Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: 5cPynBXYW78XpjDG04djCCApym4Vvuc7mX4KyYNXeA8=
Subject key identifier: 27:88:B6:D0:DF:60:BC:33:06:9B:4B:42:7A:8D:36:0A:48:D2:1D:58
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 019E1C47717DC0A0D98C081261E87923A5F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 13:01:44 +0000
Manifest this update: Tue 12 May 2026 13:01:44 +0000
Manifest next update: Wed 13 May 2026 13:01:44 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: i9zzXCLiXn0EhT3VN5BJUkxIkHSkNC33Bg+nX9DI3TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:47:71:7d:c0:a0:d9:8c:08:12:61:e8:79:23:a5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: May 12 13:01:44 2026 GMT
Not After : May 13 13:01:44 2026 GMT
Subject: CN=2788b6d0df60bc33069b4b427a8d360a48d21d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:24:56:e9:3a:5a:bb:1b:8a:9e:51:bf:6a:62:
bd:61:71:29:86:a2:53:44:81:f0:59:27:f7:b1:11:
ba:98:81:f7:25:d0:91:65:e4:57:75:ff:e8:ed:86:
27:8a:c7:86:96:14:a4:28:d8:db:3b:a7:db:f3:cb:
b0:53:74:4f:c3:ac:8f:bd:19:70:13:67:4f:79:e9:
d8:29:bf:4f:17:28:23:34:10:ae:09:0b:47:72:91:
9d:75:35:24:6a:dc:d0:9c:ab:7f:bc:72:c5:1b:86:
e6:b3:f5:13:ad:e2:86:1b:1f:4c:eb:8b:d3:74:fd:
b3:e9:37:1f:b7:e8:97:4a:71:50:44:4f:75:00:53:
7f:a1:97:29:36:2b:66:bf:70:37:67:8e:24:05:db:
44:4e:bd:24:cd:a1:bf:84:bf:0f:9a:71:24:90:59:
3f:7a:26:8b:72:c8:88:80:a1:47:af:9b:75:5a:2c:
59:53:44:e9:38:6b:50:3a:77:9e:c5:d5:f6:5c:5b:
ed:a0:7d:a6:d7:56:5e:56:7c:36:86:48:d1:b1:eb:
13:85:0b:cd:19:ce:79:25:82:e1:4b:ad:fc:63:c4:
2e:3c:42:1f:2e:9d:95:3b:b2:71:17:7a:cd:ec:35:
75:53:ba:a3:32:8d:97:dd:f7:78:b3:34:e7:be:44:
d6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:88:B6:D0:DF:60:BC:33:06:9B:4B:42:7A:8D:36:0A:48:D2:1D:58
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:36:fa:3b:02:04:4b:ab:88:b8:98:d4:57:e3:8a:95:ed:fd:
4a:c8:9b:5d:e8:f5:4a:bc:5b:b5:9a:5e:c3:d8:15:9c:b8:ef:
59:a9:95:5d:aa:38:e2:2f:9b:88:51:36:38:88:fd:4c:95:d3:
5e:bd:27:ca:61:b2:b6:2f:e6:75:7e:f0:a9:12:28:13:c5:89:
db:45:4b:1d:4b:b0:76:b5:b3:70:a6:16:90:20:a0:14:9c:80:
8b:2c:20:3f:2a:1e:1a:c9:fc:2f:94:2d:78:2e:1a:9b:49:5d:
22:e9:e4:05:3c:5c:eb:06:9e:a0:3b:68:e6:7d:a5:7b:4d:b9:
8d:71:1f:b9:d6:cd:0a:d4:28:66:03:8a:cf:f2:2e:f6:b9:39:
2e:9d:18:05:94:b1:34:33:bd:73:37:b5:49:f8:6a:5c:81:fd:
8e:53:74:77:71:39:b3:6d:1e:7e:d3:0e:4c:b2:1f:de:96:43:
a0:1e:b8:1a:52:a4:7b:7e:ff:6b:26:36:7d:7d:e8:28:e6:cd:
d9:66:e2:1f:58:51:fa:35:2c:ba:ae:d9:5e:a0:1e:8b:9f:59:
55:7b:a4:45:d1:b1:81:f3:0f:49:c7:20:09:e9:47:53:bf:0e:
68:8d:25:fa:50:7b:85:ca:0c:91:e7:f6:0e:bb:6e:d9:92:6e:
c6:08:ad:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:56:14 2026 by rpki-client