Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
File: 1-eS-AUv4OU5M185shKT6hPLln18.mft (raw, json)
Hash identifier: 6Xh8KcqOjXLJ8EDT0UHzQPTB+yvTqe9X0HyHM72XkgI=
Subject key identifier: 22:96:8B:19:88:84:B1:71:35:B7:7D:5F:CA:53:6B:6F:0B:A9:F4:2B
Authority key identifier: F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F
Certificate issuer: /CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f
Certificate serial: 019D2695BEA26A25D665017E1A990535832F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
Manifest number: 02E3
Signing time: Wed 25 Mar 2026 20:00:40 +0000
Manifest this update: Wed 25 Mar 2026 20:00:40 +0000
Manifest next update: Thu 26 Mar 2026 20:00:40 +0000
Files and hashes: 1: 1-eS-AUv4OU5M185shKT6hPLln18.crl (hash: 4ylf+Dl1sj2KHPPO8NWYlv55NqMLgJkCipGqoCGdo8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:be:a2:6a:25:d6:65:01:7e:1a:99:05:35:83:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e4be014bf8394e4cd7ce6c84a4fa84f2e59f5f
Validity
Not Before: Mar 25 20:00:40 2026 GMT
Not After : Mar 26 20:00:40 2026 GMT
Subject: CN=22968b198884b17135b77d5fca536b6f0ba9f42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:f6:ad:cd:86:17:8d:6b:74:de:63:ab:3c:
f0:65:31:85:2e:de:14:8c:ec:2f:88:0f:51:de:5a:
c5:cd:bb:fc:da:bc:bb:c0:a2:8e:20:aa:3b:53:e3:
d2:02:7d:0f:f6:f7:5b:f5:df:be:71:1d:c1:74:6f:
56:b6:06:19:71:68:2f:91:8c:c7:9c:a2:84:9d:81:
2f:ac:43:3b:7f:56:fb:ec:fb:70:25:41:15:0e:88:
9f:07:28:6b:d0:4e:f5:60:0f:4d:66:34:a5:9d:ab:
04:b4:b9:fe:0c:95:20:a0:80:ca:60:87:f5:23:44:
1a:fc:7b:83:11:d2:3a:25:e6:c3:e8:1d:6c:29:7f:
b8:9b:f2:7c:51:bd:0c:2f:5d:96:e7:bc:a8:81:a6:
48:94:1b:df:37:b1:f2:c5:18:50:6e:45:d2:9a:e5:
1e:53:a2:c6:0b:f1:e7:32:53:d2:3c:fd:51:27:0c:
37:dd:54:a4:7f:67:23:da:f0:62:49:75:6d:5f:64:
c9:70:f2:8f:42:75:e6:08:b0:34:54:5c:0f:57:fd:
11:23:40:97:fd:6e:16:3c:24:0e:c2:22:be:6b:39:
03:c5:4a:cb:a8:2b:03:79:0c:bf:d0:7b:5d:34:54:
0b:35:cb:09:53:fd:15:42:33:97:ed:20:cd:4b:e2:
57:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:96:8B:19:88:84:B1:71:35:B7:7D:5F:CA:53:6B:6F:0B:A9:F4:2B
X509v3 Authority Key Identifier:
keyid:F9:E4:BE:01:4B:F8:39:4E:4C:D7:CE:6C:84:A4:FA:84:F2:E5:9F:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eS-AUv4OU5M185shKT6hPLln18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d589f-2d50-424c-9b49-ac36d8204436/1/1-eS-AUv4OU5M185shKT6hPLln18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:97:0a:91:a3:3c:93:88:9c:8e:99:92:68:2c:44:52:dd:27:
27:66:25:d4:77:b7:55:a2:23:10:56:ea:0f:89:48:65:f7:2c:
c0:1b:e2:0e:0c:b8:b6:3b:86:7a:1f:6c:0b:6f:11:6f:18:ac:
4f:f8:87:4b:2f:0b:da:da:a1:20:0e:0e:08:8f:44:de:d5:bb:
08:06:de:bd:14:96:66:67:59:97:3c:01:39:1b:9c:29:34:60:
e9:03:20:68:82:9d:60:58:0b:da:ef:c9:42:ad:1f:c7:2e:28:
af:06:ec:c7:40:2a:7c:09:5f:2b:4b:cf:a0:e7:1f:8e:bb:ea:
7e:45:aa:aa:70:6b:a4:78:20:4f:4f:0f:f9:0c:da:07:e3:58:
e6:95:a6:eb:74:d4:44:5d:1c:e8:59:fd:90:0d:e0:91:44:8b:
a6:fd:94:a5:50:c4:c5:23:ac:ba:54:ae:c2:94:63:ef:24:ec:
bc:29:12:7d:9b:69:ee:74:ff:a1:99:7a:8b:4e:15:56:5e:58:
30:7c:a2:8b:5c:d9:0c:66:f0:17:19:ea:1e:1c:1c:7f:f8:40:
ef:fa:68:ea:75:89:26:9e:29:6d:89:9d:c9:ad:62:09:3f:88:
c0:be:58:9c:82:2c:92:cc:d3:0b:b0:21:50:74:d9:e0:93:4d:
bf:de:c6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:13 2026 by rpki-client