Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier: RhnhAyusYEbqqv5YMZB1l2oBkw241y3wmA2FQCMX+iI=
Subject key identifier: 7E:96:58:7C:F3:E7:08:F1:98:DE:11:36:90:78:FC:14:24:85:F8:E0
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial: 019E1C47904F7121DCB100293DB492C4850B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number: 1901
Signing time: Tue 12 May 2026 13:01:52 +0000
Manifest this update: Tue 12 May 2026 13:01:52 +0000
Manifest next update: Wed 13 May 2026 13:01:52 +0000
Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: nvAO5mnK6XZeZ7PKGp6zAv2U2In53Ah1c0CsFjAM5xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:90:4f:71:21:dc:b1:00:29:3d:b4:92:c4:85:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Validity
Not Before: May 12 13:01:52 2026 GMT
Not After : May 13 13:01:52 2026 GMT
Subject: CN=7e96587cf3e708f198de11369078fc142485f8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:60:4b:27:d6:bd:5a:a9:1b:8f:6b:01:1f:
9a:20:51:3f:6d:11:78:ec:89:19:b5:51:a2:7b:bc:
a9:d3:de:89:c1:8e:f2:ab:0a:dc:4f:13:d9:3c:d1:
2f:09:5d:20:71:c2:8b:23:c2:8e:5f:66:5a:22:7d:
8a:78:cf:ca:d9:ce:22:c0:04:10:e1:ee:03:90:4f:
69:a3:e6:f4:7b:98:f7:26:05:69:c0:1b:c2:0f:12:
84:39:22:24:57:36:69:a4:55:8d:db:c8:e2:b6:46:
a8:8f:2c:af:59:5b:5a:f8:c5:13:64:16:72:61:31:
b1:33:6b:aa:55:75:1a:77:73:a1:60:e9:95:74:b3:
ca:11:89:a7:a9:ab:b2:6c:58:92:db:57:0c:cb:e3:
09:e6:aa:b9:db:dc:02:f8:f3:c2:0b:77:d9:85:93:
2c:05:bd:6e:ba:fe:0d:3f:38:e8:d4:fd:cc:4d:9e:
56:8d:1f:4f:8e:24:c0:33:d9:27:64:5c:14:9f:49:
94:ca:bb:d5:9e:bf:06:00:86:de:e5:54:2e:95:56:
ca:f2:00:83:1e:72:a4:61:79:d5:e3:f6:8e:30:91:
cf:be:4c:a8:15:fe:21:64:7e:1e:e2:cf:f0:80:82:
69:5e:fd:9d:56:b5:4f:bb:e0:77:8a:f1:48:c3:d1:
af:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:58:7C:F3:E7:08:F1:98:DE:11:36:90:78:FC:14:24:85:F8:E0
X509v3 Authority Key Identifier:
keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:46:f3:94:64:fa:41:5b:9b:9c:7a:5e:06:0f:98:48:42:64:
db:5e:5e:f1:e0:14:15:50:03:50:43:b3:45:bd:3e:ee:0d:8e:
6a:00:09:5b:e8:8d:9a:d8:5f:2a:d2:17:2d:78:3f:45:04:33:
40:c5:61:68:74:9a:b4:05:01:80:c7:f7:41:48:86:55:53:26:
c8:81:4c:d4:5d:f9:29:73:53:6c:b3:55:f8:d5:75:e2:0b:60:
66:77:a9:ef:7e:62:83:6b:06:18:4f:17:82:06:c6:7f:2a:55:
4f:97:8a:9d:27:80:a9:65:59:97:d7:59:ef:e4:d0:be:40:e6:
4a:73:a1:67:da:f7:bb:1e:c1:c4:39:38:69:0e:fe:6d:d9:d9:
db:b1:00:a7:b2:ac:6b:4d:a5:74:5b:ae:bd:97:9e:83:3f:22:
fd:d0:be:7b:3a:dd:ad:37:a7:cc:0b:4f:95:6c:01:b3:3b:25:
9e:de:03:48:f3:d3:69:03:12:d7:20:1f:e2:07:44:c1:26:df:
25:f4:66:5f:44:81:a9:12:5e:09:e6:40:12:dd:cd:f2:40:9e:
96:6c:d8:b6:7b:84:5c:2a:19:3b:24:cf:3c:aa:19:80:8b:2c:
c0:e5:26:57:24:ee:0a:3b:ff:eb:9f:98:0e:87:71:db:74:db:
f7:ca:09:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:31:03 2026 by rpki-client