Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
File: 1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json)
Hash identifier: 6oc/pQSuIVH5A4xlKOKdWhhiweWjxpXSxoSMx7HApdM=
Subject key identifier: 3E:32:7C:10:36:AB:5B:48:C4:15:4E:0A:76:7B:29:6F:A0:BA:8E:0D
Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
Certificate issuer: /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Certificate serial: 019E1EA363F1F6E086C92A72D2371F8A69B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
Manifest number: 0DC3
Signing time: Wed 13 May 2026 00:01:24 +0000
Manifest this update: Wed 13 May 2026 00:01:24 +0000
Manifest next update: Thu 14 May 2026 00:01:24 +0000
Files and hashes: 1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: cqnB1pQrIR0mwaGMQK5m2+H0EUVg1AO7mKLLQWH7eSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:63:f1:f6:e0:86:c9:2a:72:d2:37:1f:8a:69:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Validity
Not Before: May 13 00:01:24 2026 GMT
Not After : May 14 00:01:24 2026 GMT
Subject: CN=3e327c1036ab5b48c4154e0a767b296fa0ba8e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:a7:bc:3e:cd:ee:f3:28:c3:e4:db:b3:48:
06:55:21:f2:d1:10:0c:46:bd:4c:cc:59:a7:f2:a9:
62:1d:a6:74:69:a0:17:65:54:d1:af:5f:60:a9:93:
79:28:a8:32:40:88:a5:36:1e:a6:d2:81:57:c3:b6:
2a:51:20:95:cf:49:b8:bb:66:b0:ba:ee:dc:17:f5:
a9:fb:1b:f3:71:94:3c:2a:f0:10:1a:80:c8:dd:cd:
a1:7f:38:4c:e5:fe:24:16:ca:e0:de:17:69:57:e5:
5f:3b:df:42:96:d2:80:fc:57:ea:65:97:fa:44:14:
59:80:5d:bc:99:06:c8:cc:23:c1:aa:8e:35:fe:1f:
7c:3b:13:04:83:18:aa:72:77:b0:03:8e:d8:29:69:
20:32:88:db:90:d1:5c:de:e1:7b:6c:e4:75:80:7a:
36:48:17:26:26:68:a7:f4:de:8e:ad:5e:d8:dd:84:
de:cd:0d:2f:4d:1d:58:7b:f5:07:ba:ee:96:4c:b5:
55:9d:9b:aa:8e:b8:6d:dc:4b:aa:63:64:ba:9f:04:
18:f2:ab:f7:77:6f:3a:2f:83:5a:a6:2c:29:18:fe:
ff:d2:c1:12:72:a0:d5:94:2e:12:2f:60:f8:c0:b6:
3d:c7:a0:0e:8f:68:f6:7c:51:16:d8:8b:e4:f1:97:
37:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:32:7C:10:36:AB:5B:48:C4:15:4E:0A:76:7B:29:6F:A0:BA:8E:0D
X509v3 Authority Key Identifier:
keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:42:e0:6e:c9:d1:09:3d:cb:ae:1a:59:bd:91:40:9d:70:eb:
1d:af:81:b4:8e:9a:56:52:42:14:9d:31:60:31:10:4a:53:4f:
e2:fc:75:a2:c0:30:1e:87:55:6e:fa:d2:ff:09:00:65:4d:21:
b0:ad:35:41:6d:64:db:0e:1c:21:43:3e:87:9f:96:f3:ce:2c:
c1:12:f6:39:12:c7:64:0c:3f:90:03:b0:d7:27:f1:06:e6:e1:
7f:96:a2:da:b4:69:92:0e:fa:da:8f:75:04:79:0e:3a:e9:38:
f6:ce:04:79:34:e6:4f:51:5f:58:12:74:67:aa:ce:fb:fc:83:
ff:a4:94:1f:36:05:9c:cc:7d:fb:67:ce:ae:31:9d:bf:3e:e8:
a6:3b:4e:c4:fe:ea:90:c1:db:e2:2e:7a:8f:90:b6:4e:55:f7:
e3:ca:c1:8c:8f:e2:cf:37:72:48:ad:53:2b:63:73:5b:0e:5f:
b8:d8:b1:5a:ba:e6:62:2b:f7:9f:04:04:ec:6f:11:76:0e:0e:
94:e4:1b:0b:ef:50:0a:26:51:6d:9f:83:3b:25:6f:50:6c:f6:
11:da:5b:fb:3a:51:1c:ca:c6:fd:2a:d3:c8:79:b5:7f:7c:2b:
d9:42:94:94:75:d8:5d:b8:8c:f0:d9:9a:b9:50:57:16:0f:26:
2a:f0:62:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:36:44 2026 by rpki-client