Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier: tIn8kvaRlqE8SQfw3ml59t8iODIknpvoQCp3kgVC1B0=
Subject key identifier: D5:83:68:D6:33:F1:16:C8:59:33:E5:92:B4:52:5C:4B:AA:82:12:1C
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial: 019D38655CF548948A9187FD68D06B15F4CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:00 +0000
Manifest this update: Sun 29 Mar 2026 07:01:00 +0000
Manifest next update: Mon 30 Mar 2026 07:01:00 +0000
Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: yvVjoWmMmdPkgQxaAndziZ2ii9Awh4sSIxkN0l/DEQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5c:f5:48:94:8a:91:87:fd:68:d0:6b:15:f4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Validity
Not Before: Mar 29 07:01:00 2026 GMT
Not After : Mar 30 07:01:00 2026 GMT
Subject: CN=d58368d633f116c85933e592b4525c4baa82121c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5e:ae:f0:e7:81:e4:f1:80:66:83:02:1f:54:
57:b1:da:bf:73:79:a8:59:87:09:2f:dc:ff:86:d7:
fd:34:c3:61:e0:1b:f7:1a:22:ce:73:e1:e9:c4:bf:
42:9c:e1:ba:73:ee:b7:b5:f7:01:e8:94:16:22:22:
3a:6f:16:fc:91:1e:b2:3c:4b:8c:bb:a7:7e:70:c0:
61:1e:e7:88:c8:13:4e:7d:06:14:85:55:25:f2:aa:
fc:94:4c:5c:9a:b0:6e:d4:5a:9f:1a:16:8f:43:ac:
92:9d:19:5e:2c:d6:c1:1b:16:f1:ef:0f:83:04:c3:
07:93:d8:5e:bf:0a:a1:13:7c:e1:e5:a5:1f:ba:3e:
41:7d:3c:93:19:21:04:69:14:3a:d3:39:04:32:e0:
ac:2c:c6:2b:9c:27:29:9b:5d:c7:61:56:a3:41:77:
ce:19:50:d0:9e:bb:93:94:8a:d0:5b:85:8a:e3:55:
b9:b4:7c:e8:9d:dd:d0:fb:08:4f:e9:fc:68:d5:1a:
84:8a:06:8f:68:cf:5c:f0:3f:05:95:ce:86:fe:b3:
13:9a:22:f8:5e:f7:aa:f9:f0:85:2d:e8:57:7c:f0:
9d:59:4f:72:ba:8b:94:1b:03:bc:0e:2b:41:87:36:
f7:5d:c3:3b:f2:12:19:94:b7:d3:f9:d3:59:d7:c6:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:83:68:D6:33:F1:16:C8:59:33:E5:92:B4:52:5C:4B:AA:82:12:1C
X509v3 Authority Key Identifier:
keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:44:49:1c:49:91:e5:0a:48:24:a3:1e:2b:a5:76:75:76:8a:
83:82:bc:6d:26:0b:b9:e6:7b:f9:54:2d:28:de:6a:f9:6a:e7:
c0:a3:af:ba:49:d4:5d:36:e5:c8:e5:d3:52:d0:df:79:ec:e1:
cb:cc:92:fb:c8:c3:22:76:5b:cc:17:aa:aa:de:b1:5b:9d:b2:
49:95:a9:21:28:37:11:6e:52:ef:7c:34:a5:b1:ea:23:33:22:
a2:bb:9f:55:7c:45:04:40:35:b9:53:59:37:aa:0b:87:ab:f1:
39:34:ec:33:d9:82:9e:db:66:06:f1:d0:34:d9:c6:46:3c:81:
90:2b:e1:61:35:0e:ca:22:3d:2f:a3:28:01:f0:7e:ba:a3:67:
47:01:18:32:a0:0c:06:26:bc:3b:4a:8b:69:ab:dd:d9:8c:e2:
cc:e2:7e:79:7e:47:0f:29:48:55:31:7f:99:19:d3:cd:83:e6:
08:50:78:c7:1f:d8:7e:d0:a7:12:5e:dd:0c:c2:9d:59:46:47:
cf:6a:93:27:94:67:c7:54:48:fe:2a:e9:87:ee:59:b6:05:69:
b7:71:a0:c6:70:56:c6:eb:28:f7:ab:47:b7:15:00:0d:bc:fe:
b2:91:ac:9b:dd:7a:62:29:35:db:27:80:1a:38:3c:26:c8:f8:
bf:06:f4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:39 2026 by rpki-client