Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
File: 1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json)
Hash identifier: /BMsbOEF8Jbvc029Hxi6X8ZEGgHO92Lqo2Sjbr6fLa4=
Subject key identifier: DC:EC:BB:29:B1:13:AD:0C:EB:4A:27:C4:73:13:6B:B1:CA:B6:19:D2
Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
Certificate issuer: /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Certificate serial: 01A0D7CD3CAF691346D144333BB049F97DFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
Manifest number: 0F2C
Signing time: Fri 25 Sep 2026 09:02:26 +0000
Manifest this update: Fri 25 Sep 2026 09:02:26 +0000
Manifest next update: Sat 26 Sep 2026 09:02:26 +0000
Files and hashes: 1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: pe0BOdfff93OTBZZd/8exYXMyV//NPlfgQBdgxrI2zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cd:3c:af:69:13:46:d1:44:33:3b:b0:49:f9:7d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Validity
Not Before: Sep 25 09:02:26 2026 GMT
Not After : Sep 26 09:02:26 2026 GMT
Subject: CN=dcecbb29b113ad0ceb4a27c473136bb1cab619d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fc:6f:96:58:4c:67:8f:84:d2:38:3d:3b:ef:
2d:b1:21:fc:a6:c4:d5:fc:87:68:57:4e:e5:a7:38:
ad:d7:ad:c1:c6:72:a4:bd:7e:87:19:9f:a1:57:ab:
26:54:43:58:60:97:ce:5b:49:8e:fe:88:57:8a:23:
85:80:88:5f:cf:0d:43:dc:c4:24:32:41:2e:5e:81:
05:63:f0:2e:6c:ab:f4:bb:30:56:46:8b:80:5b:cb:
6f:76:81:72:7a:2f:cc:e6:ca:eb:a2:0f:fb:31:dd:
0c:7a:be:10:e1:93:c8:b0:9d:65:85:cf:37:ba:28:
8d:2a:bf:ab:48:e9:85:82:5f:a5:ff:14:43:cd:55:
1c:46:72:99:22:ad:18:1e:1a:47:63:38:30:23:9a:
68:9c:ff:fd:67:30:7a:83:57:bc:64:6c:50:2e:3a:
98:93:46:d6:2a:84:bb:6e:7a:ec:31:d5:30:50:6d:
5d:da:19:35:31:fb:db:82:e2:b9:40:06:f5:54:14:
ec:8e:ee:8c:4e:28:83:f5:22:b7:c2:6a:d1:03:09:
ab:9e:06:0f:e9:6b:13:57:03:f4:91:f8:cf:5a:15:
c2:01:a5:56:ab:03:bb:4b:4c:16:6c:d8:d5:06:38:
55:f7:80:0b:27:01:c7:51:ba:33:c2:cf:3e:fe:de:
52:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EC:BB:29:B1:13:AD:0C:EB:4A:27:C4:73:13:6B:B1:CA:B6:19:D2
X509v3 Authority Key Identifier:
keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:27:ff:54:24:c5:16:46:fc:0a:a9:e0:f4:e2:6a:e7:1e:5b:
eb:41:38:a5:e7:1a:b6:c5:9a:f6:4e:e2:b9:df:e9:ec:c0:ad:
ce:77:e4:cd:6d:13:67:97:bf:9b:41:2e:f6:99:e1:d7:5a:24:
b7:12:1f:a3:f7:a0:be:0b:05:86:7c:b8:93:ce:62:7a:f7:1b:
13:f6:a9:b0:a8:f5:db:4a:e0:80:25:4d:4f:b7:a2:9c:2e:1f:
0c:c0:df:b7:77:1c:38:a8:9b:5b:9f:d4:16:fc:03:4c:43:56:
90:d4:57:34:8a:b6:a8:60:f5:81:c1:42:44:e2:30:e3:86:76:
ff:48:1c:ee:b6:8d:9b:a3:0e:4b:56:15:3c:ec:99:30:f3:85:
6c:62:79:09:8d:bf:5e:60:e1:f9:65:a2:1b:3f:29:40:12:aa:
79:3b:6a:44:70:0e:0f:20:2c:fc:0f:ca:1f:28:0a:07:62:d7:
71:9e:41:f4:7b:b7:c9:78:63:92:7a:fe:30:20:73:92:a5:16:
ad:a7:b1:1b:73:26:21:b9:5a:1e:7c:1f:49:fb:6c:ea:36:7e:
d3:27:89:70:b9:c8:0a:c8:74:4c:e8:ba:52:e5:0c:de:aa:00:
b4:b7:39:a1:49:86:2b:a7:89:54:81:88:61:0e:16:d7:35:6d:
ef:f9:cc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:04:30 2026 by rpki-client