Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier: 2wSuFJZu5Q6WZ6vNwVKVTDvJPK/mvfhp/oKtW+qnQwA=
Subject key identifier: 82:8D:06:8A:72:9E:2E:BA:08:B7:7A:E8:43:87:71:87:C8:F6:C6:A5
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial: 01A1510831D3F4FECCCB5CFE7E997BC5C022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number: 1AAA
Signing time: Sun 18 Oct 2026 22:00:53 +0000
Manifest this update: Sun 18 Oct 2026 22:00:53 +0000
Manifest next update: Mon 19 Oct 2026 22:00:53 +0000
Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: B5XKXSH4hlTzg0IRwAn4sdRjHhmHA3Uz7bMudTTtpLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 22:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:08:31:d3:f4:fe:cc:cb:5c:fe:7e:99:7b:c5:c0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Validity
Not Before: Oct 18 22:00:53 2026 GMT
Not After : Oct 19 22:00:53 2026 GMT
Subject: CN=828d068a729e2eba08b77ae843877187c8f6c6a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:2a:ca:41:13:71:d0:98:52:8f:27:bf:a5:
1e:41:2e:19:b5:0a:0b:c6:d4:a8:71:0f:a7:04:63:
33:df:cc:2f:5a:91:6d:e0:d0:5a:9e:7f:c8:bb:98:
52:cc:48:16:7a:79:23:21:d2:b0:7c:5b:48:5a:55:
eb:7c:f9:55:9d:64:0e:f2:f2:a1:97:b2:58:1b:62:
e1:00:ed:85:f3:a9:58:b5:a9:21:bb:d6:8a:43:02:
5a:1d:de:6d:b4:84:de:2f:90:e9:5f:7e:2e:b4:3d:
fb:a3:cd:a4:c0:10:1f:92:52:9e:be:5c:ef:e5:5a:
54:32:39:64:de:e7:bf:a9:03:fe:a2:e9:a8:a7:65:
ff:9f:eb:91:ee:04:9c:38:9d:ad:31:b9:d2:3b:70:
31:29:8a:08:81:ba:ca:f3:f7:f1:76:35:62:ee:ba:
12:52:ac:4e:d7:93:15:d9:f5:3f:ff:06:ba:55:71:
27:ca:34:15:6e:fe:cf:04:01:41:6e:5e:02:86:40:
85:bb:a1:11:6a:a7:13:62:fd:2a:1e:00:c1:42:87:
3f:4e:b5:c7:3f:15:d7:49:33:ee:3e:1f:41:4d:99:
fe:59:37:d1:8b:95:7f:66:39:88:f9:e5:76:f1:be:
e5:8e:14:5f:e7:12:0d:b2:08:77:9d:b2:b0:e9:2b:
50:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8D:06:8A:72:9E:2E:BA:08:B7:7A:E8:43:87:71:87:C8:F6:C6:A5
X509v3 Authority Key Identifier:
keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:72:a6:a3:20:11:bf:f0:50:02:28:99:47:ab:85:fc:80:45:
39:bd:6e:35:e0:63:3d:a0:b3:0d:56:d1:b2:f4:90:4a:2f:3d:
18:b7:1b:ab:e7:31:ac:90:39:d5:fd:52:62:7c:a9:ea:17:8a:
0a:52:3b:35:e4:31:bf:04:59:fc:e8:ca:84:bc:9d:c2:03:88:
43:2e:09:39:21:74:2e:72:6b:ec:0f:2d:a0:10:b8:db:30:7e:
a0:6f:e8:df:1d:b8:8e:f7:b0:05:59:2b:1f:9f:b9:03:9b:c1:
85:e2:2b:66:22:8a:b9:1d:06:3d:3c:6f:f0:85:76:08:15:de:
d9:36:a2:6c:c1:00:41:af:00:ce:b0:24:1c:de:80:b4:f4:4f:
8f:04:d1:8f:fc:fc:63:f8:37:d0:96:b2:db:5a:38:e4:22:03:
87:7c:6e:64:6c:f2:9b:fe:fd:3e:61:c4:92:df:e9:9c:43:59:
73:31:0c:69:d5:a8:30:c4:53:2e:e3:3e:1c:3d:ad:f6:15:dd:
ad:18:da:b7:61:1e:ae:66:db:9b:75:ba:e2:75:e8:be:79:13:
53:f0:11:a4:6d:7c:53:0f:4d:06:c2:45:1e:3b:76:89:a4:84:
61:f3:48:4b:25:ee:84:47:0c:9a:6c:12:0d:2b:b3:83:63:c6:
a9:7a:25:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFRCDHT9P7My1z+fpl7xcAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTI4M2NjYmYxMTY5OGI2ZjIyZWMxN2I1ZjYzZTNhNTNl
NDExMjAwHhcNMjYxMDE4MjIwMDUzWhcNMjYxMDE5MjIwMDUzWjAzMTEwLwYDVQQD
Eyg4MjhkMDY4YTcyOWUyZWJhMDhiNzdhZTg0Mzg3NzE4N2M4ZjZjNmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzMqykETcdCYUo8nv6UeQS4ZtQoL
xtSocQ+nBGMz38wvWpFt4NBann/Iu5hSzEgWenkjIdKwfFtIWlXrfPlVnWQO8vKh
l7JYG2LhAO2F86lYtakhu9aKQwJaHd5ttITeL5DpX34utD37o82kwBAfklKevlzv
5VpUMjlk3ue/qQP+oumop2X/n+uR7gScOJ2tMbnSO3AxKYoIgbrK8/fxdjVi7roS
UqxO15MV2fU//wa6VXEnyjQVbv7PBAFBbl4ChkCFu6ERaqcTYv0qHgDBQoc/TrXH
PxXXSTPuPh9BTZn+WTfRi5V/ZjmI+eV28b7ljhRf5xINsgh3nbKw6StQ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKNBopyni66CLd66EOHcYfI9salMB8GA1UdIwQY
MBaAFNXig8y/EWmLbyLsF7X2PjpT5BEgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDIt
MGY2MmJiZDliNTY4LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82ZGFiZDAtNTU2NS00OTI1LWE3MDItMGY2MmJiZDliNTY4
LzEvMWVLRHpMOFJhWXR2SXV3WHRmWS1PbFBrRVNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnKmoyAR
v/BQAiiZR6uF/IBFOb1uNeBjPaCzDVbRsvSQSi89GLcbq+cxrJA51f1SYnyp6heK
ClI7NeQxvwRZ/OjKhLydwgOIQy4JOSF0LnJr7A8toBC42zB+oG/o3x24jvewBVkr
H5+5A5vBheIrZiKKuR0GPTxv8IV2CBXe2TaibMEAQa8AzrAkHN6AtPRPjwTRj/z8
Y/g30Jay21o45CIDh3xuZGzym/79PmHEkt/pnENZczEMadWoMMRTLuM+HD2t9hXd
rRjat2Eermbbm3W64nXovnkTU/ARpG18Uw9NBsJFHjt2iaSEYfNISyXuhEcMmmwS
DSuzg2PGqXolPQ==
-----END CERTIFICATE-----
Generated at Mon Oct 19 08:02:22 2026 by rpki-client