Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: 7euD40Nmtf9pyZWrkswFTdnjpqvS3BTMUM562vsRKOM=
Subject key identifier: 03:A5:0B:75:BF:EB:76:E3:EC:CD:2C:5A:76:C1:EE:F2:A5:A7:58:33
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 019D329B037895460C2CC25F48C08EBAA3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 188E
Signing time: Sat 28 Mar 2026 04:01:52 +0000
Manifest this update: Sat 28 Mar 2026 04:01:52 +0000
Manifest next update: Sun 29 Mar 2026 04:01:52 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: yFap5PITiN/GGNHZfhsfkOvLioe9sDOioj/PnYtEo1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:9b:03:78:95:46:0c:2c:c2:5f:48:c0:8e:ba:a3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: Mar 28 04:01:52 2026 GMT
Not After : Mar 29 04:01:52 2026 GMT
Subject: CN=03a50b75bfeb76e3eccd2c5a76c1eef2a5a75833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:26:73:a7:95:30:fb:05:7c:bd:5d:90:ad:
07:42:70:61:46:25:91:db:4f:ba:4a:e3:40:06:38:
6a:55:80:22:e1:e2:f9:6f:16:2e:2a:7f:28:e8:ec:
fb:57:a6:c4:6d:a2:5e:87:07:68:4a:ae:5a:da:4f:
9f:1a:2d:14:5e:2a:d8:32:e4:69:9f:af:38:3b:f9:
30:6d:ae:9a:4a:a3:7f:91:84:bf:da:e6:74:57:b8:
87:56:68:12:6a:11:52:a3:bc:ca:94:52:87:10:a5:
b1:37:a4:2a:80:88:80:6c:8b:cb:14:0d:96:93:66:
40:b7:82:5e:b5:fd:df:f8:bf:84:39:f0:46:2c:f1:
b6:23:c1:59:0a:2d:4d:dd:1e:a5:b8:4f:3d:2f:5c:
e2:ba:fc:9d:0c:f7:12:30:9f:18:b1:5e:4f:d7:6f:
27:fc:c3:e5:3c:5b:c4:c7:ae:68:ac:08:7c:1d:f3:
05:fc:3b:e6:aa:f0:e5:06:ba:8e:43:25:1d:be:f2:
ff:20:3e:17:36:8d:d9:08:3f:32:cc:71:39:17:9c:
c1:b6:ec:ac:d7:2b:5c:5b:4d:44:2a:a1:71:f8:87:
ab:19:77:94:44:c9:90:f9:c5:4b:fb:7a:3e:53:fb:
b8:04:c8:dd:39:ab:7d:e2:d5:67:e7:01:da:b0:8a:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A5:0B:75:BF:EB:76:E3:EC:CD:2C:5A:76:C1:EE:F2:A5:A7:58:33
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:62:7b:ca:2d:6c:84:b9:c9:7e:e3:9d:da:08:a1:c7:27:b5:
1b:1f:89:77:cb:0c:c6:23:a8:5d:71:bf:2e:76:c1:04:5e:2d:
1f:2b:b6:25:a3:d1:d6:fe:e8:9d:32:fe:f7:5c:3d:b4:97:42:
15:79:10:8f:fd:8e:02:3a:bd:13:e8:0b:06:6b:f1:7f:d5:7d:
59:39:a0:a7:60:2e:d9:8c:80:be:81:68:a6:e9:80:00:b1:bb:
6c:6a:cc:b7:70:d3:d4:12:96:68:a8:3e:06:9f:64:f3:52:7f:
4d:7b:d4:24:8d:01:7c:45:da:09:07:69:11:4a:14:ba:fc:42:
37:d9:87:d8:df:ae:13:73:6c:d7:1a:27:d1:b0:72:fc:8d:5b:
3b:99:41:22:02:1e:68:4e:f0:91:e4:01:67:aa:25:ad:86:b8:
4c:14:d7:2e:c4:24:e6:5c:97:d0:0d:ee:66:3f:77:41:9c:cc:
8b:6d:61:8f:1b:09:a1:f0:67:46:c5:4f:a9:ed:44:71:47:ee:
68:7b:fa:92:a8:cb:c9:63:7e:05:9b:22:20:e2:d4:b7:3f:70:
43:3e:c5:d0:23:ce:95:31:6e:d5:cc:84:28:e0:da:12:2d:0a:
39:1f:cb:d2:c8:83:34:60:c2:67:83:d6:9b:68:1e:a0:df:a1:
2a:f0:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:27:19 2026 by rpki-client