Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
File: 1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json)
Hash identifier: WC3fdSEJJhQFKEX01PbgLY2JPt/RQP1Ib3VayyfstnY=
Subject key identifier: F1:34:6F:E9:B2:F5:6E:D9:1E:F6:0B:C7:F6:55:02:93:85:C7:47:4D
Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
Certificate issuer: /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Certificate serial: 01A13E260C32A0EFA4C3341E81E04628EDB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
Manifest number: 0F61
Signing time: Thu 15 Oct 2026 06:00:43 +0000
Manifest this update: Thu 15 Oct 2026 06:00:43 +0000
Manifest next update: Fri 16 Oct 2026 06:00:43 +0000
Files and hashes: 1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: s5SptMLz4W4rQtxoGc+Wa/1uHMW2vF/IGjIyTwcdVwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:0c:32:a0:ef:a4:c3:34:1e:81:e0:46:28:ed:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Validity
Not Before: Oct 15 06:00:43 2026 GMT
Not After : Oct 16 06:00:43 2026 GMT
Subject: CN=f1346fe9b2f56ed91ef60bc7f655029385c7474d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:6d:03:7c:07:0d:9f:00:71:66:00:d5:95:
eb:d4:79:bc:f6:cd:fc:ef:0a:c1:80:10:c2:30:7c:
53:64:c2:62:d6:4a:03:0f:3b:f8:05:5e:23:b6:47:
57:b5:3f:5e:4e:02:8e:fd:82:e8:36:d8:af:9f:5d:
16:c3:c0:8e:14:5a:1a:fa:bc:7c:16:41:c6:a4:1a:
83:81:bd:82:83:06:b2:0f:e0:ab:e4:1f:c6:08:98:
98:e9:26:f6:b6:ce:0f:9c:29:c6:42:27:17:f2:df:
b6:3e:e6:4e:0b:57:67:db:b1:06:bb:66:4d:63:3d:
5b:40:18:77:a2:b9:e7:da:85:38:be:f9:b3:b2:f3:
3b:45:0a:bb:51:81:49:40:a9:19:99:ff:06:f6:32:
d0:67:8c:cb:39:96:bf:4a:aa:87:f5:27:78:d6:a4:
ec:00:4b:d1:62:d3:f0:00:ea:6c:01:02:ca:54:f2:
5d:ff:a7:89:57:c9:8a:29:29:5b:cd:6d:e9:0f:7e:
50:0e:f6:62:77:73:b5:7b:d4:25:bd:6f:2c:44:26:
98:a4:9c:68:c0:8b:e3:8b:bb:b5:a5:7b:d6:a7:d5:
04:e7:24:c5:6e:a4:57:d9:38:20:0a:5c:dd:73:52:
27:fe:b6:c2:26:f0:58:0c:aa:4a:bc:44:d0:49:b9:
fe:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:6F:E9:B2:F5:6E:D9:1E:F6:0B:C7:F6:55:02:93:85:C7:47:4D
X509v3 Authority Key Identifier:
keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6b:6a:3b:eb:2b:7b:9f:b9:ab:79:5b:3d:f9:39:fe:68:b3:
17:8f:0d:af:b0:33:fc:bc:6d:5c:55:99:e5:3f:0e:f4:82:a2:
ae:62:b2:1d:90:99:97:24:cc:ed:67:b9:37:3f:6f:84:01:14:
56:96:8c:ef:75:63:bc:36:54:f0:f2:2d:bc:8b:74:02:c1:21:
00:8c:ae:a1:23:e6:ac:35:05:c7:de:2d:43:be:70:f6:7d:54:
ce:26:c8:d5:bb:ea:86:86:7c:3e:da:71:46:f4:28:5f:02:e4:
9d:a7:69:e1:67:25:a9:a4:7e:15:38:d7:bd:e7:34:c1:2c:da:
2e:23:fd:84:45:18:96:7a:43:b4:4f:25:0d:02:46:da:88:1c:
2e:73:fb:00:64:96:94:c7:eb:06:57:0d:c6:ee:68:5d:88:a0:
02:0d:4d:d6:94:f2:f2:03:98:35:a7:19:61:d1:35:65:4a:d3:
4e:e8:40:e0:36:b2:02:a7:7b:9d:78:6c:ce:49:50:8e:99:09:
b7:0e:4b:dc:96:26:6b:d8:8a:ec:4f:a3:15:c5:0c:c0:19:40:
23:06:23:91:3d:bc:f5:9a:5c:be:c7:55:2e:06:47:e3:4e:cd:
30:97:91:b6:a4:36:68:3f:8d:37:60:f0:55:20:8c:bf:2d:c7:
bb:79:0a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:18:59 2026 by rpki-client