Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: /9hUWpuX1TOQkZRSoFmxihHELwlbMzuM4jId4+nAawo=
Subject key identifier: EB:61:41:47:18:C9:55:89:98:12:92:4F:C7:8D:D7:F4:6A:DD:4A:E7
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 019CAD59CAC3F951ED9C85F2A6EAC38A1D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 07:01:08 +0000
Manifest this update: Mon 02 Mar 2026 07:01:08 +0000
Manifest next update: Tue 03 Mar 2026 07:01:08 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: 4GTOmFiN/Q207Zu8qTVcQncEWHthtu32LZCMUrcLQmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ca:c3:f9:51:ed:9c:85:f2:a6:ea:c3:8a:1d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: Mar 2 07:01:08 2026 GMT
Not After : Mar 3 07:01:08 2026 GMT
Subject: CN=eb61414718c955899812924fc78dd7f46add4ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:db:ba:8f:ee:da:ed:56:e1:21:4a:e7:65:2d:
5f:5d:a3:a9:cf:fa:f0:a0:1f:84:72:1b:d8:a8:2f:
f0:d8:04:3a:f7:cb:1b:ae:a6:7d:18:da:b7:d9:c2:
52:d8:24:e6:d6:ef:3e:ca:a0:f8:83:ec:cd:7a:95:
28:81:c7:89:16:a3:c2:69:b3:8d:a6:95:1d:61:0f:
48:83:31:f0:3c:85:bb:d2:d2:69:9a:06:3b:fd:57:
3d:e3:a8:56:46:7d:7e:0f:10:3b:1a:22:07:d3:62:
17:96:1b:b5:1e:8f:62:df:5d:0c:41:a5:56:60:c6:
46:1e:57:b9:b1:49:e5:5c:26:c3:32:c4:f8:55:17:
da:ee:30:a3:f2:22:c6:b7:00:ad:f8:dd:60:6a:68:
24:e4:8b:b3:0c:54:15:2c:6c:8d:b5:bb:8b:8d:6f:
94:34:2d:f1:bb:57:42:86:f0:d8:a5:23:8a:06:17:
bf:02:0b:39:57:95:00:94:f8:ae:9f:0c:9f:6c:3b:
a4:88:44:41:96:a8:17:24:e3:02:50:c1:9a:2b:a4:
c5:66:c3:c4:42:9d:48:2d:85:c2:15:55:ef:d0:91:
b9:b5:c6:e8:64:bc:fc:12:cf:93:01:e1:05:c0:b7:
ef:2b:da:05:a8:c9:6a:c9:dd:b9:5d:88:05:77:1c:
e2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:61:41:47:18:C9:55:89:98:12:92:4F:C7:8D:D7:F4:6A:DD:4A:E7
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:99:fa:b0:be:fb:d6:45:73:1a:ba:eb:dc:38:6b:c0:c2:47:
93:df:0b:65:33:9c:f7:d8:a7:98:f5:10:e7:06:29:63:d7:c4:
36:fb:c7:36:f4:18:43:f2:39:78:53:e3:53:0c:f3:60:5b:7c:
f1:2b:52:4c:39:06:2f:97:9c:44:cf:bb:7a:be:66:37:06:36:
ba:13:f0:72:9a:b0:1b:36:ed:c9:47:d7:02:d7:b5:db:6b:01:
f2:ca:17:0d:c8:10:4e:b0:3b:d8:66:4a:d7:45:b2:cc:0e:db:
3b:9c:14:dc:3d:b6:5e:9a:e8:85:52:6f:47:7e:7a:c5:83:3b:
db:6b:29:81:9d:04:d6:95:21:75:1c:91:c7:39:cc:71:4c:e3:
a8:e3:d7:82:c9:e4:c9:7a:ff:49:47:32:e8:36:8b:af:75:7a:
0a:5b:5f:ac:8e:75:c8:36:3c:21:c6:61:55:64:53:1a:af:58:
bf:c9:c3:fa:46:4a:01:cc:bb:7e:65:fe:aa:61:e3:d3:17:ab:
04:5c:40:d3:2d:8e:ab:b7:fb:0d:73:f5:ca:e9:4c:7d:27:8e:
eb:fb:7f:0e:e5:94:fa:17:80:90:01:8e:f5:75:b2:14:bc:86:
c2:8d:ec:29:69:d5:48:43:bb:5d:35:31:29:dc:09:0d:71:4b:
12:b8:45:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:49:41 2026 by rpki-client