Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
File: 1ehGG6CEVcNE_HU6TZZtsbXexdU.mft (raw, json)
Hash identifier: y+AGpi9AwASQwTMuyspKzjHA58tSJGwEsjmBfdNVnI4=
Subject key identifier: E9:C2:AD:E9:52:52:6A:01:A0:CE:E2:1B:69:F9:5E:9B:61:02:48:94
Authority key identifier: D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
Certificate issuer: /CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Certificate serial: 019D38D35AFE40119DCBB434F117592048E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
Manifest number: 0D4C
Signing time: Sun 29 Mar 2026 09:01:08 +0000
Manifest this update: Sun 29 Mar 2026 09:01:08 +0000
Manifest next update: Mon 30 Mar 2026 09:01:08 +0000
Files and hashes: 1: 1ehGG6CEVcNE_HU6TZZtsbXexdU.crl (hash: lxcYS4o369XNsosHRMwhMyr4N2xXVRGYWUWFgxrqAU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:5a:fe:40:11:9d:cb:b4:34:f1:17:59:20:48:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e8461ba08455c344fc753a4d966db1b5dec5d5
Validity
Not Before: Mar 29 09:01:08 2026 GMT
Not After : Mar 30 09:01:08 2026 GMT
Subject: CN=e9c2ade952526a01a0cee21b69f95e9b61024894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:76:dc:84:7f:96:59:b1:d9:f5:e5:28:f9:42:
2d:ac:e3:47:88:0c:f4:58:1a:c4:a7:56:f1:2d:eb:
53:52:ae:c6:15:99:4a:b5:c2:73:8c:f3:86:f1:6a:
cb:0a:c1:b2:23:62:9f:10:50:13:e6:e4:f3:00:8e:
ce:90:88:52:ba:e4:96:e8:24:13:29:53:8d:7f:3a:
4b:ca:04:99:d4:de:3b:cd:e3:98:ea:e4:b9:b9:ad:
80:36:5c:ce:8a:1f:e7:2f:39:7f:02:e8:69:3c:2d:
2c:2a:66:2d:54:98:dd:c7:39:c9:79:3b:93:d9:64:
ad:3a:87:0b:9e:29:07:52:bc:75:f0:6e:b3:53:23:
c5:f9:1b:8b:bd:85:3b:7b:38:fe:f0:31:40:90:a5:
a0:c4:3a:fd:7c:8a:3a:f6:87:83:a1:0b:cf:aa:7f:
e3:3f:4e:e3:7e:e9:4c:72:29:2f:f0:96:84:92:92:
36:74:d0:29:cf:a3:5e:61:39:fc:47:f8:2a:44:0c:
66:32:7a:ac:2b:dd:b3:25:b1:fc:45:a1:c2:3c:fb:
1e:50:4f:0b:b8:45:6c:98:f1:11:2c:c8:d7:29:e0:
0b:ab:6c:84:40:db:02:dd:5f:9e:e8:07:b7:d2:a8:
62:76:a8:2a:34:ab:19:fa:1f:06:b8:2b:98:62:6b:
f7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C2:AD:E9:52:52:6A:01:A0:CE:E2:1B:69:F9:5E:9B:61:02:48:94
X509v3 Authority Key Identifier:
keyid:D5:E8:46:1B:A0:84:55:C3:44:FC:75:3A:4D:96:6D:B1:B5:DE:C5:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ehGG6CEVcNE_HU6TZZtsbXexdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5a4d8-f0aa-48bb-8b12-cd75f9699b30/1/1ehGG6CEVcNE_HU6TZZtsbXexdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e1:e2:d8:70:fb:f0:78:22:08:4b:1d:49:a0:50:86:a3:58:
b8:d9:77:4f:58:f3:d4:65:0f:65:46:c2:27:63:91:74:19:28:
d3:fa:b6:64:4e:d3:b0:35:83:02:0c:e3:b8:7d:af:43:6b:14:
22:b0:fe:ad:4c:3f:42:2d:fd:e2:2e:6b:a6:85:35:08:30:fd:
1f:05:f4:8e:14:10:44:49:03:dd:c5:c9:86:17:29:7c:6a:ad:
18:36:7c:ec:10:fe:56:b4:78:2f:e3:82:f6:01:bd:18:41:79:
fa:ec:46:c3:f1:9a:5c:6b:22:23:ca:65:af:d7:82:b4:e5:ed:
26:59:c8:37:c6:b8:33:c4:74:53:c6:b2:17:83:3c:4c:f3:6d:
c9:53:34:0f:eb:40:df:72:25:af:2b:18:d0:d6:73:70:db:15:
f3:c5:b0:14:60:08:09:e6:93:83:ea:be:65:e5:b4:3a:ca:a8:
f1:bb:59:55:3e:29:eb:80:c7:bf:30:bb:05:a0:1a:6c:05:4c:
38:3e:ae:d2:41:33:64:17:28:66:05:ca:84:2a:e2:25:69:af:
e8:e2:56:8d:d3:4a:72:29:e7:1f:b3:44:39:38:13:0a:36:74:
71:e2:34:ba:67:87:73:45:fb:30:4a:2e:7f:6b:d5:c3:fa:10:
62:14:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:53 2026 by rpki-client