Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: c0M5Ybyh5wUUeyWX0hAkUtW5/jrMh13/pAzhbkwGTIk=
Subject key identifier: EB:0C:1E:7E:0C:E6:15:4B:FC:CC:FE:C6:6B:7E:6D:60:8F:73:14:00
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 01A13FA7BC54CA2B0AE6550C9DCA81F5BF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 13:01:59 +0000
Manifest this update: Thu 15 Oct 2026 13:01:59 +0000
Manifest next update: Fri 16 Oct 2026 13:01:59 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: nAaYz7bzxWJi/1Dtk8Z3o4Xpf3F5f3S9x5cPDCUKjgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:bc:54:ca:2b:0a:e6:55:0c:9d:ca:81:f5:bf:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: Oct 15 13:01:59 2026 GMT
Not After : Oct 16 13:01:59 2026 GMT
Subject: CN=eb0c1e7e0ce6154bfcccfec66b7e6d608f731400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:c4:9a:ed:28:a6:fd:ef:e6:83:3a:d5:f6:
10:5e:eb:4d:2a:a4:56:80:8c:bf:3e:fd:67:22:4c:
7d:01:75:62:7f:98:f8:76:80:95:38:df:d4:46:a6:
11:8d:7c:ea:e9:8c:1b:0c:cf:3a:dd:24:40:b5:30:
16:f6:98:a7:1c:da:22:97:37:c4:dc:4b:0a:11:cb:
00:3f:02:ed:5e:a9:0c:79:62:8c:a7:9b:0c:e0:d5:
f6:a5:12:af:db:8e:2b:15:1b:86:59:a2:3d:a3:be:
7b:a6:d6:3f:12:5f:12:a1:ad:ea:a7:58:5f:91:e2:
a6:91:03:76:5f:bd:7d:37:e4:0b:38:9c:a3:6b:45:
e7:7a:3f:00:58:52:86:28:25:cb:ef:01:2c:e4:0f:
55:37:a9:96:e2:fd:fc:07:37:fe:b4:c1:e2:b7:13:
e7:d0:30:19:09:74:6d:f1:e3:24:15:44:0a:90:de:
b4:5e:b3:e4:da:65:03:35:fd:6e:68:30:30:4f:f7:
bd:c9:c1:ae:12:06:41:0f:b2:6c:cb:1e:bf:4d:32:
b8:e4:b5:69:a2:68:8a:a7:d9:11:5d:60:7a:35:74:
6f:dd:04:d3:65:95:7f:2b:d0:8f:f7:ec:0d:24:f1:
9f:af:ef:fc:89:6a:bc:53:f7:6a:78:de:4b:7b:cc:
2b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0C:1E:7E:0C:E6:15:4B:FC:CC:FE:C6:6B:7E:6D:60:8F:73:14:00
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:43:7d:d0:9e:ef:e6:1b:ac:b2:7d:a6:22:25:9f:94:86:c4:
26:a0:e3:7e:62:4d:c0:fa:68:3c:a0:82:3e:05:bd:c2:7a:0f:
aa:7f:45:3c:97:fd:bc:b3:2c:c7:d5:48:6c:96:b1:5a:80:dd:
34:e4:88:43:22:1b:9f:7e:9c:4f:21:85:8f:69:1c:af:57:5b:
6e:cc:b5:81:da:e2:20:6d:8e:d4:31:6d:63:28:e6:32:a7:4a:
ca:c9:3b:dc:ac:e4:3d:ab:e0:f2:e7:9c:0c:df:71:50:0d:58:
db:a8:44:5e:41:e7:62:5e:aa:00:05:63:d5:ce:6d:73:88:3f:
56:b9:c7:40:50:24:e3:8f:25:cb:3c:ed:df:19:06:fc:0d:ab:
93:82:99:60:39:1c:a6:ef:0b:5a:09:96:bb:8e:44:96:f5:6b:
12:d7:39:96:9d:61:93:62:e9:81:97:a1:b4:5a:0c:8a:82:57:
3c:c3:af:ba:40:76:06:05:f5:5f:c8:1d:f9:4f:a4:62:02:d9:
e5:a6:00:8e:ea:16:76:dd:ff:0f:20:8f:05:e5:80:13:a3:9a:
65:39:8c:55:de:1d:87:ca:c6:49:2d:08:a1:3d:79:ff:5f:67:
e8:8e:fd:a9:2c:9a:46:7b:13:88:81:02:f0:c8:99:d8:ea:a6:
60:94:e7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:21:05 2026 by rpki-client