Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
File: 1OXVJHHqh0idSKBiCEem1VbxY9s.mft (raw, json)
Hash identifier: i1rLcoMB52unpEIN0X2I2OnEj38m6mvojxW9C492zpE=
Subject key identifier: 5E:5E:7F:E4:C7:68:BA:F5:C0:67:8B:16:E8:7E:24:27:72:EB:A5:C9
Authority key identifier: D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
Certificate issuer: /CN=d4e5d52471ea87489d48a0620847a6d556f163db
Certificate serial: 019E1D90698D0F01F117F3BABB55D3B0D35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
Manifest number: 1894
Signing time: Tue 12 May 2026 19:01:03 +0000
Manifest this update: Tue 12 May 2026 19:01:03 +0000
Manifest next update: Wed 13 May 2026 19:01:03 +0000
Files and hashes: 1: 1OXVJHHqh0idSKBiCEem1VbxY9s.crl (hash: jvta95enNq/xlykLOfsARQVkk1mjvwRvncuChhqMOZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:69:8d:0f:01:f1:17:f3:ba:bb:55:d3:b0:d3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4e5d52471ea87489d48a0620847a6d556f163db
Validity
Not Before: May 12 19:01:03 2026 GMT
Not After : May 13 19:01:03 2026 GMT
Subject: CN=5e5e7fe4c768baf5c0678b16e87e242772eba5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:a8:da:ff:1f:88:2c:8a:b6:4f:d3:bb:03:
4e:39:63:8c:0c:f8:2a:66:b5:79:0d:72:08:f0:c0:
b1:f4:05:d9:82:28:65:c6:46:1e:b3:e6:3c:61:c1:
a0:b9:68:b5:e9:21:7d:d2:f5:51:3c:69:a3:a0:90:
27:e9:7b:aa:cb:93:14:17:95:cd:88:a3:27:f5:98:
49:03:d3:2e:3c:01:fb:64:4b:f7:fe:71:6a:81:3c:
63:6b:c5:5d:f3:3e:06:48:b1:c4:bc:eb:c1:7e:45:
ba:20:a3:b5:ca:1a:7e:d7:95:6c:2b:cd:84:16:53:
58:05:9d:89:14:89:cf:12:91:f0:62:10:2d:ca:ea:
c4:90:7a:87:44:0c:25:e1:f3:b8:4a:88:a2:d1:6f:
38:2a:b7:58:73:ec:fa:ab:e8:dd:aa:f1:ce:24:ef:
ef:ce:ec:2f:5f:ee:02:bd:5f:a6:92:e6:8a:31:a6:
7b:b3:3d:5b:22:1c:a2:30:cd:ce:59:e6:01:55:eb:
ee:00:86:27:19:89:61:4a:7e:0b:ed:e9:f3:ff:f9:
1a:ec:a4:5b:f2:6e:2d:ad:b0:0f:f5:df:63:0f:6c:
e9:ab:fb:d0:61:d5:72:07:79:8f:6b:a9:93:dd:d0:
1c:2e:dd:59:6a:76:05:ec:b3:08:48:8a:f7:d6:14:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5E:7F:E4:C7:68:BA:F5:C0:67:8B:16:E8:7E:24:27:72:EB:A5:C9
X509v3 Authority Key Identifier:
keyid:D4:E5:D5:24:71:EA:87:48:9D:48:A0:62:08:47:A6:D5:56:F1:63:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OXVJHHqh0idSKBiCEem1VbxY9s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/d808d8-03ed-44c4-9b1c-0182cb02c800/1/1OXVJHHqh0idSKBiCEem1VbxY9s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b2:04:2d:07:4e:19:4d:d9:35:96:e9:1d:db:39:a6:b2:ed:
9d:b5:fe:fc:c4:85:29:4e:c1:d3:84:3e:96:01:b3:3d:72:1a:
41:8f:b2:47:d8:bb:11:8a:c0:00:61:30:ae:f1:c7:a0:34:86:
a4:2d:84:2d:94:b6:5d:fc:ba:e3:80:b4:b4:4b:83:ce:1e:d4:
27:90:13:d6:ec:f3:19:3c:51:0e:35:87:79:a3:80:f2:d5:37:
ec:27:cd:ee:4e:d0:89:04:86:ae:ea:90:32:8e:23:4d:dd:56:
c4:40:36:d6:6a:f8:a9:44:1d:f5:27:d6:ee:a5:35:5d:10:96:
2e:5d:ed:fd:b6:13:03:05:d9:52:0b:2c:13:d3:ad:ce:42:87:
b2:6a:ed:85:27:1a:aa:73:3c:0d:18:3b:3a:97:00:34:63:7b:
13:8d:f6:42:82:21:66:03:7c:51:49:f6:6b:de:58:65:8c:92:
d9:36:cb:34:f0:83:2d:ab:71:6c:a7:30:59:99:f1:69:a2:eb:
57:c1:1a:c4:4c:08:ee:24:01:49:94:b6:0a:c9:20:98:00:d7:
22:2a:26:6e:13:bb:90:c4:86:9d:8a:37:8d:54:0d:1c:95:0c:
61:8d:86:e3:4b:2a:b2:39:2e:92:51:bb:90:b4:f9:c0:c2:ef:
95:0b:c6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:45 2026 by rpki-client