
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier: AYcZPF6JfjuM+3rdDiXPTOPEpVEqQUgC/t4EyY7vqpM=
Subject key identifier: 8F:7F:AE:8E:83:E0:BD:55:38:DD:43:64:BF:A6:59:BC:22:7C:26:7E
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial: 01A0DB3AFA9B81F8C41B7D7DAF2FFE830D4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number: 1A6D
Signing time: Sat 26 Sep 2026 01:01:10 +0000
Manifest this update: Sat 26 Sep 2026 01:01:10 +0000
Manifest next update: Sun 27 Sep 2026 01:01:10 +0000
Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: vjfNvgQhPwxBOEG6Y/02WSTPJBijxeGmMTnGt7DdVKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:3a:fa:9b:81:f8:c4:1b:7d:7d:af:2f:fe:83:0d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Validity
Not Before: Sep 26 01:01:10 2026 GMT
Not After : Sep 27 01:01:10 2026 GMT
Subject: CN=8f7fae8e83e0bd5538dd4364bfa659bc227c267e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:be:56:4d:bf:d0:cf:7e:35:68:24:bf:e4:0a:
f1:ce:4d:4f:a4:d8:2f:aa:28:0c:a2:d0:26:51:10:
70:af:43:88:d2:d3:24:46:41:66:3b:5e:e0:2c:c8:
63:81:c6:3d:80:47:80:46:46:3e:5a:cb:29:a6:77:
9b:18:ea:bb:f6:ab:54:f1:67:e2:58:16:76:2a:d7:
88:bd:86:29:77:7c:45:4e:2e:cb:c3:4c:f9:58:84:
71:df:d2:62:2f:e9:dd:a5:13:53:1a:ad:74:6b:e8:
2c:e7:f4:bb:a9:16:cc:20:07:56:fb:62:d0:f6:b1:
d0:d1:a4:63:df:ac:46:53:46:e7:16:2f:b9:b8:33:
23:26:a0:dc:e4:fd:46:2e:fd:d4:f7:14:e2:6a:c2:
8c:14:56:f8:92:53:9e:ff:43:c0:73:ee:1c:45:3e:
48:39:15:b4:5c:8d:ff:f6:10:37:03:9c:8f:b6:f6:
ac:a8:50:f7:f4:47:f0:da:8f:18:c1:0d:14:3b:02:
f5:aa:26:f0:89:e8:21:c2:8e:92:97:8d:fc:6e:a0:
70:32:49:8c:17:9f:c9:a1:d9:c2:86:7b:2c:5c:18:
06:39:bf:b9:67:ad:3c:70:f8:f6:96:6f:1f:7c:00:
65:e4:10:dd:25:a4:29:02:06:89:df:67:43:00:0a:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7F:AE:8E:83:E0:BD:55:38:DD:43:64:BF:A6:59:BC:22:7C:26:7E
X509v3 Authority Key Identifier:
keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3c:e2:d4:af:04:19:f5:90:77:e1:11:ed:6c:fc:ca:ca:f0:
ea:e4:de:24:26:83:32:10:60:2e:46:1a:41:7f:4f:a0:e9:c7:
52:45:eb:05:12:aa:c3:0d:16:97:c7:be:97:75:0e:f8:bd:7b:
6a:7b:2a:e6:c6:03:ad:c1:04:2d:69:b8:4b:42:ed:52:fc:08:
e1:bd:d9:2a:ea:70:ec:d1:a4:7c:20:73:99:b8:71:88:89:46:
c0:49:2f:44:90:a3:2a:54:4a:eb:d8:7f:93:1d:ad:7c:80:2b:
74:5a:de:3a:60:8e:43:81:4d:b3:bd:bc:d6:3c:ee:87:cd:f9:
85:86:de:02:e6:2b:1a:ac:48:58:a9:09:97:e8:86:00:c6:0e:
61:6c:30:08:51:a4:ff:32:3f:35:18:29:32:45:26:3a:dd:38:
f4:5d:2e:06:7a:d8:6e:ad:03:ab:1a:2a:51:44:fe:2c:de:8f:
2c:d1:7c:aa:40:29:3a:0d:43:2e:32:65:de:86:e9:80:d9:71:
8f:c3:27:52:88:1d:d5:90:87:67:5d:d1:bb:48:c3:5d:fb:68:
f4:f9:48:4e:5b:92:19:9c:b4:2c:17:81:45:ea:72:60:0c:aa:
83:e1:bc:5b:0d:e3:ef:87:0c:ac:e9:76:3b:ce:50:5a:47:c3:
b5:4a:78:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:33:19 2026 by rpki-client