Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
File: 1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json)
Hash identifier: mU9DDg/RhHgCysUHxnNQOjPq+Vaab5cCJlTcc7e9XBI=
Subject key identifier: 3D:95:0E:93:89:EC:D6:BC:50:E5:6B:EF:5B:8E:55:36:E7:13:63:B2
Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
Certificate issuer: /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Certificate serial: 019F17C2267B1A3CB9C35597BBDEB42B1E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
Manifest number: 0E44
Signing time: Tue 30 Jun 2026 09:00:27 +0000
Manifest this update: Tue 30 Jun 2026 09:00:27 +0000
Manifest next update: Wed 01 Jul 2026 09:00:27 +0000
Files and hashes: 1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: sDMsuWu0HcMOYNHYFQvKePsC/aS+V6v2Qvhcs538zys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:26:7b:1a:3c:b9:c3:55:97:bb:de:b4:2b:1e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Validity
Not Before: Jun 30 09:00:27 2026 GMT
Not After : Jul 1 09:00:27 2026 GMT
Subject: CN=3d950e9389ecd6bc50e56bef5b8e5536e71363b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:94:68:13:bd:ac:4a:20:7e:9d:9b:90:e0:42:
8c:38:c9:14:42:d0:44:c3:bf:57:61:69:56:8e:8a:
83:57:a9:95:fc:59:be:8b:2a:4e:bb:52:20:da:06:
30:54:db:00:b3:dc:d2:dd:a5:c7:d7:6f:7d:c3:9a:
57:be:a4:58:35:68:00:ff:0a:4b:99:7f:0f:12:92:
2b:71:22:b2:5a:91:bd:f7:a1:59:fd:58:a2:00:25:
a2:4c:18:e7:a7:41:e0:33:f6:17:67:30:b9:7a:aa:
51:11:e7:48:8a:f5:a8:e7:eb:ac:93:de:b2:e3:8d:
4f:f1:c3:24:6d:04:58:3d:66:4a:82:4e:e5:fc:2f:
66:fd:31:ff:5d:0c:3c:cf:b3:7f:6b:ae:81:0e:ea:
03:46:d8:0e:10:3e:9a:ee:3b:4c:5d:eb:a6:16:58:
a8:76:23:de:f9:d9:c1:cf:86:5c:70:3d:77:46:d3:
82:9e:77:ad:85:0d:05:ea:df:53:1f:10:99:5b:63:
b9:08:d1:66:33:49:e2:a6:ba:d2:87:34:0d:69:33:
37:59:51:72:f4:95:39:f0:95:93:82:9a:0b:7d:18:
e3:11:ea:40:e5:94:41:7f:c9:cb:44:96:18:92:66:
0e:00:19:68:13:48:19:a1:43:51:97:af:c9:64:04:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:95:0E:93:89:EC:D6:BC:50:E5:6B:EF:5B:8E:55:36:E7:13:63:B2
X509v3 Authority Key Identifier:
keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:33:93:9a:c7:71:e1:20:f8:33:25:b9:85:f4:b4:77:99:e9:
38:9c:ee:a1:61:5f:83:51:bd:7c:ae:75:ee:3d:fd:b1:53:9e:
57:94:91:eb:e2:db:12:18:4a:ac:19:f8:18:fd:4f:95:2a:df:
b4:c2:a1:35:44:13:f5:80:91:ac:75:1c:82:8d:56:0c:4a:ad:
3a:28:a9:87:ba:95:5f:d2:cd:32:91:db:ab:21:4e:bf:d4:d4:
c0:09:96:e4:d8:a5:fd:52:f6:ab:cc:70:a5:de:80:8a:11:28:
1c:a1:45:50:bb:8d:8b:cf:68:9d:27:8c:15:31:81:46:8e:12:
41:6e:8d:40:ae:3d:d3:9c:bd:00:63:96:88:97:7e:4d:92:3d:
9f:f0:69:6c:7a:7e:cd:3a:d0:c9:27:1d:22:2b:70:3f:c7:7a:
b7:35:7b:f0:c6:e7:40:c9:fe:94:e7:f1:3b:00:b8:d1:2d:d4:
03:e5:56:4e:4a:83:c3:be:3d:9d:e6:4c:ba:d9:b4:4e:b7:78:
71:49:07:9a:16:b2:52:c5:cc:00:4f:a1:62:09:98:f4:d3:c6:
b9:95:2e:49:5d:bb:ef:5c:9c:39:9e:cd:fb:c0:3f:d1:75:ff:
ee:df:65:90:94:45:27:f4:8a:e9:08:f3:9e:63:ef:ae:95:c7:
5b:a0:8b:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:18:06 2026 by rpki-client