Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: hqxiUJUU/6YNnh9Qurix24cBFDSaqY9h5FFKjYG+j/Y=
Subject key identifier: F2:1A:16:02:7B:2E:45:7E:35:8F:EB:75:70:82:3C:9A:4A:B4:24:F0
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 019F9248200D02F9F751CE0AD3272E7F2E81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 1112
Signing time: Fri 24 Jul 2026 04:00:27 +0000
Manifest this update: Fri 24 Jul 2026 04:00:27 +0000
Manifest next update: Sat 25 Jul 2026 04:00:27 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: IHxTbk3SzLSxqyJiMPd6ep+1OG9WkAD7NLSdI66jVjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:20:0d:02:f9:f7:51:ce:0a:d3:27:2e:7f:2e:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Jul 24 04:00:27 2026 GMT
Not After : Jul 25 04:00:27 2026 GMT
Subject: CN=f21a16027b2e457e358feb7570823c9a4ab424f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:8f:6e:b4:2e:a7:fd:16:19:48:07:5d:52:
4c:c3:37:d6:8f:ee:0a:4d:e1:f2:2e:20:73:c2:5a:
d3:1b:cb:c2:37:70:05:51:ee:16:1b:8e:30:7e:d9:
f1:21:e0:2f:53:ba:a1:2a:c1:e0:8c:74:39:5c:0c:
39:5e:a9:74:7c:ac:ea:b8:6e:7b:36:27:97:16:da:
cb:1d:63:c1:af:da:1c:ec:41:03:52:9b:d5:96:11:
05:7f:fd:b6:d5:a4:5d:a6:09:57:a5:43:1e:95:f6:
2e:d7:c7:e9:ca:a6:3a:75:bc:be:63:8b:a3:2f:fe:
66:df:39:df:d9:3d:8b:6e:45:0b:93:7c:72:92:fb:
a8:e1:18:0c:1d:cd:d9:65:fc:8f:04:9e:44:4a:50:
fb:6a:59:c9:c6:51:17:c1:72:94:0c:2c:b3:a3:c2:
f3:3b:d4:d7:d9:0c:89:a7:8f:76:4d:02:c9:07:3e:
de:ac:67:db:98:8e:fc:71:41:01:a0:3d:22:83:31:
cc:2e:5f:62:a0:10:82:92:ef:b8:c1:be:7b:72:0d:
5e:07:31:71:ab:e0:8a:1f:bb:ec:9a:7d:92:cf:2b:
dc:c8:17:c0:e6:bf:16:62:2c:e3:09:e4:31:70:63:
cf:30:b5:41:1e:90:d7:b3:52:51:ab:c8:f7:b0:20:
53:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1A:16:02:7B:2E:45:7E:35:8F:EB:75:70:82:3C:9A:4A:B4:24:F0
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:2e:9c:89:b0:40:f2:20:d5:fd:cb:fb:d9:2f:ce:5f:06:25:
88:aa:5b:a0:18:54:7d:6b:15:a0:8c:f1:1e:fa:ef:23:20:8a:
84:b0:95:94:fc:0d:bf:68:dc:d7:af:9f:b3:9b:ef:f5:e0:3b:
47:22:a3:5c:cc:5a:e9:de:86:6f:bb:29:17:f8:25:fd:b9:86:
e4:9f:88:91:d3:84:22:72:8c:72:70:72:41:d3:c3:04:67:d3:
88:4f:d9:28:9d:82:2f:34:40:53:0e:5b:9b:58:60:3d:59:47:
d3:59:a2:f2:ff:18:70:3e:a8:b9:63:db:2e:d7:12:00:da:f4:
26:17:db:a7:21:27:e9:a5:b3:cd:6b:20:00:3b:0b:ae:a4:74:
4b:9d:2f:6a:c5:8d:52:e9:b4:c6:c6:88:bc:8a:35:60:2f:a6:
b7:b6:f1:bf:38:f6:23:48:ac:4b:f6:66:be:76:ef:1a:b5:38:
d2:c9:7d:b4:77:c4:fd:ff:0c:66:86:28:f2:68:f5:82:e0:54:
bf:32:be:b6:0d:ba:75:9f:d5:70:0d:6d:d6:5f:fd:25:e6:49:
34:b6:ab:cf:e2:26:30:1e:75:a3:d7:48:19:7c:a4:29:6a:69:
cd:0c:86:fe:1a:f4:8f:89:4f:fa:8e:27:fd:20:bb:a1:96:82:
4b:fe:bd:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:53:20 2026 by rpki-client