Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File: 1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier: HOGkEAEpGWqxJgIvhjMai9BHtl/dWKvNW0418IB1vAs=
Subject key identifier: FB:87:A1:C5:4C:47:6B:C6:DD:05:37:48:49:73:50:54:33:8A:94:0F
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer: /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial: 01A0CEFFC860E2D3D11817F5A4E5D3CF6D31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number: 1A68
Signing time: Wed 23 Sep 2026 16:01:04 +0000
Manifest this update: Wed 23 Sep 2026 16:01:04 +0000
Manifest next update: Thu 24 Sep 2026 16:01:04 +0000
Files and hashes: 1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: 5N/vT/0hkeJhfRobkojKdbQNy3Qoa5A6mTYU1c7usHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:c8:60:e2:d3:d1:18:17:f5:a4:e5:d3:cf:6d:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Validity
Not Before: Sep 23 16:01:04 2026 GMT
Not After : Sep 24 16:01:04 2026 GMT
Subject: CN=fb87a1c54c476bc6dd05374849735054338a940f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:27:b5:19:40:e7:94:c2:d3:4c:99:9a:49:c3:
57:2b:f6:72:96:30:f7:8e:02:f1:99:6a:45:1e:00:
4b:d7:b2:58:35:74:14:27:cc:85:da:05:bb:a1:83:
0d:fc:3d:15:34:a6:8f:5e:96:c9:fc:fb:05:4c:c7:
f1:d2:01:ca:5a:30:80:d0:2f:4d:02:8a:66:da:c8:
62:b0:55:37:56:5f:5b:25:cf:6e:82:39:4b:ad:12:
0d:96:04:55:a2:06:2c:d5:51:bf:cb:b5:68:6a:34:
0c:d7:0a:0e:e8:84:69:04:7f:42:b0:e6:2b:7c:ae:
12:73:66:9c:8f:a5:5b:c4:8a:39:a5:f8:f7:59:ce:
25:1d:ee:8c:9d:76:85:3b:23:fc:ec:b1:49:5c:58:
48:19:78:9c:f4:5b:51:6e:6b:b5:a6:57:a3:b6:92:
40:91:0a:d5:be:8a:8d:e5:0a:27:96:3f:f6:e5:58:
dc:6a:b1:77:2a:8e:90:60:0b:cd:67:d3:10:b5:57:
52:35:ac:03:bc:e6:9d:c9:92:f1:d0:3f:aa:34:e9:
e2:1c:a9:ad:bd:79:c3:0d:c9:2d:96:9b:f8:d9:bb:
e5:be:4e:36:b1:45:d9:28:bb:ed:60:ce:bb:47:ec:
76:ac:a5:3d:e1:41:03:74:c6:84:bd:ab:36:40:cc:
15:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:87:A1:C5:4C:47:6B:C6:DD:05:37:48:49:73:50:54:33:8A:94:0F
X509v3 Authority Key Identifier:
keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:c2:b8:0e:bb:21:73:79:97:49:2e:8a:af:a2:51:64:ba:be:
ac:d4:ab:e5:6f:f7:e7:72:1b:1a:35:66:49:f7:8c:5e:48:7f:
ce:3f:80:cf:b0:80:e9:9d:f5:04:59:2f:6f:3b:e1:c9:bc:53:
bb:6c:5c:98:ac:bc:cf:47:06:e6:c8:2a:20:54:52:1d:33:02:
f1:6c:bc:54:aa:c6:1d:b5:37:d8:f2:99:1d:c0:a5:ff:cc:40:
7e:c1:b2:3c:25:28:75:45:53:ee:34:b1:8d:f8:b3:78:8b:7c:
7f:03:d7:4d:94:7e:1f:5a:f2:bc:3c:82:e0:c3:f7:59:58:8d:
61:9f:88:69:4c:3f:98:07:b7:c4:9d:8d:9c:bf:37:65:83:58:
a5:0d:95:ed:d7:1c:0d:a4:ec:46:ad:66:8b:a8:bd:b8:63:53:
a1:63:18:c2:c3:fd:c7:b7:40:fc:8e:b5:49:18:1c:b9:4c:8d:
62:05:ea:63:37:27:fb:9f:93:9b:91:34:a1:ae:2f:95:b2:42:
0e:cf:4d:99:df:98:f4:1c:b8:45:36:09:0c:cc:93:c7:23:e8:
6f:f7:bc:1f:b0:ef:e7:06:45:15:0a:8d:ff:7f:bf:5b:d5:ab:
d1:42:c0:c0:56:f2:78:d7:71:31:12:40:69:ce:94:96:5a:bb:
7f:ea:c5:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:53:39 2026 by rpki-client