Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
File: 1OXVJHHqh0idSKBiCEem1VbxY9s.mft (raw, json)
Hash identifier: 2Yk4sf3XV51ziMAvVKEF60Q2PbTLpi4L9wnzmTEN1Y8=
Subject key identifier: 46:39:5C:13:6A:1B:1C:73:08:7B:E6:DB:ED:27:22:56:FA:05:10:B2
Authority key identifier: D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
Certificate issuer: /CN=d4e5d52471ea87489d48a0620847a6d556f163db
Certificate serial: 01A1DF4CA5AB8F1A8E75551138A9D987D709
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
Manifest number: 1A86
Signing time: Sun 15 Nov 2026 13:01:44 +0000
Manifest this update: Sun 15 Nov 2026 13:01:44 +0000
Manifest next update: Mon 16 Nov 2026 13:01:44 +0000
Files and hashes: 1: 1OXVJHHqh0idSKBiCEem1VbxY9s.crl (hash: dVYqsRhSSWM/KMLtSvZLiFXRDZhlcwuBykCjqeFz1GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:4c:a5:ab:8f:1a:8e:75:55:11:38:a9:d9:87:d7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e5d52471ea87489d48a0620847a6d556f163db
Validity
Not Before: Nov 15 13:01:44 2026 GMT
Not After : Nov 16 13:01:44 2026 GMT
Subject: CN=46395c136a1b1c73087be6dbed272256fa0510b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:a0:3d:bf:45:5a:b4:41:11:86:b7:1a:d1:49:
27:b0:4f:d4:64:4d:7f:68:b0:c5:00:44:ac:65:a5:
46:fa:ea:03:1e:bb:32:dc:37:1e:01:3a:b6:fa:73:
12:6d:75:f6:71:d7:9c:bb:c5:60:a1:af:39:57:7a:
b5:3e:c8:ab:58:a3:8d:5c:85:9b:10:be:66:11:3a:
41:43:f5:89:c2:a6:9f:50:6e:89:20:61:eb:58:6f:
a3:e5:4c:bf:02:56:5e:29:42:94:9f:72:4b:47:3c:
2f:7d:6e:ad:77:aa:1d:61:bf:4d:b2:fb:bd:fe:b8:
24:a0:9d:0c:2b:3d:67:39:3c:52:a9:56:f8:ad:3f:
63:22:5b:32:52:9f:c7:0d:89:cf:37:b6:b7:a9:08:
44:6b:36:3f:67:5f:b2:e8:ed:6c:e3:3e:b7:f9:6d:
49:2c:2d:25:25:3a:8b:9b:99:44:bf:23:0f:9c:f8:
5f:0d:7c:4c:29:29:45:ac:6a:2d:26:b9:f5:b7:1d:
ce:27:7c:e6:4d:b7:fe:87:d0:ec:a4:25:25:4c:a0:
d0:78:e4:65:82:a0:40:89:35:6f:0b:64:ef:15:de:
79:ff:55:dd:27:4f:09:57:d1:56:77:19:ae:57:43:
03:3e:33:c2:9d:67:e0:d5:19:04:f0:4c:c3:b0:6c:
c2:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:39:5C:13:6A:1B:1C:73:08:7B:E6:DB:ED:27:22:56:FA:05:10:B2
X509v3 Authority Key Identifier:
keyid:D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ea:3e:6e:c3:46:21:11:59:1c:44:ed:0a:d7:0f:b1:ec:5f:
9e:d6:36:e2:41:b1:3a:08:cc:e5:0a:d6:89:3c:88:01:54:18:
75:f0:71:26:08:75:1e:11:a0:97:8c:0c:69:d0:4b:31:43:7e:
e7:dd:d4:45:ab:b7:da:c0:20:01:d4:64:72:53:3f:47:61:00:
90:fb:8e:9d:9b:20:8d:63:4d:11:9d:7c:93:f9:61:c0:84:31:
da:e4:41:0a:48:df:ee:40:45:80:9e:b9:09:0a:e2:59:a6:34:
56:f7:25:c6:3d:06:c6:56:9c:c6:e0:a7:29:e1:1a:3b:c8:65:
a0:42:01:1b:16:12:f9:f2:85:0f:9a:6b:2f:e3:42:cd:35:0b:
d4:f2:8c:1e:fd:33:c3:b9:29:31:b0:af:35:bd:f2:d4:e8:90:
1f:fa:50:ea:37:fc:83:ec:56:ec:a3:7a:d6:62:d7:70:1b:87:
49:9f:14:94:04:fb:0f:bc:a9:98:f2:1f:3d:d9:65:57:73:f6:
9d:60:7f:95:5a:ee:58:12:78:2b:bf:1d:ff:b2:d9:01:78:31:
04:e1:c3:b6:84:92:03:83:b0:8b:5e:15:c3:07:73:0f:b2:0c:
b4:87:2e:75:01:79:ea:de:2a:6c:e6:bf:60:a9:fd:aa:b3:8d:
4b:89:1f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:33:17 2026 by rpki-client