Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier: dxSxFkTtb12lbu8tODP/8ANmBLMYt3/ezeydC1ypf3Y=
Subject key identifier: 29:F7:92:97:16:CB:DC:4C:2D:4B:4E:DE:FE:08:ED:61:35:C0:07:A2
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial: 019D329AE8C1A9069E0F8B1834F689F06241
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number: 1888
Signing time: Sat 28 Mar 2026 04:01:46 +0000
Manifest this update: Sat 28 Mar 2026 04:01:46 +0000
Manifest next update: Sun 29 Mar 2026 04:01:46 +0000
Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: /tUIkDYEje+k78vHaMgyObXbIpaNhqJ8Ft1oSpPS4to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9a:e8:c1:a9:06:9e:0f:8b:18:34:f6:89:f0:62:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Validity
Not Before: Mar 28 04:01:46 2026 GMT
Not After : Mar 29 04:01:46 2026 GMT
Subject: CN=29f7929716cbdc4c2d4b4edefe08ed6135c007a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:26:7e:d5:2d:59:57:bc:da:c6:50:99:51:
a6:89:04:bf:37:64:b2:3e:f6:67:62:f9:be:26:76:
c8:83:a7:39:bd:00:4b:5a:0f:d8:94:86:0e:1e:d5:
42:09:db:a6:62:4d:dd:d6:ba:e8:87:c6:e4:74:c0:
67:04:a1:48:1d:23:4d:62:07:29:64:42:b5:e9:5c:
6f:fa:39:5e:0e:fe:33:36:a5:a5:78:b4:62:28:53:
98:fd:c7:0a:6c:ed:f3:54:f0:c2:c9:c1:ef:6d:3a:
08:86:5e:ff:50:a3:39:9f:3a:98:38:a1:c0:51:3c:
6d:47:ce:2a:30:c8:8a:58:ca:ed:62:c8:33:0c:7f:
5d:3b:bb:94:cf:dc:9f:40:63:7d:75:40:eb:d4:51:
29:57:d8:00:f8:89:27:75:02:a7:5d:42:98:99:e5:
6b:19:e1:35:7a:e3:4c:3e:3a:ad:4d:bc:a7:95:94:
42:b9:c3:66:ab:61:c3:e1:42:d1:5f:63:e0:2a:4c:
8d:cf:b7:65:4e:1c:52:c7:fb:08:a6:d9:34:01:76:
ee:d8:bf:43:dd:12:91:91:37:f2:1e:4a:b1:17:7e:
b0:6f:1e:c7:8b:53:58:dc:e6:e8:be:df:b9:b3:fc:
62:93:be:c1:be:68:f1:90:e9:66:c6:81:9b:1c:c2:
d5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F7:92:97:16:CB:DC:4C:2D:4B:4E:DE:FE:08:ED:61:35:C0:07:A2
X509v3 Authority Key Identifier:
keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:93:ee:e1:bf:37:9a:25:4d:14:9d:10:ce:af:3e:99:7c:60:
98:9b:a6:92:3d:07:71:6e:23:09:77:f2:70:f3:d2:23:95:5a:
0e:94:2c:77:82:d4:9f:71:59:59:0c:79:e0:d0:f3:58:7f:66:
bd:d9:5f:8d:1d:ec:b4:3e:1a:c3:88:7b:23:ba:eb:dc:a2:1d:
98:89:69:f9:67:4e:1a:34:1b:24:b7:48:0d:2f:a4:52:6f:9e:
66:74:f9:8f:cd:b7:df:74:b7:5d:c9:b6:ac:0e:92:94:31:4f:
60:88:94:8d:64:37:ce:0e:eb:66:88:36:a1:58:9c:b4:41:6a:
1e:ae:eb:50:d4:c9:34:c5:46:08:5a:da:30:78:bb:5a:57:18:
fe:66:77:76:64:58:ba:81:68:80:8c:d7:8a:a6:07:df:eb:e7:
9f:e7:ac:9a:97:07:bf:20:ff:d5:05:4b:71:c1:ea:49:9f:a1:
f1:2b:73:4c:ee:c7:10:bf:4c:ed:e7:8d:58:17:be:48:81:00:
c7:cd:cd:43:bc:3d:ce:d6:07:6a:5a:77:b3:40:d7:f8:8d:bf:
84:86:b4:c5:bb:72:e9:c6:32:c3:17:5d:9d:49:69:24:b5:7f:
67:18:2b:1e:09:bf:70:20:4e:a7:68:ec:19:87:27:72:bf:d9:
f2:d2:3b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:19:29 2026 by rpki-client