Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
File: 1OXVJHHqh0idSKBiCEem1VbxY9s.mft (raw, json)
Hash identifier: 3/DKG8APtLaf/0jFlWyN1oYFHn2f82Y6c5YAhH35o8Q=
Subject key identifier: 20:FD:7A:18:B5:88:E9:CA:D3:E4:4C:C7:24:46:0B:B7:60:0A:F2:ED
Authority key identifier: D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
Certificate issuer: /CN=d4e5d52471ea87489d48a0620847a6d556f163db
Certificate serial: 019D284E05868E700F27939FA1F4477DD33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
Manifest number: 1815
Signing time: Thu 26 Mar 2026 04:01:34 +0000
Manifest this update: Thu 26 Mar 2026 04:01:34 +0000
Manifest next update: Fri 27 Mar 2026 04:01:34 +0000
Files and hashes: 1: 1OXVJHHqh0idSKBiCEem1VbxY9s.crl (hash: vrTCfxvhkp9cHCulJDBUeA4JDV8THTqPo6H1CRcEyxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:05:86:8e:70:0f:27:93:9f:a1:f4:47:7d:d3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e5d52471ea87489d48a0620847a6d556f163db
Validity
Not Before: Mar 26 04:01:34 2026 GMT
Not After : Mar 27 04:01:34 2026 GMT
Subject: CN=20fd7a18b588e9cad3e44cc724460bb7600af2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7a:25:46:cc:e9:eb:15:98:3c:80:52:e6:76:
4b:2c:c2:59:8a:68:4d:72:7e:9e:2a:2a:16:21:3b:
68:e9:b3:f1:46:1a:b0:af:b1:1d:8c:d3:48:29:31:
83:a3:b2:1c:8a:42:52:df:60:85:4a:12:44:d9:33:
50:a8:61:81:a7:c1:78:f8:b8:67:88:b3:25:b6:5b:
9f:3d:79:fe:ed:6b:f0:0a:b3:c2:19:3e:3c:20:97:
36:dd:ef:e6:86:2a:5a:18:05:6f:6a:1a:83:8b:c1:
5c:8a:85:1b:e8:09:a0:08:88:ef:76:a2:22:e4:e0:
87:2d:32:0b:fc:0c:2b:3b:de:66:10:5a:d4:be:1f:
8d:f0:78:17:c9:a0:8d:5b:bf:2d:56:13:2f:51:12:
de:9c:7f:f7:62:ab:0b:e8:fc:ba:5f:13:29:44:20:
98:28:3e:05:1d:1e:1f:87:10:51:e6:f5:5b:4e:45:
4e:42:c8:30:3b:23:1b:86:b3:3d:1c:4c:39:0e:52:
5f:4c:35:02:16:78:f6:51:bb:8f:fa:14:54:f7:f9:
3a:50:a5:96:32:63:e4:86:c3:16:01:41:32:4e:6f:
ee:81:46:35:48:a5:09:30:d1:ea:ac:49:ef:9b:08:
d9:4d:99:db:63:44:c9:3a:a7:7b:a1:37:9a:f4:84:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FD:7A:18:B5:88:E9:CA:D3:E4:4C:C7:24:46:0B:B7:60:0A:F2:ED
X509v3 Authority Key Identifier:
keyid:D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:3b:e2:d7:cc:df:6b:21:ff:29:fe:6c:c0:79:7a:90:31:45:
45:67:3b:f5:dd:90:35:d9:03:9a:e3:13:f0:b3:a1:11:2e:84:
ce:b1:12:1c:70:cd:6b:01:ae:06:0f:eb:20:8f:dd:23:b0:9d:
87:7f:2e:db:36:67:48:b2:4f:e0:a6:c0:de:15:e8:4b:a7:79:
04:a5:f0:ba:a2:cd:24:b5:2a:57:bb:75:a0:6f:83:08:bb:86:
a3:85:b3:ec:81:9b:78:ed:f6:47:0f:28:6d:cd:77:77:26:d1:
b8:88:93:07:f2:27:c5:5a:9b:8c:82:75:50:2e:ad:4b:ee:8a:
35:bc:0a:13:54:11:46:ec:11:8d:cf:e4:58:c9:83:88:ab:43:
f1:ea:b2:1a:01:07:a5:f6:65:03:94:05:2c:5c:fd:77:6f:f3:
f0:60:55:6e:ff:f0:8d:57:64:d3:d6:f2:91:ab:fd:5a:f7:1e:
8b:51:55:0c:f0:8d:72:ee:46:a3:aa:d5:92:41:e8:ca:3c:9a:
0b:8e:80:8a:99:76:d9:e7:0f:4a:38:0a:e7:fc:05:0a:e0:be:
6f:59:04:2b:d2:b5:d4:4f:e4:d9:b2:80:ae:d8:f2:e0:04:54:
b1:38:61:e8:7e:3b:47:ed:2d:82:5c:ea:f8:ce:c0:b6:6e:62:
0d:d9:95:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:34 2026 by rpki-client