Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
File: 1OXVJHHqh0idSKBiCEem1VbxY9s.mft (raw, json)
Hash identifier: GbtalKMCEqKHRERAa/QeL+IdNG3YWfG6cKxbgRxergo=
Subject key identifier: EB:7C:0E:54:53:67:5F:27:07:0E:1C:FA:12:1F:75:12:C3:82:A9:B8
Authority key identifier: D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
Certificate issuer: /CN=d4e5d52471ea87489d48a0620847a6d556f163db
Certificate serial: 019FA974DCFCA03C378C8EFCA9030A55EF3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
Manifest number: 1961
Signing time: Tue 28 Jul 2026 16:00:35 +0000
Manifest this update: Tue 28 Jul 2026 16:00:35 +0000
Manifest next update: Wed 29 Jul 2026 16:00:35 +0000
Files and hashes: 1: 1OXVJHHqh0idSKBiCEem1VbxY9s.crl (hash: 2i1v9SV9v4ppcg04hZ/WkIcD/2x1zg51SWqiJ9fFK30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:dc:fc:a0:3c:37:8c:8e:fc:a9:03:0a:55:ef:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e5d52471ea87489d48a0620847a6d556f163db
Validity
Not Before: Jul 28 16:00:35 2026 GMT
Not After : Jul 29 16:00:35 2026 GMT
Subject: CN=eb7c0e5453675f27070e1cfa121f7512c382a9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:ee:42:72:bf:5f:5e:9e:74:ec:f8:ac:56:
25:9b:cf:6e:62:13:41:e2:00:af:d4:a3:29:f9:ba:
f4:27:4c:58:d5:6c:5f:3a:41:2a:68:0e:ae:4a:fc:
a8:b7:79:8c:f4:34:5d:7e:37:94:c6:01:cf:65:af:
96:c6:02:39:87:f0:c2:95:b0:2f:3e:e7:88:12:73:
47:e1:3e:ea:5c:95:6a:eb:2e:fd:25:2c:96:68:a4:
11:c8:20:50:de:56:9d:05:94:d6:ca:c5:f4:eb:cb:
84:8a:01:e7:b4:f4:74:9d:8d:3c:e9:a4:5e:3b:ad:
35:2d:bc:57:7f:ae:5c:c9:43:4f:d1:92:b3:f8:7d:
d5:4c:7c:5a:0c:28:59:37:70:cb:dc:7a:1b:62:71:
25:e4:54:49:ae:4d:70:15:e1:05:14:70:3c:37:d9:
fd:a5:67:b3:31:89:43:4c:e4:ad:8a:6e:ab:9e:7e:
8f:57:4c:08:83:5c:9b:44:ac:ac:a6:98:28:02:83:
ab:ea:9c:b5:70:ed:c6:06:6a:fa:2c:83:a9:c6:7d:
77:66:3f:d0:60:a7:0b:2f:e6:7f:8b:98:7d:5b:f3:
91:b8:e9:4e:66:af:88:07:d3:2c:ee:57:7c:01:b9:
e2:5e:7d:8e:93:5f:93:27:38:98:db:9d:72:02:d7:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7C:0E:54:53:67:5F:27:07:0E:1C:FA:12:1F:75:12:C3:82:A9:B8
X509v3 Authority Key Identifier:
keyid:D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:85:6f:e2:6e:e3:ea:0c:e0:cc:a6:3b:b2:20:f4:b4:05:f8:
21:8f:60:ce:3f:24:fb:d1:a7:e2:f9:86:02:ab:f4:61:2c:53:
48:1b:48:88:b0:62:c3:46:c8:86:ad:c9:8e:e1:b2:7d:22:d7:
93:9d:34:fb:d1:2d:f7:04:d2:10:3c:4e:00:2d:c2:d4:a2:79:
d7:a6:38:d4:6c:6d:a4:76:61:38:b0:4c:54:18:e8:0c:ba:e7:
34:0b:37:f7:3f:f9:7c:3c:e2:de:b6:d8:fa:5a:57:90:d3:aa:
97:e0:87:82:26:2e:71:8b:ad:b0:f9:8e:8f:e7:66:13:00:e3:
bb:11:35:20:93:1d:34:a7:a6:34:7d:77:56:6c:de:b1:de:34:
bd:f2:fb:07:ff:85:21:82:a4:26:10:c4:2f:81:9d:9e:ee:d4:
57:49:1c:3f:64:81:4d:dd:a1:fa:3c:f0:b1:a8:87:c1:3b:63:
1c:3f:e4:17:11:88:be:67:32:d7:d2:b0:ae:c6:72:0b:bf:13:
57:34:e1:1e:72:55:0b:9d:88:51:7a:c8:1c:e7:bd:48:d9:d0:
c7:0a:2f:2f:45:dd:26:ec:f5:2f:12:0f:62:1c:c2:d2:8a:74:
ea:0e:6a:db:ab:30:8c:9d:2d:40:19:d6:9b:72:6c:ba:dd:a5:
0d:7e:ff:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:05:01 2026 by rpki-client