Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
File: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft (raw, json)
Hash identifier: LMrT8g7DGi52qyWwUl70fJLMHC4d+ExhG32NjPZXDeM=
Subject key identifier: C2:68:89:E6:C0:9E:C3:A3:B9:74:F3:0D:B6:4D:EB:34:48:A7:5C:8E
Authority key identifier: D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
Certificate issuer: /CN=d6107622fd26072e2b9936caf275704350226ca0
Certificate serial: 01A13D80EA7898E6151C38ABEAFDA226F371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
Manifest number: 1AA1
Signing time: Thu 15 Oct 2026 03:00:21 +0000
Manifest this update: Thu 15 Oct 2026 03:00:21 +0000
Manifest next update: Fri 16 Oct 2026 03:00:21 +0000
Files and hashes: 1: 1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl (hash: fS7w9Bu89SJitlWLVyAbMlAzkFZpf6Z303LWMzBM4JE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:80:ea:78:98:e6:15:1c:38:ab:ea:fd:a2:26:f3:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6107622fd26072e2b9936caf275704350226ca0
Validity
Not Before: Oct 15 03:00:21 2026 GMT
Not After : Oct 16 03:00:21 2026 GMT
Subject: CN=c26889e6c09ec3a3b974f30db64deb3448a75c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:af:05:46:7f:81:55:12:89:c9:33:ce:47:c6:
1a:67:dc:df:5a:0e:a0:c3:cf:fb:4c:e7:cc:cb:35:
8b:01:c2:8f:3c:3e:6a:05:0c:39:ad:a8:73:9d:c8:
cb:8e:96:71:43:21:f4:4f:6f:04:e3:66:01:ed:36:
7a:c7:f1:cf:19:b1:cc:dd:d6:e6:ae:11:65:63:26:
b6:66:36:eb:98:41:98:01:9d:12:a2:92:58:31:4d:
ae:85:f9:01:74:76:f2:49:fb:b9:47:ff:18:0c:4e:
ad:f6:1a:d7:cd:d8:28:d6:c4:47:06:cf:cd:70:9e:
c4:87:c0:b6:5e:c5:dc:0d:f0:97:4b:7b:7d:58:e1:
f1:4e:ae:68:7e:96:a6:d4:9f:22:0e:d2:34:6a:7d:
2b:51:a0:3f:dc:d5:1a:f6:2b:e1:2a:7d:a1:0c:86:
11:60:a7:69:50:5c:ab:35:17:6f:c3:66:31:8f:86:
23:38:5a:9d:07:be:c9:00:38:b1:dd:60:84:f3:ed:
d3:1e:db:3c:4c:68:65:ad:b8:02:9a:a1:77:91:40:
70:42:03:1c:e2:06:cd:6c:e6:cb:87:1d:2e:81:83:
ed:01:16:a2:bf:45:48:0d:84:d9:ee:cd:90:5d:8d:
39:54:96:c3:fb:a4:6d:f2:fc:56:f9:e4:e6:6b:ac:
bf:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:68:89:E6:C0:9E:C3:A3:B9:74:F3:0D:B6:4D:EB:34:48:A7:5C:8E
X509v3 Authority Key Identifier:
keyid:D6:10:76:22:FD:26:07:2E:2B:99:36:CA:F2:75:70:43:50:22:6C:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ab8046-a93f-4335-bd2b-2d8b6889fd9c/1/1hB2Iv0mBy4rmTbK8nVwQ1AibKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a5:d1:76:7d:eb:44:f3:34:51:eb:68:3d:b2:8b:f5:e7:40:
6a:91:a1:b7:b2:cb:f2:6c:c6:62:6e:0b:f9:32:65:1b:1b:bf:
b3:0b:8f:40:8f:98:7d:eb:fd:12:a1:5b:d7:58:3c:fb:70:97:
31:cf:65:21:00:05:0a:a4:c5:c3:9e:6a:8f:54:28:9a:4e:c6:
27:2d:b9:f9:7c:9d:28:8e:8e:8f:12:1c:da:49:f5:8b:f8:ef:
95:45:12:36:5a:7e:6d:4f:f3:f5:3e:61:0a:1f:f2:d2:8c:42:
04:08:f5:54:14:6a:4d:95:04:bb:1b:8f:ea:8f:67:ff:15:c0:
53:80:5c:0e:27:05:48:f6:af:a7:df:3e:0b:6b:e9:72:8f:3b:
de:fa:fe:15:e0:fe:18:93:d3:2c:ef:47:d6:55:73:16:26:85:
18:61:02:0f:e0:f3:54:4f:e1:2b:9f:bb:3f:d7:ec:8d:78:44:
3b:5a:b0:29:26:c2:73:56:0e:64:49:fb:16:ce:83:76:a1:9e:
1c:0f:c5:4e:a4:7b:dc:35:26:9c:17:ee:98:92:81:56:18:70:
dd:5a:5d:2e:c1:4c:b2:7e:f3:41:15:60:23:c6:b6:82:8d:62:
a7:f2:7a:c7:3a:dd:0f:09:5b:3c:18:cd:6e:32:11:b4:b2:c8:
82:0a:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:39 2026 by rpki-client