Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
File: 1OXVJHHqh0idSKBiCEem1VbxY9s.mft (raw, json)
Hash identifier: i3y/rEYNj3rPtsmJHt+30MFj7triC9FpU7u3aZMH/iY=
Subject key identifier: 51:71:6A:A3:35:03:55:F0:89:97:7A:45:FF:AC:FB:F3:06:5D:44:85
Authority key identifier: D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
Certificate issuer: /CN=d4e5d52471ea87489d48a0620847a6d556f163db
Certificate serial: 019D984FAB4EC01EF9FEA2F7403D5BA0A550
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
Manifest number: 184F
Signing time: Thu 16 Apr 2026 22:00:51 +0000
Manifest this update: Thu 16 Apr 2026 22:00:51 +0000
Manifest next update: Fri 17 Apr 2026 22:00:51 +0000
Files and hashes: 1: 1OXVJHHqh0idSKBiCEem1VbxY9s.crl (hash: 7lXlfeavcfk3GjA/hI8WOAHyN1sI/k2cSVD9AEZK0ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:ab:4e:c0:1e:f9:fe:a2:f7:40:3d:5b:a0:a5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e5d52471ea87489d48a0620847a6d556f163db
Validity
Not Before: Apr 16 22:00:51 2026 GMT
Not After : Apr 17 22:00:51 2026 GMT
Subject: CN=51716aa3350355f089977a45ffacfbf3065d4485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:51:74:16:55:b3:12:aa:cc:dd:c5:9f:fb:69:
eb:dc:3b:3d:5b:90:65:76:7a:f5:f4:11:04:97:95:
ac:ef:10:be:c7:d8:29:cc:d9:44:e9:fb:0b:c8:94:
76:df:97:38:e9:8a:b4:3d:56:cc:b1:e3:72:04:52:
ea:62:cc:6f:50:6e:54:23:e5:32:ff:0c:da:59:e3:
9e:19:04:2f:90:d1:43:ff:79:b9:15:d4:dd:46:02:
1a:93:6e:ea:fe:c6:4c:34:52:da:6e:8e:d3:d3:02:
e6:a0:5a:d5:7c:45:78:54:24:e7:b9:e1:2d:fe:79:
fc:a3:e1:81:f8:f6:f2:c6:a9:90:da:8d:96:15:e2:
0a:85:72:0d:b6:03:55:59:42:e6:87:b5:43:9f:c9:
06:34:a2:89:7d:5f:0c:04:ea:ea:33:4b:b8:a9:aa:
d3:81:68:fa:70:43:e2:8c:d4:a2:64:0a:75:81:76:
82:c4:6a:a2:cd:97:75:39:df:af:95:70:10:4a:29:
7c:60:4b:91:35:71:c4:4e:b7:d0:30:b1:52:9b:b1:
f3:f3:cc:3f:16:ee:fb:5d:75:90:11:57:8a:ef:a4:
3b:a1:6a:a6:ec:de:41:f8:23:4e:53:a1:0f:59:69:
d3:71:a8:4d:70:6d:3d:5b:c4:d3:49:c4:28:b5:1e:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:71:6A:A3:35:03:55:F0:89:97:7A:45:FF:AC:FB:F3:06:5D:44:85
X509v3 Authority Key Identifier:
keyid:D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:32:29:7f:55:1e:41:94:93:54:cd:41:f0:e8:7f:6a:29:ef:
80:ba:b3:22:53:e0:d5:1d:6d:a1:ac:c5:ad:4d:e1:45:74:49:
c1:4c:ac:f4:13:0d:26:07:60:72:18:a6:2b:ae:97:95:8d:d9:
0c:aa:aa:35:b5:2c:05:93:a5:99:96:93:80:48:d0:38:9d:98:
5d:6c:bb:77:94:6b:ef:c7:d3:f9:f5:fc:db:f5:45:98:e2:d4:
61:0a:39:21:40:04:5a:8b:08:2d:56:b4:a1:24:1c:d8:59:c0:
78:38:b2:9e:2a:a6:65:0e:de:d7:8a:17:e3:b6:73:4f:7e:d5:
f0:89:14:38:81:30:1c:d2:65:84:35:46:a9:5d:1f:9a:d3:99:
98:70:3c:82:15:52:4d:c1:11:3b:55:f3:66:f0:ce:bd:e1:d2:
2a:c1:47:25:0f:d8:ae:2a:02:a3:52:fc:11:14:37:26:ff:9c:
37:0a:d2:47:36:39:e7:47:7f:fd:dc:eb:21:bd:67:9e:b1:08:
42:90:60:06:6a:37:b6:29:5d:00:49:20:b8:a1:5e:78:69:0f:
46:04:ea:ed:05:80:55:a0:2f:e7:ea:24:58:f9:e0:ce:8f:d2:
73:9a:2a:51:e0:7e:ae:de:7a:75:b3:2a:2a:34:44:8d:72:0a:
56:fc:39:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YT6tOwB75/qL3QD1boKVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZTVkNTI0NzFlYTg3NDg5ZDQ4YTA2MjA4NDdhNmQ1NTZm
MTYzZGIwHhcNMjYwNDE2MjIwMDUxWhcNMjYwNDE3MjIwMDUxWjAzMTEwLwYDVQQD
Eyg1MTcxNmFhMzM1MDM1NWYwODk5NzdhNDVmZmFjZmJmMzA2NWQ0NDg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1F0FlWzEqrM3cWf+2nr3Ds9W5Bl
dnr19BEEl5Ws7xC+x9gpzNlE6fsLyJR235c46Yq0PVbMseNyBFLqYsxvUG5UI+Uy
/wzaWeOeGQQvkNFD/3m5FdTdRgIak27q/sZMNFLabo7T0wLmoFrVfEV4VCTnueEt
/nn8o+GB+PbyxqmQ2o2WFeIKhXINtgNVWULmh7VDn8kGNKKJfV8MBOrqM0u4qarT
gWj6cEPijNSiZAp1gXaCxGqizZd1Od+vlXAQSil8YEuRNXHETrfQMLFSm7Hz88w/
Fu77XXWQEVeK76Q7oWqm7N5B+CNOU6EPWWnTcahNcG09W8TTScQotR6E9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFxaqM1A1XwiZd6Rf+s+/MGXUSFMB8GA1UdIwQY
MBaAFNTl1SRx6odInUigYghHptVW8WPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU9YVkpISHFoMGlkU0tCaUNFZW0xVmJ4WTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kODA4ZDgtMDNlZC00NGM0LTliMWMt
MDE4MmNiMDJjODAwLzEvMU9YVkpISHFoMGlkU0tCaUNFZW0xVmJ4WTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kODA4ZDgtMDNlZC00NGM0LTliMWMtMDE4MmNiMDJjODAw
LzEvMU9YVkpISHFoMGlkU0tCaUNFZW0xVmJ4WTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyDIpf1Ue
QZSTVM1B8Oh/ainvgLqzIlPg1R1toazFrU3hRXRJwUys9BMNJgdgchimK66XlY3Z
DKqqNbUsBZOlmZaTgEjQOJ2YXWy7d5Rr78fT+fX82/VFmOLUYQo5IUAEWosILVa0
oSQc2FnAeDiyniqmZQ7e14oX47ZzT37V8IkUOIEwHNJlhDVGqV0fmtOZmHA8ghVS
TcERO1XzZvDOveHSKsFHJQ/YrioCo1L8ERQ3Jv+cNwrSRzY550d//dzrIb1nnrEI
QpBgBmo3tildAEkguKFeeGkPRgTq7QWAVaAv5+okWPngzo/Sc5oqUeB+rt56dbMq
KjREjXIKVvw5rg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:58 2026 by rpki-client