:de:b8:c4:de:88:84:cb:74:9a:e5:98:a0:d9:92:51:be:
3a:c5:48:a7:eb:ce:f8:c2:00:5b:e1:44:08:30:5f:e1:c4:33:
c9:06:53:bf:b2:93:cc:81:a0:80:97:ee:2e:93:14:a8:73:3b:
b9:59:6d:60:8c:aa:79:52:52:f9:f0:05:82:f9:83:3e:b1:26:
37:b4:cb:b5:d4:a8:af:80:06:06:e0:36:3d:36:76:74:0d:4b:
5d:fb:03:af:1c:57:de:0b:67:d4:65:8e:c1:ac:ac:2e:5f:71:
b3:f4:08:81:33:a3:a0:cf:cb:50:5b:5c:15:71:61:ca:1e:0e:
87:85:2f:40:51:51:14:7f:04:42:e7:ba:d6:78:bb:4f:a1:c6:
e1:a0:22:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:22:43 2026 by rpki-client