Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
File: 1OXVJHHqh0idSKBiCEem1VbxY9s.mft (raw, json)
Hash identifier: pd5haO0/V3zh61lg/HtP2ybgw7Ck2JP+3QAaqK9gVJo=
Subject key identifier: 42:5B:7A:B5:FD:FD:54:2A:5D:64:DB:67:A1:E3:0A:73:38:87:7D:18
Authority key identifier: D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
Certificate issuer: /CN=d4e5d52471ea87489d48a0620847a6d556f163db
Certificate serial: 01A0C17AD4D7A79D79E57C0521B817C1DFD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
Manifest number: 19F2
Signing time: Mon 21 Sep 2026 01:00:47 +0000
Manifest this update: Mon 21 Sep 2026 01:00:47 +0000
Manifest next update: Tue 22 Sep 2026 01:00:47 +0000
Files and hashes: 1: 1OXVJHHqh0idSKBiCEem1VbxY9s.crl (hash: fM5kbge2RO5g+8Gnl+R5jEsMiLb1bc6ptlTOflEswDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:d4:d7:a7:9d:79:e5:7c:05:21:b8:17:c1:df:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e5d52471ea87489d48a0620847a6d556f163db
Validity
Not Before: Sep 21 01:00:47 2026 GMT
Not After : Sep 22 01:00:47 2026 GMT
Subject: CN=425b7ab5fdfd542a5d64db67a1e30a7338877d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:4d:14:2d:96:ed:73:0e:ef:bb:ba:7a:56:
33:5d:bf:76:2b:29:11:aa:95:ea:6e:41:24:20:bc:
22:9c:15:8c:33:4a:51:d2:b8:8b:fc:e4:14:05:ef:
8d:72:73:df:8f:d1:dc:6a:74:91:9c:53:bb:f6:b2:
2e:95:df:59:38:47:ec:0e:01:59:c8:44:5d:03:38:
b3:0e:d4:f4:ce:13:44:50:45:19:f6:8d:cc:04:c7:
fb:16:6c:2c:b1:2d:9f:c1:d5:2c:6f:ff:e8:22:c5:
c7:21:c7:2a:d1:e5:7e:3b:ba:a1:db:b5:e5:7b:35:
5c:8d:a8:18:af:1d:3a:a0:d8:4a:d5:5e:25:12:d9:
ce:4b:2a:af:0d:5f:0a:4e:6d:dd:e1:61:c1:f9:8c:
55:9a:e3:57:4c:c9:c0:88:9b:cc:a4:05:6b:98:58:
b8:fc:28:8a:77:64:f2:04:f2:ab:3c:ab:71:4a:d7:
34:2d:65:51:5b:3b:b2:c4:56:21:97:fd:d1:2a:a9:
3a:89:e2:9e:ab:fd:7b:9b:ef:7e:09:9f:d3:54:6e:
8d:4c:78:f2:f5:80:1e:a1:e1:c3:99:0b:dc:23:4c:
99:bc:ef:de:25:cd:f7:07:8f:1d:b0:c1:c7:1e:6e:
4e:73:19:79:0e:3a:97:07:96:11:35:37:4d:fc:a0:
4e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5B:7A:B5:FD:FD:54:2A:5D:64:DB:67:A1:E3:0A:73:38:87:7D:18
X509v3 Authority Key Identifier:
keyid:D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4b:8f:97:43:9a:7a:fd:6f:4b:51:09:ce:69:34:35:20:31:
a0:b4:63:a8:a6:43:60:01:19:75:39:c8:1c:2f:40:05:d3:98:
1a:e9:bb:c1:40:ff:5b:c5:fd:58:96:14:0c:fe:58:94:f3:b6:
46:3e:4b:f3:92:6b:49:b1:f1:7e:69:3f:bb:a5:e6:14:18:01:
d9:0f:4d:a4:82:4d:15:ed:6d:af:50:8c:13:18:72:9f:ae:64:
a4:e5:9a:97:c8:5d:6d:8d:ca:65:ee:55:ce:73:75:35:e5:ec:
d4:18:24:24:b0:ed:44:c1:f7:92:70:14:d8:11:07:a2:bf:cd:
77:0d:90:fb:a5:25:1c:06:a8:f2:f3:8d:ad:3f:16:9c:25:ae:
a2:1b:6e:f3:0f:1e:2e:ed:9f:b5:c1:ea:38:f6:52:51:e4:1d:
bf:8b:0c:0c:51:c0:a2:04:8e:e6:a3:f6:25:2b:95:af:2c:bc:
7c:9c:ec:2b:9a:24:bc:89:20:12:38:dd:36:fd:40:82:39:2b:
7e:d9:db:ba:c0:7c:56:4c:ce:b3:3b:02:4c:d0:c7:88:d8:97:
0b:62:4d:df:90:31:01:81:d3:80:06:18:cb:eb:68:fa:e2:d2:
e5:09:13:bf:f6:47:5f:37:b5:37:d3:36:a5:24:d5:b2:20:75:
aa:43:0c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:48:43 2026 by rpki-client