Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: L0vuChFf6wkl/RCmB9V4wm9l9+Hi+qUXck1jItAKyn8=
Subject key identifier: B1:61:0F:56:EC:98:CB:14:61:C3:88:F1:E9:1B:F9:5F:BB:F2:AF:C7
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 01A00100DD98EB1F84ADB0E9C650287DC781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 16:00:28 +0000
Manifest this update: Fri 14 Aug 2026 16:00:28 +0000
Manifest next update: Sat 15 Aug 2026 16:00:28 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: Bsb4rl0csnJV1/kwb5RN6GIVKIFsWtXFuI9P8RG4yvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:dd:98:eb:1f:84:ad:b0:e9:c6:50:28:7d:c7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: Aug 14 16:00:28 2026 GMT
Not After : Aug 15 16:00:28 2026 GMT
Subject: CN=b1610f56ec98cb1461c388f1e91bf95fbbf2afc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:8d:93:62:35:72:cd:7e:3a:6d:fb:b7:60:
59:56:98:de:0c:43:de:8d:64:26:ce:27:5c:d1:63:
9f:06:fc:15:f4:19:3d:7f:c4:6d:fb:8d:4e:bf:9e:
52:d5:e3:e2:80:4f:1e:01:35:c0:cf:04:cc:3b:a7:
b5:f6:c0:f6:44:a7:6e:d4:0d:d2:5e:50:db:16:ed:
e3:26:3e:83:0a:c0:af:b1:cf:84:d1:08:73:af:13:
56:92:a4:e2:78:5b:65:f9:66:58:a6:c2:28:ac:d6:
0c:99:4a:57:11:61:56:85:88:5d:3f:e4:3b:84:f9:
b9:04:51:da:61:3d:9f:a9:ac:a8:ba:e4:6b:c9:10:
ea:55:7d:67:cc:97:1e:1a:6a:13:b3:ca:f8:3c:12:
73:d5:52:40:2a:c8:b9:af:e9:12:e8:6b:c6:c3:1e:
c3:75:af:2a:bc:0d:64:d4:62:36:35:60:44:c8:50:
3e:6b:af:28:03:b8:fd:93:3a:76:0f:d2:cb:5c:66:
39:c3:06:fe:55:e7:c9:c1:ad:b1:ef:be:f9:d0:dd:
d3:de:71:0c:c0:fa:00:eb:0a:1a:13:19:a3:61:bd:
5d:03:57:59:24:7e:22:a6:7f:51:c6:97:50:fe:78:
3c:8f:65:62:f7:06:e2:c8:41:66:42:ed:49:68:78:
66:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:61:0F:56:EC:98:CB:14:61:C3:88:F1:E9:1B:F9:5F:BB:F2:AF:C7
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:45:c6:af:08:24:d4:71:2a:45:aa:6d:e8:66:b6:ae:3b:1c:
14:4c:fd:78:3e:0f:3c:93:0c:f6:93:09:0f:8f:57:4e:35:e2:
3e:b1:3d:82:27:65:9f:7a:26:84:14:6c:6c:1f:02:90:ad:ee:
92:5b:5a:61:2e:e1:89:98:f7:d3:59:fb:a6:bf:83:8e:9e:6c:
9d:82:01:36:74:92:f5:74:97:96:93:c5:d5:34:df:5a:95:15:
8f:57:5f:8b:9f:7e:5a:ff:73:ba:ca:88:0b:96:85:24:6f:e3:
51:b0:99:d7:f7:1e:a5:23:4c:d4:2e:09:5f:ca:11:17:40:b5:
04:3f:62:78:06:23:8b:3f:76:da:a6:ab:66:25:0e:f4:6f:40:
e7:5d:10:49:d2:2f:85:c5:5f:05:64:c8:f8:9e:86:b9:b5:50:
7f:9e:48:21:22:07:80:56:87:77:6a:29:76:88:ac:f6:35:7d:
7b:47:0d:03:7b:c9:ed:fc:40:a4:0d:34:d8:79:4f:aa:5b:c6:
0d:dc:71:ff:ce:a4:0f:32:22:89:bb:37:dd:51:ee:e4:c1:57:
1e:5d:8a:8c:80:0c:6e:75:e2:85:03:d0:0f:d7:87:87:46:bc:
51:73:b2:1f:09:35:5c:cd:8f:03:21:cd:ce:25:fc:2b:75:84:
c8:99:a8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:23:04 2026 by rpki-client