Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: 0Cvv1/3OVQq/XmD3QWa9aD8gTTlaTDZMIZQPDg6C7mA=
Subject key identifier: 85:EF:09:46:B6:B7:E8:A6:2E:44:CD:FF:FB:8C:EC:F0:A7:F6:84:C5
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 01A14B3D3705E9835FB3B2C6343FBA9FB9CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 0FDB
Signing time: Sat 17 Oct 2026 19:01:05 +0000
Manifest this update: Sat 17 Oct 2026 19:01:05 +0000
Manifest next update: Sun 18 Oct 2026 19:01:05 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: LtcAGXKNfvGfvCNFOXpUkzyk099F8owWJs2KRUlvlhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4b:3d:37:05:e9:83:5f:b3:b2:c6:34:3f:ba:9f:b9:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: Oct 17 19:01:05 2026 GMT
Not After : Oct 18 19:01:05 2026 GMT
Subject: CN=85ef0946b6b7e8a62e44cdfffb8cecf0a7f684c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d8:8c:1f:73:4e:00:69:44:66:4c:fb:c5:c0:
cd:88:8e:d4:0f:04:a4:77:10:59:30:cf:46:3e:52:
d4:63:d4:68:95:1e:ed:5e:14:19:93:11:e0:f1:c6:
e1:64:ab:e0:f1:ba:1d:4e:7c:d4:7e:a2:72:1a:c2:
37:b0:41:e9:e0:cb:12:5c:a8:1c:b6:d9:a7:c4:ca:
2d:df:bf:4f:d2:ab:bf:1e:91:e5:26:bf:25:53:a0:
b3:fb:2c:6e:93:24:20:b6:e8:d8:27:64:6a:fc:a6:
40:db:82:1e:98:00:19:55:af:cb:a2:ba:de:b5:f0:
33:e6:0e:24:0a:bf:b2:d7:e4:03:e5:22:72:51:08:
fc:58:92:7c:9a:97:35:1d:1d:7b:93:77:00:f6:99:
4d:13:7f:ae:17:a0:2c:e1:c4:8c:42:11:92:80:4f:
87:eb:72:6d:e2:96:de:9c:b4:3f:05:4c:f8:6a:7f:
57:2e:ed:50:58:80:90:44:04:58:60:88:1e:f3:ef:
79:85:b1:ed:87:cb:ea:6d:5c:1b:06:8c:38:d5:84:
23:fe:c5:d0:af:bb:22:4e:f5:20:90:ff:8c:95:33:
76:95:ad:95:34:fe:0d:d8:46:a9:ed:46:f3:5e:11:
ac:20:be:88:a5:ef:1e:05:5b:29:a0:61:8b:22:ca:
01:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EF:09:46:B6:B7:E8:A6:2E:44:CD:FF:FB:8C:EC:F0:A7:F6:84:C5
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:09:bd:e4:db:98:ea:11:20:9c:57:1a:87:c7:46:ac:9a:2b:
61:f5:fd:3c:76:48:2e:55:6c:b0:60:10:31:b8:67:06:e0:b4:
03:e2:91:28:f3:18:87:48:4e:73:2a:6f:3d:ee:cc:4d:83:a4:
fc:b5:7d:42:cf:61:03:a3:05:fe:65:2a:fe:55:62:22:8a:97:
dd:5d:8d:07:67:ab:69:33:bf:b7:59:45:41:4f:32:40:9f:1a:
e9:8f:94:50:2d:d2:5f:22:49:76:e3:40:17:fc:65:2e:31:4c:
bf:81:5b:2e:ff:95:1f:2c:a7:f8:e2:db:13:b4:da:83:1e:36:
56:b2:20:af:aa:49:76:ce:d2:e0:06:aa:8a:3e:06:31:e3:af:
54:79:ad:e8:51:08:e3:81:3c:f0:7a:d4:d8:44:e8:6e:97:da:
a8:89:f7:29:bd:62:86:b7:d0:3d:0a:2e:4a:9b:a1:b2:10:2a:
f0:53:17:5a:e7:b3:1e:82:4c:1f:53:65:a0:55:65:2c:60:f9:
3c:be:02:28:bc:ba:f8:62:ca:bd:24:4e:65:38:85:35:ef:12:
66:da:49:1a:00:5a:65:46:4f:63:7c:64:6e:d0:a8:08:8b:c0:
6e:01:7c:dc:04:da:15:7e:9e:b1:90:6c:88:30:52:67:7c:39:
bf:54:04:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 04:42:14 2026 by rpki-client