Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
File: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json)
Hash identifier: QXcXSkjQ0ShdNQg8+PJmugYWvoNj9mICZUm6wh2iZos=
Subject key identifier: 63:00:F1:DB:B0:74:40:35:2A:71:02:66:4C:80:41:38:80:44:84:A5
Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
Certificate issuer: /CN=d6107622fd26072e2b9936caf275704350226ca0
Certificate serial: 01A000CA1C1AB0B2CA87C59D41CF4F86009B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
Manifest number: 19FD
Signing time: Fri 14 Aug 2026 15:00:40 +0000
Manifest this update: Fri 14 Aug 2026 15:00:40 +0000
Manifest next update: Sat 15 Aug 2026 15:00:40 +0000
Files and hashes: 1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: ZuZfZ3wKukNKsCMmR98HGrgKYv23f4sTirANC4plRBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:1c:1a:b0:b2:ca:87:c5:9d:41:cf:4f:86:00:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0
Validity
Not Before: Aug 14 15:00:40 2026 GMT
Not After : Aug 15 15:00:40 2026 GMT
Subject: CN=6300f1dbb07440352a7102664c804138804484a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:9a:cc:e7:78:6d:03:71:42:cc:50:ff:fd:
cd:85:a4:65:e9:79:e0:cd:bf:6b:a5:a6:8b:c2:83:
5b:26:eb:9e:08:b1:5c:5c:a9:31:de:d2:4d:66:00:
5e:35:49:3c:7a:4c:cf:f7:99:33:c1:9c:c2:a8:13:
5a:22:cd:38:b2:42:21:ba:db:d1:ac:c3:e6:eb:59:
2a:c1:dc:60:15:bd:2e:d1:23:8a:a2:35:63:f6:f8:
c2:3d:e7:fb:ba:0d:75:2c:ca:ed:8d:fc:19:88:13:
81:85:04:19:d8:02:a9:8a:39:cd:4e:32:b5:9a:59:
9f:f6:2c:49:b2:a5:25:51:35:db:bf:84:38:f7:c1:
4e:eb:7d:d0:0a:17:7a:0f:d2:56:a8:8c:97:21:2a:
9c:1b:7a:ec:84:58:cd:5b:a2:38:84:04:63:6c:98:
80:74:1e:a2:d7:aa:b9:08:84:1f:d9:d4:04:fb:2b:
20:f3:0c:7d:a2:cd:ff:16:46:a3:3a:9b:3a:55:e0:
49:5a:68:5a:d8:a0:14:8e:00:2a:aa:d6:48:b1:f0:
02:a3:19:97:e9:49:d3:3a:f6:62:e3:f3:be:5c:65:
ca:ee:45:86:81:1b:e4:32:ff:e2:dc:df:16:08:74:
4c:04:20:6f:a3:83:45:1e:15:21:e5:c7:29:bc:d6:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:00:F1:DB:B0:74:40:35:2A:71:02:66:4C:80:41:38:80:44:84:A5
X509v3 Authority Key Identifier:
keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:97:b3:88:e6:34:44:25:5d:4b:b0:0c:06:69:f0:29:e8:46:
7b:ea:c6:26:03:fe:2e:8a:56:62:ec:d4:7e:0e:b8:93:86:f2:
23:10:a6:50:28:38:61:6e:8e:c0:57:3d:21:70:a8:b0:69:58:
81:f4:76:37:c2:57:a4:0b:36:95:c6:78:21:a9:c0:bb:62:bf:
a7:83:08:06:97:9c:52:2b:27:f5:23:4d:0e:6d:3b:b0:35:7a:
1b:f9:76:bc:d9:ee:ca:80:1b:89:62:13:f8:53:73:c0:4c:52:
42:95:0f:f3:2b:61:16:b1:ad:fa:07:18:84:a9:9b:1f:34:90:
5a:27:bd:1d:00:4f:42:36:5e:78:4a:a4:eb:a2:71:39:87:41:
da:72:67:de:a1:c1:05:e6:bb:83:ba:7c:1a:5f:f4:c7:0d:f0:
95:ed:03:1b:9d:a5:74:b0:09:6c:d8:10:7a:d0:c2:a2:5e:fe:
90:f1:4e:3e:34:f5:9a:f8:37:35:b0:db:e5:0c:c3:a3:05:20:
c4:47:f4:92:50:dc:a9:2b:b3:30:d7:3f:78:01:9c:bc:61:cf:
7e:2c:e0:2a:3d:83:72:e9:27:88:ac:3e:8b:67:5d:b1:43:d9:
5c:22:de:e1:9c:b6:cc:97:89:41:43:84:4c:76:19:54:57:1e:
d1:b1:1d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:06 2026 by rpki-client