Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
File: 1OXVJHHqh0idSKBiCEem1VbxY9s.mft (raw, json)
Hash identifier: TesPdPRxMGQWFPHBeGWbn7djs+YXnTf6pOIymp/OPOg=
Subject key identifier: D5:1E:FA:0F:57:41:6A:54:04:23:B3:AB:E1:08:AF:EE:37:B3:0C:D0
Authority key identifier: D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
Certificate issuer: /CN=d4e5d52471ea87489d48a0620847a6d556f163db
Certificate serial: 01A0CEFF2D3C2047E48E39B1BC4E62997FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
Manifest number: 19F9
Signing time: Wed 23 Sep 2026 16:00:24 +0000
Manifest this update: Wed 23 Sep 2026 16:00:24 +0000
Manifest next update: Thu 24 Sep 2026 16:00:24 +0000
Files and hashes: 1: 1OXVJHHqh0idSKBiCEem1VbxY9s.crl (hash: RZEMHMmvXqro0UOCJxiNnyAzMZLTXXLmLorUszZkw/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:ff:2d:3c:20:47:e4:8e:39:b1:bc:4e:62:99:7f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e5d52471ea87489d48a0620847a6d556f163db
Validity
Not Before: Sep 23 16:00:24 2026 GMT
Not After : Sep 24 16:00:24 2026 GMT
Subject: CN=d51efa0f57416a540423b3abe108afee37b30cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:68:31:6e:04:9d:b5:08:28:31:22:0c:c9:
36:d5:97:03:32:23:5e:72:89:33:10:9e:f7:88:7b:
42:0c:e4:28:91:51:7f:9f:d2:12:e2:3b:aa:3b:9c:
29:68:57:d0:9e:ed:c4:53:c1:86:63:d9:45:3b:43:
20:be:13:bf:63:8f:45:51:19:ab:8e:4d:09:ca:5c:
ea:c3:01:3f:5a:40:ad:b5:38:d8:89:84:c0:06:aa:
7f:d5:41:3c:80:d4:54:af:ee:6e:5d:1f:5d:77:a8:
4e:d1:1b:04:9c:b1:8a:35:4e:14:46:40:80:37:56:
79:37:04:63:c3:8e:7e:89:f2:bf:95:2a:37:08:f3:
fa:63:cc:d8:13:5a:98:c3:6d:47:b5:ac:11:e3:c7:
6e:c7:d9:9a:c7:d9:e6:41:65:d5:ad:d0:59:df:2f:
b2:9f:79:9d:99:90:80:64:aa:a3:dc:28:8d:64:ac:
49:81:c0:ea:30:78:27:75:aa:9c:f6:29:35:20:8e:
82:a5:2a:b7:e2:22:2c:d3:2f:75:c5:ff:5a:08:a1:
06:59:34:ee:f9:67:49:ab:06:96:6c:4c:84:e5:53:
24:d8:a4:d6:fa:3d:0e:e2:c6:c4:49:08:f3:da:63:
45:77:7e:ef:f6:2a:d3:7b:0f:bb:4b:0f:83:ac:3a:
e4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1E:FA:0F:57:41:6A:54:04:23:B3:AB:E1:08:AF:EE:37:B3:0C:D0
X509v3 Authority Key Identifier:
keyid:D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:08:82:11:48:19:e1:2e:03:6f:f9:7f:a3:0a:ae:ba:bd:e8:
f4:6c:6a:ce:f8:b1:99:92:fd:7f:ab:38:5e:92:f0:76:c8:6c:
ce:ed:46:48:a0:4c:9d:04:00:5c:99:31:3c:f9:fc:dd:e8:c6:
2b:3c:38:53:f9:c1:18:c9:3f:b4:14:12:32:45:03:fc:ea:33:
bc:82:c4:51:67:f4:a2:ec:f0:2e:10:af:af:0c:c3:11:13:57:
90:de:f7:57:54:ac:71:5e:9b:ea:78:7a:41:0d:c8:2a:99:26:
90:db:d9:15:f4:3f:25:8d:f9:b1:ec:d1:3c:92:17:aa:a5:6e:
9a:3c:e5:d7:8a:42:f5:87:1c:7c:fe:59:24:c6:99:c3:db:8c:
62:07:6f:92:53:24:84:dc:cf:d3:5e:12:5b:ef:42:3c:94:e2:
f6:8d:62:16:e4:a3:02:55:fa:fe:75:3d:a2:26:72:1e:c7:8b:
19:84:aa:ff:6c:ac:d9:7a:b3:c7:2a:94:e2:86:21:0f:81:7e:
53:b0:eb:9f:f2:f5:76:8a:ea:fc:be:38:f0:8f:c5:1b:30:9c:
81:ae:e4:26:75:44:94:2e:14:97:6b:04:8b:ea:7c:fb:b5:e1:
f1:87:de:47:2b:52:48:e5:8c:39:20:a2:1a:c3:9b:a3:41:9b:
3e:00:d9:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDO/y08IEfkjjmxvE5imX+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ZTVkNTI0NzFlYTg3NDg5ZDQ4YTA2MjA4NDdhNmQ1NTZm
MTYzZGIwHhcNMjYwOTIzMTYwMDI0WhcNMjYwOTI0MTYwMDI0WjAzMTEwLwYDVQQD
EyhkNTFlZmEwZjU3NDE2YTU0MDQyM2IzYWJlMTA4YWZlZTM3YjMwY2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUdoMW4EnbUIKDEiDMk21ZcDMiNe
cokzEJ73iHtCDOQokVF/n9IS4juqO5wpaFfQnu3EU8GGY9lFO0MgvhO/Y49FURmr
jk0JylzqwwE/WkCttTjYiYTABqp/1UE8gNRUr+5uXR9dd6hO0RsEnLGKNU4URkCA
N1Z5NwRjw45+ifK/lSo3CPP6Y8zYE1qYw21HtawR48dux9max9nmQWXVrdBZ3y+y
n3mdmZCAZKqj3CiNZKxJgcDqMHgndaqc9ik1II6CpSq34iIs0y91xf9aCKEGWTTu
+WdJqwaWbEyE5VMk2KTW+j0O4sbESQjz2mNFd37v9irTew+7Sw+DrDrkRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUe+g9XQWpUBCOzq+EIr+43swzQMB8GA1UdIwQY
MBaAFNTl1SRx6odInUigYghHptVW8WPbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU9YVkpISHFoMGlkU0tCaUNFZW0xVmJ4WTlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9kODA4ZDgtMDNlZC00NGM0LTliMWMt
MDE4MmNiMDJjODAwLzEvMU9YVkpISHFoMGlkU0tCaUNFZW0xVmJ4WTlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9kODA4ZDgtMDNlZC00NGM0LTliMWMtMDE4MmNiMDJjODAw
LzEvMU9YVkpISHFoMGlkU0tCaUNFZW0xVmJ4WTlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuAiCEUgZ
4S4Db/l/owquur3o9GxqzvixmZL9f6s4XpLwdshszu1GSKBMnQQAXJkxPPn83ejG
Kzw4U/nBGMk/tBQSMkUD/OozvILEUWf0ouzwLhCvrwzDERNXkN73V1SscV6b6nh6
QQ3IKpkmkNvZFfQ/JY35sezRPJIXqqVumjzl14pC9YccfP5ZJMaZw9uMYgdvklMk
hNzP014SW+9CPJTi9o1iFuSjAlX6/nU9oiZyHseLGYSq/2ys2XqzxyqU4oYhD4F+
U7Drn/L1dorq/L448I/FGzCcga7kJnVElC4Ul2sEi+p8+7Xh8YfeRytSSOWMOSCi
GsObo0GbPgDZXQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:21:13 2026 by rpki-client