Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: xPmgoTAkXH6+jlqm8JVgjKKnGkjf5juOJLPMd3EQxmE=
Subject key identifier: 78:49:7A:1B:B7:B1:83:AE:E8:78:16:77:7D:BC:98:3C:29:4A:B9:D3
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 019F90FF25BFA9DB753163EA4B1E14CD10C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 19C8
Signing time: Thu 23 Jul 2026 22:01:08 +0000
Manifest this update: Thu 23 Jul 2026 22:01:08 +0000
Manifest next update: Fri 24 Jul 2026 22:01:08 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: d/oTKemMtaL4PuSVz/evBckJ113bglAcnkWGQBD8pKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:25:bf:a9:db:75:31:63:ea:4b:1e:14:cd:10:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: Jul 23 22:01:08 2026 GMT
Not After : Jul 24 22:01:08 2026 GMT
Subject: CN=78497a1bb7b183aee87816777dbc983c294ab9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:92:2b:44:a9:5b:c1:90:f6:1c:84:3c:62:
35:6f:2f:70:b6:5b:c3:c0:d6:d0:71:28:dc:ec:87:
fb:77:69:d4:58:da:99:32:24:cf:b0:b4:80:f5:7c:
f9:c0:b7:a1:68:07:93:08:a9:0a:c8:f7:a2:41:94:
ad:48:a8:5a:88:7f:bd:20:72:8d:15:82:02:88:61:
79:b6:ae:c7:be:50:62:7c:1e:1f:3b:f0:2c:b5:6a:
f4:2b:73:4b:4a:16:93:a0:50:b4:b0:df:a9:7b:f8:
af:d0:05:63:fb:14:a4:09:9c:08:6f:ed:09:09:e3:
00:46:70:f6:44:eb:a3:54:64:d3:08:e9:9e:f2:0a:
58:be:ef:31:16:f3:92:fa:7a:ad:06:f8:55:79:c1:
a5:82:ea:06:32:00:77:a2:98:28:41:30:7e:e0:18:
84:52:00:69:b5:fd:1b:0d:0c:ce:9d:3a:35:dd:a6:
53:71:ef:45:47:90:6d:2a:95:a3:dc:f0:e2:ea:3a:
83:4e:6d:66:15:12:d4:c4:ec:d9:c5:e9:02:ce:04:
4f:f8:f1:d2:24:44:6d:4c:9e:ca:41:8b:4a:be:a8:
48:0f:50:e5:06:92:0f:90:d2:f5:11:ab:09:5a:fd:
a8:03:a8:aa:07:14:38:ec:1e:01:f2:a5:dc:3f:61:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:49:7A:1B:B7:B1:83:AE:E8:78:16:77:7D:BC:98:3C:29:4A:B9:D3
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f4:62:92:cc:d9:30:aa:3a:62:4d:29:27:54:e0:51:d2:b4:
48:ab:38:fe:cc:09:cc:dc:f9:50:ff:09:bb:f9:2c:48:ea:39:
b5:c1:8f:f6:82:07:34:fd:f7:a5:0f:26:5e:4c:b1:29:38:c0:
e1:52:f6:2a:7e:1c:83:42:f2:d9:35:9e:d3:ae:a2:c5:bc:9b:
36:63:02:52:c4:cf:d6:eb:33:fd:cc:25:52:79:5c:c5:3b:ad:
74:56:e0:96:81:5a:eb:32:23:bf:3f:6f:8e:97:07:19:02:34:
49:b2:d2:6f:bd:5a:00:18:c6:a1:4e:73:2b:af:df:a4:c1:11:
8e:a1:dc:4f:b2:8c:16:89:b5:90:05:53:91:10:4e:0b:31:31:
a7:a7:ff:fd:72:c7:64:ca:c8:c2:cc:ae:b0:b7:e4:3f:d1:32:
a6:00:44:22:e3:81:84:0b:a1:6d:81:29:35:cf:c7:e4:4e:b4:
9b:51:64:b4:64:b4:96:a8:7f:72:a3:38:e8:d5:6f:1d:77:51:
70:3c:d7:bf:1e:e0:7c:29:8e:25:74:1b:75:7f:e2:e6:85:73:
15:e0:8e:59:24:5b:c3:2c:72:6f:6c:97:54:54:89:87:df:26:
ac:ac:ca:ad:31:92:76:5d:6b:8e:0b:6b:f7:ea:45:43:ef:20:
c7:cd:7d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:15:59 2026 by rpki-client