Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: FXJO23mWT2pJ2rhLR8quAcmmwrVyCki4alJAnt0SAjs=
Subject key identifier: 36:C4:72:BB:40:32:F4:FD:EC:DD:56:18:47:15:61:BA:C0:D3:00:26
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 01A0CB22607F90C98271C9DA823BC94463BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 11B4
Signing time: Tue 22 Sep 2026 22:00:22 +0000
Manifest this update: Tue 22 Sep 2026 22:00:22 +0000
Manifest next update: Wed 23 Sep 2026 22:00:22 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: 9gWDSbfqBsWGN9RtlE33EW+j1NTQ1sEvc2suDz0vXBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:60:7f:90:c9:82:71:c9:da:82:3b:c9:44:63:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Sep 22 22:00:22 2026 GMT
Not After : Sep 23 22:00:22 2026 GMT
Subject: CN=36c472bb4032f4fdecdd5618471561bac0d30026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f2:ea:de:8a:b7:b5:27:9a:96:cf:cf:75:bb:
ea:c0:02:08:7c:03:f3:ae:94:66:8d:67:16:f0:a3:
c4:f7:09:52:72:aa:ac:69:a6:aa:2f:4a:be:58:90:
83:22:a3:fa:27:85:18:0e:69:b5:1c:bc:d3:14:c2:
b7:c3:75:e6:e1:78:39:e4:48:9d:8d:ce:30:26:44:
64:aa:e3:a3:de:7a:0d:72:3f:c1:f6:62:ff:17:51:
72:6c:08:b7:28:eb:26:52:1a:8e:8b:95:c9:a5:aa:
a4:41:7b:bb:35:14:60:39:62:b8:8b:50:ad:f2:71:
7e:7d:e1:d7:92:7e:ab:64:11:2f:c2:7c:b0:cb:2e:
76:28:27:f6:c8:9e:68:91:40:0f:d2:2f:8a:4b:6c:
b1:86:d4:c7:e0:9f:7e:b5:bc:1a:b2:45:7f:6f:8a:
c2:c3:4e:05:dd:8e:fe:87:c9:01:73:9b:60:5b:4e:
6e:64:b5:d4:ce:4d:49:98:48:ac:25:47:cf:45:d7:
e8:11:5a:36:35:27:81:d7:a1:72:52:9c:53:2d:b3:
ad:dd:df:97:ec:9e:54:73:be:6d:56:81:ff:7e:b1:
b7:14:33:1f:1b:46:61:1c:a4:07:bc:d2:12:0a:f6:
e5:c5:60:c1:2f:bd:0b:3a:dd:66:f7:87:dd:a3:1f:
a5:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:C4:72:BB:40:32:F4:FD:EC:DD:56:18:47:15:61:BA:C0:D3:00:26
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f4:fa:e2:7b:89:7a:4a:80:b5:21:f0:cb:12:4f:6b:d0:70:
47:41:fb:16:b5:42:0f:f1:4b:f6:1e:75:52:fb:b7:81:1a:b3:
57:3e:e1:c4:ea:ff:ce:f1:aa:90:8d:c0:9b:a5:5e:0d:06:e0:
9c:73:ca:6b:89:30:02:d5:be:99:cc:cf:24:2f:92:cb:1b:30:
1e:ca:0b:26:ba:8f:66:7a:c0:b6:68:29:7e:dd:0c:7b:9b:77:
8b:d3:74:27:07:60:d1:e2:a5:ea:dd:78:96:fa:68:d4:58:28:
3a:dd:0d:20:ef:67:d7:6b:a3:ca:ac:99:5d:c9:85:3a:cf:fb:
c5:d2:79:f4:67:d6:f5:5e:d7:fb:1d:11:9b:b1:bf:de:d4:4b:
ce:12:4c:61:d5:02:0a:fb:f7:21:d3:66:07:71:bc:1b:47:e4:
7b:f5:c4:a4:aa:26:13:92:ec:17:10:79:d6:12:df:15:d3:cb:
8c:12:a2:75:68:d2:7a:09:48:73:f0:93:47:0c:8a:ea:20:5c:
85:b2:80:0f:d3:ac:e1:57:88:be:5e:10:2d:ef:2f:87:81:12:
32:eb:0c:8f:5c:04:dd:b6:ab:c6:e7:e1:68:8b:91:ab:eb:8b:
be:73:57:ee:fe:f6:a0:2f:48:70:b8:00:e3:a2:4a:36:23:44:
c0:82:06:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:28:52 2026 by rpki-client