Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: K+0D4lFv7c1dKNuukpyRBVBhVE+48ymSEqRai8CsidU=
Subject key identifier: 5D:25:99:F3:20:A9:57:59:F4:51:B3:50:6B:9E:0C:13:3A:7F:71:FD
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 01A1C10A4A105CB1AC30C8B9964B46463AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 1AEA
Signing time: Mon 09 Nov 2026 16:00:39 +0000
Manifest this update: Mon 09 Nov 2026 16:00:39 +0000
Manifest next update: Tue 10 Nov 2026 16:00:39 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: bdxwMpEdIz7vMd1Frqo7/Gtb8iDviTZKJF1oAlFqDI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c1:0a:4a:10:5c:b1:ac:30:c8:b9:96:4b:46:46:3a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: Nov 9 16:00:39 2026 GMT
Not After : Nov 10 16:00:39 2026 GMT
Subject: CN=5d2599f320a95759f451b3506b9e0c133a7f71fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6e:87:65:4f:17:d6:76:67:67:ee:41:8d:34:
52:be:9b:66:93:20:2b:5d:df:71:9e:14:de:a2:22:
6d:ae:96:39:3a:7b:bb:fd:44:91:3e:a6:72:47:42:
dd:85:f5:bf:81:2a:ac:5f:83:f8:0e:9f:05:70:01:
5d:de:7b:23:aa:4f:b9:08:40:47:d0:61:34:d4:b6:
48:7d:d0:fb:ee:3d:c8:23:17:5f:2b:f8:73:6c:c3:
53:97:b3:21:3a:47:fa:e5:59:ac:01:10:4b:9e:ef:
a9:ac:5c:93:72:fb:c7:a9:85:94:a0:c1:dd:00:b4:
7c:37:d2:13:44:78:dc:f8:10:68:bd:6b:fd:a0:26:
fd:82:7b:d9:11:be:43:4d:2b:cc:cf:64:16:13:c3:
2f:fd:b8:a3:da:08:eb:f7:71:44:54:53:7b:4b:df:
89:09:3b:2a:a2:92:4a:44:17:96:70:dc:5c:f3:bd:
61:48:8e:18:94:e3:54:3b:a9:ee:ad:c6:a3:ad:98:
70:be:03:a4:2c:38:de:66:f0:ea:fb:09:df:8c:ea:
65:df:99:63:44:8b:9c:cb:22:04:ca:f0:d1:1a:0d:
60:eb:ec:47:90:9e:fd:f5:9a:da:1d:61:55:72:f9:
90:a7:39:c0:f4:f0:78:58:a2:3a:e8:a1:57:11:ea:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:25:99:F3:20:A9:57:59:F4:51:B3:50:6B:9E:0C:13:3A:7F:71:FD
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ca:0e:93:27:85:0e:76:05:bd:95:b6:a9:fc:04:6a:57:4d:
f8:ec:bc:e9:87:a4:14:66:52:5b:ec:2f:ac:db:85:f7:25:e0:
dc:06:40:87:de:0a:03:06:8d:4a:b0:18:c2:dd:3a:e4:10:d9:
d7:e4:ec:cb:47:92:b3:83:ec:12:6c:60:43:8e:20:ea:04:30:
e7:5e:27:29:a9:03:7c:e6:49:41:63:87:a2:2f:9e:b0:80:c0:
1d:5d:b8:dc:65:1e:eb:3b:b0:77:6e:0f:b2:95:7d:91:20:d9:
ee:66:9e:74:f1:bf:34:08:6d:8f:d6:4c:8b:37:a8:aa:3d:98:
7f:a6:6c:c4:c8:ee:ae:6c:59:d1:0e:0c:91:e2:74:d8:2c:82:
c7:60:82:bd:a5:61:02:49:ab:3f:04:a0:8b:ff:05:66:e3:d3:
aa:75:e0:5d:19:8d:69:7d:e6:2a:c8:3f:8e:4f:86:c2:da:19:
88:6d:34:76:23:60:52:48:b8:a7:f9:0a:31:b9:15:a6:31:aa:
53:7f:f9:2b:06:01:66:05:f2:bc:7f:7e:a8:ce:0c:13:a2:ba:
b8:57:63:b6:bd:b1:64:29:20:df:fe:55:ee:d5:2c:dd:f9:6f:
63:bd:59:b0:47:71:49:78:f1:8d:22:6e:f3:a4:43:0b:2a:b1:
54:d4:ce:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 22:23:14 2026 by rpki-client