Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: 79Rrsr7ZYI7QntN+xdPvRf7rqdwxKnM0EUo8VtPrLmo=
Subject key identifier: 85:91:E7:00:ED:6F:16:9F:05:DF:31:27:2A:A0:3A:A4:17:08:A8:E8
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 01A0C2203BB67F0EE81B63404DB350A67970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 04:01:27 +0000
Manifest this update: Mon 21 Sep 2026 04:01:27 +0000
Manifest next update: Tue 22 Sep 2026 04:01:27 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: dt2ViEJm35otWsmmwYOFKzpfoaRnZa8itOluolr5KCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:20:3b:b6:7f:0e:e8:1b:63:40:4d:b3:50:a6:79:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: Sep 21 04:01:27 2026 GMT
Not After : Sep 22 04:01:27 2026 GMT
Subject: CN=8591e700ed6f169f05df31272aa03aa41708a8e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2c:a1:7f:3a:5e:1e:d7:5a:3e:b3:fb:ef:da:
cc:f2:32:24:85:d7:af:b6:1c:62:9d:3f:b9:f3:55:
e8:a6:2c:53:40:48:8c:cb:63:84:8c:d1:ba:95:93:
cf:cd:e2:86:05:e5:94:ec:e5:9c:8a:f2:ef:79:0e:
2e:aa:c6:3f:09:c0:eb:01:8d:5e:31:d2:76:f3:21:
04:58:31:68:9e:c9:22:e1:12:d1:d9:bd:85:71:84:
37:1f:ea:91:62:a3:61:7b:f2:b5:5e:9b:25:7f:8d:
84:5a:ce:7c:04:9d:f5:b9:b5:5c:71:ed:41:43:9a:
94:a3:d6:0d:17:d5:65:dd:5c:36:45:1a:88:09:a5:
2d:c8:64:8c:6b:00:d2:03:8a:de:7d:cc:44:4c:cb:
ef:91:c6:98:04:b3:9f:9b:dc:88:5b:12:36:09:00:
57:35:10:3d:a0:ec:e2:18:0e:ec:38:39:00:3e:2e:
f9:2d:83:4f:bb:cb:48:1d:ca:f2:6e:46:ee:21:49:
79:5c:70:88:43:87:e1:17:57:9a:9a:05:e8:58:02:
9d:9f:07:24:e4:51:aa:66:e6:a1:be:d1:3c:36:87:
10:8f:6a:26:11:9c:5d:f2:aa:cc:8f:df:ed:3d:4e:
cb:7e:f7:9c:27:fc:07:cd:67:22:fd:8e:f1:0f:13:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:91:E7:00:ED:6F:16:9F:05:DF:31:27:2A:A0:3A:A4:17:08:A8:E8
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:77:de:06:1d:a4:82:b7:19:d1:48:b9:ff:9a:ba:bc:f2:ac:
3a:85:30:c3:5d:ed:ba:64:3e:e0:8d:1e:c9:53:a1:09:ba:41:
61:d8:34:f9:48:e6:cd:f4:aa:a3:16:90:42:3c:26:c3:73:27:
a5:7a:80:8b:d8:82:85:e0:42:f8:88:1e:00:25:81:da:17:80:
1c:62:d3:fc:7b:f9:11:2a:15:c9:fc:00:1d:e1:0e:52:e0:3f:
d8:99:a7:8d:b2:66:81:76:0d:81:5a:f0:f9:33:be:8c:45:fe:
d3:99:76:c6:de:91:4b:26:93:71:64:1b:73:b1:bb:1b:be:14:
ea:03:89:68:68:ff:73:d0:c4:6d:b2:8a:ce:d9:80:e6:87:6a:
c2:e1:fd:d8:c4:fc:18:d5:c2:17:49:e6:c7:ca:9c:39:cb:80:
8d:df:f6:8c:eb:34:8f:b6:68:fe:66:58:d5:a4:fe:74:20:f5:
e9:2a:95:43:96:d1:3f:b7:19:28:a8:72:6d:75:21:23:30:6f:
fb:63:54:8b:3e:07:31:82:12:6b:32:17:7e:c3:a4:16:40:91:
ec:29:5e:5b:d0:49:d2:21:5d:81:c2:77:f9:5d:51:62:bf:29:
08:39:58:64:d4:49:c6:29:05:31:91:e2:f6:16:c3:af:27:8d:
41:c5:05:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDCIDu2fw7oG2NATbNQpnlwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjE1N2VhNjgyZWY3NGYwZjFlZjY3ZmExZTkxNjBkMTdj
ZDJlOTMwHhcNMjYwOTIxMDQwMTI3WhcNMjYwOTIyMDQwMTI3WjAzMTEwLwYDVQQD
Eyg4NTkxZTcwMGVkNmYxNjlmMDVkZjMxMjcyYWEwM2FhNDE3MDhhOGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiyhfzpeHtdaPrP779rM8jIkhdev
thxinT+581XopixTQEiMy2OEjNG6lZPPzeKGBeWU7OWcivLveQ4uqsY/CcDrAY1e
MdJ28yEEWDFonski4RLR2b2FcYQ3H+qRYqNhe/K1Xpslf42EWs58BJ31ubVcce1B
Q5qUo9YNF9Vl3Vw2RRqICaUtyGSMawDSA4refcxETMvvkcaYBLOfm9yIWxI2CQBX
NRA9oOziGA7sODkAPi75LYNPu8tIHcrybkbuIUl5XHCIQ4fhF1eamgXoWAKdnwck
5FGqZuahvtE8NocQj2omEZxd8qrMj9/tPU7LfvecJ/wHzWci/Y7xDxOIpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIWR5wDtbxafBd8xJyqgOqQXCKjoMB8GA1UdIwQY
MBaAFNWxV+poLvdPDx72f6HpFg0XzS6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJGWDZtZ3U5MDhQSHZaX29la1dEUmZOTHBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9mNzZlOGMtODJiMy00N2Q0LWI0YjYt
MDIxYzllZWMwMDc3LzEvMWJGWDZtZ3U5MDhQSHZaX29la1dEUmZOTHBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9mNzZlOGMtODJiMy00N2Q0LWI0YjYtMDIxYzllZWMwMDc3
LzEvMWJGWDZtZ3U5MDhQSHZaX29la1dEUmZOTHBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe3feBh2k
grcZ0Ui5/5q6vPKsOoUww13tumQ+4I0eyVOhCbpBYdg0+UjmzfSqoxaQQjwmw3Mn
pXqAi9iCheBC+IgeACWB2heAHGLT/Hv5ESoVyfwAHeEOUuA/2JmnjbJmgXYNgVrw
+TO+jEX+05l2xt6RSyaTcWQbc7G7G74U6gOJaGj/c9DEbbKKztmA5odqwuH92MT8
GNXCF0nmx8qcOcuAjd/2jOs0j7Zo/mZY1aT+dCD16SqVQ5bRP7cZKKhybXUhIzBv
+2NUiz4HMYISazIXfsOkFkCR7CleW9BJ0iFdgcJ3+V1RYr8pCDlYZNRJxikFMZHi
9hbDryeNQcUF6g==
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:18:02 2026 by rpki-client