Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
File: 1OXVJHHqh0idSKBiCEem1VbxY9s.mft (raw, json)
Hash identifier: fpB05g9QckPcxxnuZrGUd5/qoFZJJWuoPlZ6rNOC1WQ=
Subject key identifier: 76:9B:F4:CA:14:77:20:C1:84:B1:1D:E8:1E:45:68:5F:3E:ED:57:FA
Authority key identifier: D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
Certificate issuer: /CN=d4e5d52471ea87489d48a0620847a6d556f163db
Certificate serial: 019CAAC604125E5182CDC7075746D64792A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
Manifest number: 17D4
Signing time: Sun 01 Mar 2026 19:00:29 +0000
Manifest this update: Sun 01 Mar 2026 19:00:29 +0000
Manifest next update: Mon 02 Mar 2026 19:00:29 +0000
Files and hashes: 1: 1OXVJHHqh0idSKBiCEem1VbxY9s.crl (hash: plCfV7MHOaywOESx5ilbVqesl2Ygqg38Ov5BnmhytqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:04:12:5e:51:82:cd:c7:07:57:46:d6:47:92:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e5d52471ea87489d48a0620847a6d556f163db
Validity
Not Before: Mar 1 19:00:29 2026 GMT
Not After : Mar 2 19:00:29 2026 GMT
Subject: CN=769bf4ca147720c184b11de81e45685f3eed57fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0d:72:45:93:e4:95:02:97:30:a5:91:2d:3b:
ec:78:0a:ea:29:05:27:3c:0d:9d:12:69:84:22:0d:
c7:1e:bd:cd:b3:d8:ff:e7:f3:e6:bd:0e:3b:30:25:
5c:fc:ac:04:3a:74:e7:26:b4:78:2e:44:45:ca:7e:
35:8d:33:7d:94:1a:75:08:e6:e1:29:87:de:f9:22:
07:54:a1:9d:a4:d9:de:06:0b:8a:ea:42:c1:eb:5a:
6d:70:d9:69:74:bd:94:02:fa:32:12:75:d0:4b:db:
52:4a:15:7e:e1:8e:fc:6e:b4:5b:56:b3:f6:0f:6f:
19:11:21:3b:d0:5a:2d:b4:1f:58:e4:f1:ca:9a:23:
2d:e6:7c:80:d6:df:0b:cc:84:7e:53:99:7a:15:fd:
a0:17:02:62:3b:35:25:5f:6c:28:ea:71:4f:7c:59:
99:12:5a:9a:e5:46:85:35:55:4b:88:e9:ef:45:ac:
25:bc:69:97:b8:1e:ef:55:19:ae:96:93:df:5e:d3:
e1:ba:cc:dc:45:5f:06:8b:a0:ea:76:38:54:67:fb:
90:05:ee:91:5e:82:b2:c4:c9:63:99:bd:3d:27:0d:
23:b2:f3:06:89:91:b1:79:b3:a6:d6:08:b5:97:99:
b3:12:42:24:ba:b7:56:aa:54:a4:e0:49:d3:d0:c4:
e7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9B:F4:CA:14:77:20:C1:84:B1:1D:E8:1E:45:68:5F:3E:ED:57:FA
X509v3 Authority Key Identifier:
keyid:D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:5c:52:32:10:90:95:e2:38:3d:c9:9a:f3:6e:de:f7:79:b9:
92:2d:ec:48:ac:01:a4:01:18:16:39:71:39:4b:01:0b:77:09:
81:41:94:71:1f:40:8d:94:cb:a6:6b:81:5d:a7:62:c6:14:de:
17:bc:ee:03:5e:14:30:c3:6c:be:15:b9:1f:1e:7c:31:87:75:
0f:06:f3:77:a4:be:b8:38:50:69:fb:69:27:03:7d:97:1a:e6:
52:42:7b:9f:3e:93:83:17:a4:08:53:15:a6:a9:4d:f5:ad:26:
b9:9f:3b:c9:49:f1:a7:68:0e:92:2a:42:c5:60:32:c7:44:03:
80:c0:ed:63:a6:64:81:97:ba:8b:50:21:f6:61:f2:50:dc:96:
3d:a8:fd:bf:0e:03:0b:a6:df:61:ea:17:bc:37:bf:09:c8:18:
f2:4f:b1:a9:68:35:11:1c:e8:9f:fa:da:9d:55:08:63:39:35:
fa:73:d8:ec:e6:7b:ce:bc:24:9c:ee:d0:a3:dc:ee:e1:ca:a9:
74:30:6c:6a:29:b2:3e:fa:7b:aa:f4:31:11:16:e7:b6:d2:54:
f1:65:72:ea:5d:42:ce:f5:ae:77:ce:b8:ca:b8:ae:9b:5c:a8:
c8:59:1b:74:fa:9c:e2:91:be:26:fa:08:dc:8c:af:56:66:3a:
5c:96:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:48 2026 by rpki-client