Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier: lWHWmiA18LoljbT0qnZrPDQKs4xu3sjlWljqC7KAyVE=
Subject key identifier: 16:BC:F6:59:3A:AA:B0:6C:2B:5E:AA:DF:E8:A7:64:A4:0E:4B:72:82
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial: 019EC06D9DB2131042307BEBEDB804739AD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number: 1956
Signing time: Sat 13 Jun 2026 10:01:09 +0000
Manifest this update: Sat 13 Jun 2026 10:01:09 +0000
Manifest next update: Sun 14 Jun 2026 10:01:09 +0000
Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: RgoW311oqFpAfS8sWE6B3IOAKht/URsJsK3sEFcux8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:9d:b2:13:10:42:30:7b:eb:ed:b8:04:73:9a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Validity
Not Before: Jun 13 10:01:09 2026 GMT
Not After : Jun 14 10:01:09 2026 GMT
Subject: CN=16bcf6593aaab06c2b5eaadfe8a764a40e4b7282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e6:ea:d8:13:f0:a6:44:1c:e1:62:d6:13:a3:
53:00:b7:74:76:86:47:4e:c1:a9:f5:4e:09:bd:c5:
84:02:ff:fa:44:47:3d:ed:9b:4f:8d:dc:3d:85:ae:
2e:cd:59:b0:81:c2:8a:5c:23:18:e2:5a:85:b7:41:
5a:3a:e3:2c:5c:74:79:c3:ef:50:36:ad:38:d8:0f:
c0:ac:69:4d:bd:58:e1:b7:0b:7b:d0:c8:ce:8a:4a:
d3:54:c1:32:20:3d:a6:9c:05:5d:9b:a8:85:d4:2f:
fd:65:c7:83:4a:2c:31:ed:48:2c:92:3b:60:87:3c:
aa:01:ed:43:4f:1b:21:11:14:7f:98:18:54:5d:aa:
e1:e1:f4:0d:b9:a7:a1:11:10:b3:48:5c:7f:54:71:
55:d7:01:c5:ed:3e:33:22:66:dd:d3:26:17:10:2b:
42:a6:09:ed:b5:e5:be:17:db:bd:41:63:04:52:fe:
0f:bc:0f:c8:7f:2b:56:d0:74:2f:8a:ad:a9:bb:c9:
71:92:a8:d0:f9:4a:7f:0e:82:79:cf:64:ca:1a:ec:
4d:0d:56:69:d1:42:2c:1b:af:2a:d9:dd:89:8e:74:
9a:ae:18:0b:6c:ac:82:44:45:f8:89:8c:f1:bb:f3:
10:65:01:6e:51:97:90:a4:d5:15:7c:53:4e:81:4b:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BC:F6:59:3A:AA:B0:6C:2B:5E:AA:DF:E8:A7:64:A4:0E:4B:72:82
X509v3 Authority Key Identifier:
keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:34:6b:41:34:a9:2e:60:38:3a:54:77:cd:eb:30:31:9e:66:
2f:71:00:36:b2:54:d3:e5:55:2d:7e:59:e8:5e:8d:93:e5:c3:
9b:49:b4:e2:3b:5d:3c:1f:b1:37:10:8f:b5:38:cd:d2:5a:1d:
b7:48:b4:6b:a5:3d:36:64:9f:e5:58:df:63:86:a7:2f:ea:fc:
89:8e:07:2c:2d:9c:a6:b5:f4:11:58:11:83:6c:b4:67:14:e9:
20:34:41:f8:b6:32:2d:79:b7:b5:1a:08:9c:68:08:3b:ca:03:
11:ab:8e:89:30:06:05:80:47:e3:80:2d:0d:29:fa:6a:75:42:
0d:e8:ee:ff:1e:5b:90:a5:c7:48:56:48:84:e9:08:7a:dd:45:
d1:21:41:8f:60:8b:b1:e5:68:20:e3:57:7b:a3:26:c8:3d:8d:
43:db:f8:b1:71:3b:42:0a:28:57:19:0b:1f:f7:fc:96:17:5e:
36:59:5c:ef:9f:cf:25:10:a1:6d:8f:0b:57:35:88:be:47:f8:
42:21:2d:da:f6:4a:18:cd:cb:bd:ac:e4:c7:38:7e:7c:be:77:
cd:c1:b3:e4:e5:29:1d:c6:ef:2f:ee:be:e7:73:29:04:15:57:
da:7c:69:a6:f3:66:c9:4c:09:e9:7c:73:23:f7:1a:89:72:e1:
fd:06:6a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:57:48 2026 by rpki-client