Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.mft
File: 1CBnFtuSM_7qn465ct6JErxbg_U.mft (raw, json)
Hash identifier: L0Xi9asKPRmJO9F4JvFJLP7LGO4slA3EtdrD0isfrhE=
Subject key identifier: E5:46:2A:DB:EB:EE:E4:62:45:2E:C1:78:49:BC:81:FE:66:DB:29:EF
Authority key identifier: D4:20:67:16:DB:92:33:FE:EA:9F:8E:B9:72:DE:89:12:BC:5B:83:F5
Certificate issuer: /CN=d4206716db9233feea9f8eb972de8912bc5b83f5
Certificate serial: 01A0404E36DE46F1F1AAB0C9B0FD243AD83A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1CBnFtuSM_7qn465ct6JErxbg_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 23:01:02 +0000
Manifest this update: Wed 26 Aug 2026 23:01:02 +0000
Manifest next update: Thu 27 Aug 2026 23:01:02 +0000
Files and hashes: 1: 1CBnFtuSM_7qn465ct6JErxbg_U.crl (hash: qbW2CQ1al48dbB+hQ9TpZlUDLXJpfDWySsEt3IItJ1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1CBnFtuSM_7qn465ct6JErxbg_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:4e:36:de:46:f1:f1:aa:b0:c9:b0:fd:24:3a:d8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4206716db9233feea9f8eb972de8912bc5b83f5
Validity
Not Before: Aug 26 23:01:02 2026 GMT
Not After : Aug 27 23:01:02 2026 GMT
Subject: CN=e5462adbebeee462452ec17849bc81fe66db29ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:d2:17:9f:56:4b:23:1a:09:62:23:89:2c:
28:69:dd:2e:e1:04:b0:4d:c8:a7:78:2e:22:ef:4b:
28:f6:dc:fd:03:43:4d:bf:9f:92:91:b6:11:33:de:
1e:37:5e:f6:53:32:ef:03:1e:2d:04:0e:ee:66:32:
08:ff:ad:d6:85:78:dd:dc:90:34:3a:86:d5:4e:2d:
4f:e4:eb:50:66:dc:6c:5f:a7:be:14:35:44:6c:d7:
81:7e:0c:89:12:09:f2:ab:3d:f3:d5:8a:fd:21:b5:
df:8f:45:f4:4a:d4:ca:7c:c9:b1:bf:a8:2e:98:6c:
72:0e:0c:81:ae:d7:02:64:66:89:2b:54:cc:5d:a2:
71:0e:a0:2b:53:f8:04:dd:8e:34:b4:73:6e:54:b3:
48:38:f7:2d:25:ea:26:f9:e2:8f:50:34:d0:25:3e:
f1:00:af:f3:fe:bb:dc:a1:e1:3f:a2:71:1e:f7:cb:
f5:02:e4:78:a8:6a:33:ba:c3:ea:5a:30:2c:ce:4e:
e1:dc:8d:a6:4c:96:f3:74:8e:e5:bb:ad:74:c1:8b:
d5:1c:02:63:a7:d9:37:ba:73:5c:28:ef:61:da:f2:
d4:d7:ca:b2:a2:57:d5:09:a0:7c:63:14:8e:a0:1c:
7f:5a:f9:84:47:d1:b0:f3:6a:15:d8:0f:41:c1:bf:
93:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:46:2A:DB:EB:EE:E4:62:45:2E:C1:78:49:BC:81:FE:66:DB:29:EF
X509v3 Authority Key Identifier:
keyid:D4:20:67:16:DB:92:33:FE:EA:9F:8E:B9:72:DE:89:12:BC:5B:83:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CBnFtuSM_7qn465ct6JErxbg_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/ef96a0-3057-4279-b23c-7b50ddeaec7f/1/1CBnFtuSM_7qn465ct6JErxbg_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:cb:fc:fd:db:2b:a2:a0:1d:b2:b1:c0:98:ce:65:48:79:72:
d7:3c:68:c6:41:ce:14:b9:31:d9:78:25:f6:02:76:fe:68:eb:
83:de:ec:52:89:8d:42:39:79:fb:02:b6:17:5f:9b:07:e8:9f:
c6:fa:80:83:c4:64:c3:13:ea:ed:7e:7b:4f:6c:dc:63:ee:7c:
b4:cf:c8:52:ed:dd:0e:66:ac:2e:f5:44:7f:2a:1d:8d:8f:f0:
10:53:d6:fd:32:09:ad:22:09:bc:66:77:69:08:b4:f1:7c:55:
bb:0e:99:16:5a:31:28:b7:46:7e:0a:7e:32:53:e5:f0:0c:dc:
1e:24:fa:2f:de:83:1c:fd:c7:19:4d:9d:1a:2e:45:b6:bb:74:
f3:67:2e:69:0b:eb:f5:72:11:a4:59:ad:f0:d4:29:6c:ff:a9:
fd:a0:d3:4e:c6:53:d5:88:79:62:45:8f:0c:19:b6:29:df:62:
2e:d6:08:33:a9:96:e7:4d:13:5d:61:88:7e:27:7d:9d:0a:a7:
c9:c2:54:dd:7d:63:b8:ef:d7:9e:20:d0:26:69:c1:72:7e:cd:
03:ab:38:14:7e:4a:58:c9:37:d3:58:a2:4f:5b:ce:ed:e1:2f:
cf:da:eb:83:af:51:47:ec:75:bc:fa:fb:af:94:77:67:af:b6:
0b:92:ad:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:50:41 2026 by rpki-client