Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File: 1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier: ni3Ldd8ojgC4IcnhXMhvoennOaLiCk5AytVxBXuYm/Y=
Subject key identifier: 5C:1F:BC:DD:F9:01:83:6F:28:A3:9B:32:8C:AE:0B:4E:D9:CD:D0:C3
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer: /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial: 019D37BFF5CA4057F9BB0F434A8DD852CB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 04:00:20 +0000
Manifest this update: Sun 29 Mar 2026 04:00:20 +0000
Manifest next update: Mon 30 Mar 2026 04:00:20 +0000
Files and hashes: 1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: Ufg+dNWCbalPHP+wGOasoaS7ztRe3vhx7tYFkHnI2xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f5:ca:40:57:f9:bb:0f:43:4a:8d:d8:52:cb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Validity
Not Before: Mar 29 04:00:20 2026 GMT
Not After : Mar 30 04:00:20 2026 GMT
Subject: CN=5c1fbcddf901836f28a39b328cae0b4ed9cdd0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:bb:91:37:a9:58:f8:a3:71:73:2a:17:38:27:
29:2f:4b:73:70:b8:b2:eb:56:60:ee:8e:04:c4:12:
07:fa:6d:a0:63:7c:7a:16:ff:a4:0b:87:7d:46:6a:
e2:f4:02:20:a1:34:95:5e:b4:e9:0e:ee:33:31:fa:
71:66:96:05:a1:9c:93:8e:71:0c:23:ba:4c:4c:55:
b7:d4:54:a8:19:53:a0:0a:90:78:ca:61:e4:ca:7d:
63:b2:4d:06:f2:d9:63:35:55:d8:40:31:89:55:16:
df:4d:33:39:83:b8:dc:f5:1b:8d:44:c8:76:6d:ef:
fd:5c:f6:42:fe:7d:6a:81:87:e7:8e:9c:f1:02:26:
3b:89:14:9d:83:12:f4:32:c9:d5:96:30:3e:32:7c:
40:1b:e0:b8:05:d0:db:79:9c:22:ba:75:d0:ab:45:
11:5f:fa:f9:7c:5c:10:ad:3d:94:4c:85:a9:8d:a5:
30:b9:bf:13:0c:df:5d:93:74:54:98:13:36:e4:31:
58:fd:bc:93:b7:ac:55:e7:b1:e6:fd:a7:bc:db:ec:
29:fb:0a:fa:0d:30:47:f2:62:de:b9:8e:f7:b0:51:
59:90:0e:00:de:b4:d4:cf:a3:af:70:20:31:a9:5f:
02:b5:6e:6b:5b:8e:84:ac:68:a5:94:b6:a2:d3:90:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1F:BC:DD:F9:01:83:6F:28:A3:9B:32:8C:AE:0B:4E:D9:CD:D0:C3
X509v3 Authority Key Identifier:
keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f8:73:fd:77:82:df:d1:a0:8e:28:77:10:9c:69:b9:75:42:
8d:40:91:77:0d:3c:27:2c:1d:65:55:58:60:29:be:66:3c:83:
bc:e8:bc:48:43:3a:c9:bb:85:93:9a:0e:53:06:0f:d0:f4:e1:
22:5a:f6:29:be:b4:af:d5:e3:a4:4a:fd:52:e1:7a:ba:fc:5d:
f1:89:03:f2:4e:11:84:0c:ef:41:75:5c:56:dc:94:1b:cb:62:
c6:5a:fd:d2:2b:f6:da:1f:5a:a9:7b:cb:86:7c:ef:6d:b1:a1:
6a:a5:95:8b:b3:79:dc:58:e6:98:29:a1:98:5f:bd:92:c8:63:
29:47:00:55:77:63:f0:66:c4:d9:e4:47:24:a8:d3:a0:57:b5:
78:3c:25:29:d1:13:d8:e8:e7:9e:58:ad:a7:9f:c3:a5:fc:72:
d9:53:ab:36:7f:7c:01:f1:6d:26:a4:66:20:63:88:0c:61:5f:
fb:0f:f6:55:94:b2:eb:81:79:a0:0b:f2:91:70:50:20:07:af:
69:30:cf:61:81:1b:30:e7:3e:3c:36:fb:75:a8:e2:c9:0d:a0:
0a:f6:aa:e1:dd:8b:be:c5:2b:ba:98:24:4c:55:d7:a6:90:d0:
61:56:14:b0:19:07:65:5c:e0:1f:73:5b:a6:87:82:ed:8c:d0:
9b:99:66:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:40 2026 by rpki-client