Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
File: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json)
Hash identifier: k4F1JmtQvhQ8DWGgqFz9rzm8o6pvgO6aFYAXe+aLyEU=
Subject key identifier: 18:7C:BD:50:CF:4E:FD:F8:A5:AF:A5:19:6A:71:72:FA:4C:45:D1:50
Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
Certificate issuer: /CN=d6107622fd26072e2b9936caf275704350226ca0
Certificate serial: 01A0CD7EE33778B6E7F65013F58B6D0CF1EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
Manifest number: 1A67
Signing time: Wed 23 Sep 2026 09:00:40 +0000
Manifest this update: Wed 23 Sep 2026 09:00:40 +0000
Manifest next update: Thu 24 Sep 2026 09:00:40 +0000
Files and hashes: 1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: kXLtDoBPvqx6sXo1+zmEHQkiylZt8MyrvPOhmx/3ZpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:e3:37:78:b6:e7:f6:50:13:f5:8b:6d:0c:f1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0
Validity
Not Before: Sep 23 09:00:40 2026 GMT
Not After : Sep 24 09:00:40 2026 GMT
Subject: CN=187cbd50cf4efdf8a5afa5196a7172fa4c45d150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a8:98:5c:84:d9:a3:f2:a0:b3:5c:2d:a4:3e:
80:aa:7f:98:41:07:35:23:b2:93:cd:a5:42:e1:f8:
4f:a8:e4:5a:89:6a:f8:fc:bd:0f:ae:5b:0a:cd:a5:
90:2d:e1:90:d7:4f:ca:e9:a5:c4:a0:e5:0f:2d:78:
77:61:dc:e2:5a:5e:42:22:63:4b:6e:1b:ba:96:3b:
fe:ed:42:d0:f0:1d:e7:8d:c7:cd:94:87:15:44:29:
67:53:ce:0d:b0:60:18:41:dd:ed:19:b6:a7:48:0e:
cc:5f:ac:46:7e:74:7c:6f:22:14:f2:78:42:9f:2c:
98:be:af:8d:c3:4a:81:af:27:c9:f5:08:4e:f1:71:
01:17:2a:98:de:62:80:2e:a7:b9:f5:a2:a2:9c:03:
7c:b3:07:aa:3f:02:5c:ce:8e:1c:90:5f:88:9f:21:
a0:da:8d:da:f0:cd:1c:03:46:b2:a1:89:b8:4e:ca:
1f:ed:e9:c1:7e:cd:1c:d3:40:da:4d:a3:a7:83:f2:
82:b6:64:46:e8:2f:f9:ae:72:d4:b1:9c:7b:34:8d:
31:d5:3b:5e:80:72:ab:dc:d3:42:98:95:d2:c1:1f:
7e:4f:ba:b5:60:77:df:fb:6c:9d:9d:a9:74:1b:b4:
d7:ec:a7:9f:2c:54:07:58:0c:10:cf:b8:3f:4b:2c:
dc:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7C:BD:50:CF:4E:FD:F8:A5:AF:A5:19:6A:71:72:FA:4C:45:D1:50
X509v3 Authority Key Identifier:
keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ce:5e:6f:28:18:a1:ce:05:dc:15:51:06:59:af:33:b9:2c:
68:ea:da:4e:15:6d:01:c0:79:a8:fc:e3:a7:9e:63:17:8f:de:
3b:ef:08:ad:3d:a7:50:31:db:98:0b:8b:a9:25:33:fe:57:c3:
42:0b:4e:60:c9:af:80:1b:a4:03:2a:62:ae:30:76:da:e6:3c:
06:e8:74:0a:f4:52:8f:fb:47:22:fa:89:30:ba:57:ea:d8:84:
ea:61:7a:34:5f:0f:5b:55:a0:b3:87:83:a2:37:0f:ab:16:01:
db:19:e6:89:7c:b9:a5:81:2d:4f:8e:25:8f:9c:04:75:21:f1:
56:a7:a5:62:87:ca:00:a4:19:e1:55:20:23:52:07:14:48:63:
36:cb:3e:d4:4e:30:5f:6d:7f:44:dc:0f:e4:b4:56:b3:1a:cb:
67:b5:53:a3:92:7b:ee:fa:3e:7f:f1:b5:56:e4:a4:d4:f4:02:
3d:51:72:40:ff:7a:6e:64:4f:31:47:e9:ac:64:87:c7:c7:51:
2d:1f:fe:55:3a:bb:2e:5a:7f:a2:c8:f7:46:00:86:71:6b:34:
79:ce:f2:87:69:44:d3:d4:21:70:39:20:af:e1:15:d1:14:8b:
bf:12:dc:db:fc:29:88:ab:f8:25:16:1a:28:62:61:d7:f9:e1:
ac:9e:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:07:44 2026 by rpki-client