Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
File: 1OXVJHHqh0idSKBiCEem1VbxY9s.mft (raw, json)
Hash identifier: kSElKyTytyU7wth3w/+FEZXlg2BszffNb+98+cFy6Yc=
Subject key identifier: 34:B9:9B:6E:38:95:17:C9:EE:A7:EA:72:0A:DA:92:29:61:FD:3E:6F
Authority key identifier: D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
Certificate issuer: /CN=d4e5d52471ea87489d48a0620847a6d556f163db
Certificate serial: 019EBDDA381D9A3851CDC812C76EC4ECAD6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
Manifest number: 18E7
Signing time: Fri 12 Jun 2026 22:00:55 +0000
Manifest this update: Fri 12 Jun 2026 22:00:55 +0000
Manifest next update: Sat 13 Jun 2026 22:00:55 +0000
Files and hashes: 1: 1OXVJHHqh0idSKBiCEem1VbxY9s.crl (hash: SOCiw3dJKRj8YzkTmQuiK3rAUJuceai6+V59xjl8Gus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:38:1d:9a:38:51:cd:c8:12:c7:6e:c4:ec:ad:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e5d52471ea87489d48a0620847a6d556f163db
Validity
Not Before: Jun 12 22:00:55 2026 GMT
Not After : Jun 13 22:00:55 2026 GMT
Subject: CN=34b99b6e389517c9eea7ea720ada922961fd3e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:9d:d2:6e:e9:f8:07:13:ac:41:3d:49:6a:
a2:39:c8:5e:60:20:b5:0a:2a:2f:31:c7:a6:0d:9f:
16:26:ba:a5:b6:a4:a7:f5:1c:26:0b:50:48:ea:cf:
63:ed:60:45:8a:77:73:d5:2a:a5:db:4d:70:7c:3b:
b3:01:ca:fe:a8:34:02:44:6c:07:ef:40:4c:7e:45:
05:c6:a0:9a:db:bf:7a:48:78:1f:fe:11:7e:eb:d6:
59:9e:19:3f:f1:1f:b2:f2:a7:04:2a:b9:4e:2a:9c:
3b:51:32:a4:7e:6c:ab:33:49:e6:52:3d:48:99:e6:
1d:14:c8:43:e5:87:d5:c9:7d:13:18:7f:92:32:de:
c1:9d:6d:40:65:60:3b:62:2c:bd:45:7e:57:b7:34:
54:46:f9:9e:ea:40:82:db:78:20:39:cb:42:45:ef:
80:31:11:3a:20:26:74:d9:b0:25:1c:3b:d3:94:84:
24:e4:ca:37:1d:e7:7c:32:a3:ce:ad:c2:86:67:66:
55:88:23:56:6d:6f:fe:27:d4:1a:3a:ee:b5:87:94:
a4:d3:c9:34:2b:c2:ae:87:c2:f3:f1:36:d5:40:88:
4e:37:c1:86:53:92:77:5d:b3:10:7f:6c:27:e2:5a:
f2:a6:0d:41:5b:4b:fd:67:75:66:5e:8c:93:62:85:
86:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B9:9B:6E:38:95:17:C9:EE:A7:EA:72:0A:DA:92:29:61:FD:3E:6F
X509v3 Authority Key Identifier:
keyid:D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:d7:25:e2:b5:45:89:f7:fd:1e:43:2c:72:43:91:2b:59:56:
3a:3d:d1:f4:8f:e8:0e:e7:7f:6c:a4:cc:af:44:65:1b:eb:91:
76:95:5d:bf:2b:f4:50:6a:d6:38:d1:ec:be:89:1d:08:26:b1:
58:03:13:c4:81:2b:75:ae:b2:e8:16:0f:b6:4a:ef:0e:ca:c6:
bf:c8:d5:0c:19:11:c8:2a:53:da:93:c5:40:94:ff:eb:89:3d:
5b:be:9b:ac:7f:d8:a2:e9:67:a0:0f:a4:d6:fb:2b:c2:8e:59:
4e:9b:38:3d:ff:3c:de:33:3c:00:1d:28:f2:f2:0f:b3:59:81:
de:ee:3a:17:12:46:d3:ce:63:2e:f8:40:e3:33:45:e0:8a:88:
07:ab:f7:ca:2f:29:f1:b9:d3:fa:3d:b1:10:b4:4c:9d:72:1d:
74:95:c2:fa:70:a2:cf:e5:a0:63:dd:8d:b2:1d:ed:7a:3d:85:
01:ec:f8:8b:70:86:ee:cb:86:ce:3b:a7:31:0b:57:38:d9:51:
8a:75:6f:cf:3c:0a:2e:05:ac:b1:68:ed:44:19:be:6d:5d:16:
60:c0:5c:fe:6d:92:c4:21:47:e6:c9:35:67:39:ea:47:f5:60:
51:df:6e:5b:f0:91:28:65:dd:8f:91:15:b2:20:a3:6c:46:50:
32:81:91:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:56:38 2026 by rpki-client