Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: NsiikqRrBKAOg6cGUYnbOcA73qwd04SmqEqN5UKR7cA=
Subject key identifier: 49:16:CC:6D:4C:AB:6B:01:A8:3B:2D:95:12:85:47:11:6F:80:4E:3C
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 019F189DF76D7B52A95E6B3F73F3DFFDC60D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 10D3
Signing time: Tue 30 Jun 2026 13:00:33 +0000
Manifest this update: Tue 30 Jun 2026 13:00:33 +0000
Manifest next update: Wed 01 Jul 2026 13:00:33 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: c9e1wKjgctsBXgIixGEdHb6tJGfi1ep15QkODTb5N4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9d:f7:6d:7b:52:a9:5e:6b:3f:73:f3:df:fd:c6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Jun 30 13:00:33 2026 GMT
Not After : Jul 1 13:00:33 2026 GMT
Subject: CN=4916cc6d4cab6b01a83b2d95128547116f804e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:59:03:9c:02:26:0f:7c:e8:20:27:da:76:
39:ec:4c:ee:81:f2:5a:bc:7f:ea:ec:6d:9e:49:36:
6b:bb:dd:a0:35:27:49:cb:2f:d5:96:0a:4b:5e:c1:
6f:60:f4:3f:10:91:0c:94:9e:19:7e:94:41:97:e5:
1f:40:fe:15:dd:14:90:94:3a:a4:24:78:16:81:ea:
b2:15:5e:9b:ea:22:e8:7d:50:8f:61:61:77:37:15:
f7:6c:90:e5:b9:25:14:cc:0f:10:57:2c:14:d1:37:
bc:98:62:94:38:68:f4:59:ba:29:6b:fc:25:0a:ab:
e4:13:e6:6b:b2:32:f6:08:25:36:c8:ce:73:7b:09:
94:2d:0e:ad:26:cf:58:07:1f:be:6d:d2:97:df:76:
11:0f:3d:bf:ac:7a:80:07:ff:ab:52:0d:d4:06:9f:
2e:b8:b5:91:03:27:4e:fb:25:9c:1d:26:f0:c0:41:
95:7f:8d:4a:05:47:82:5a:20:15:ff:e0:22:63:8c:
ad:9f:55:5e:1d:45:17:85:c5:76:1d:f5:fc:47:a4:
b7:93:ba:b6:44:a4:5e:48:10:da:15:fe:49:56:e4:
b6:14:6c:68:2e:6e:1b:e4:40:f0:7b:05:66:97:3a:
0f:fc:53:b1:f8:47:86:e6:06:df:36:e0:cc:ff:63:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:16:CC:6D:4C:AB:6B:01:A8:3B:2D:95:12:85:47:11:6F:80:4E:3C
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:62:50:3d:5d:8d:d2:93:80:d7:eb:2b:98:ad:68:3b:42:45:
1b:3c:bf:8d:93:9c:6f:99:a1:57:98:be:81:77:f8:81:18:2d:
70:e7:f0:40:73:31:e1:c7:99:e7:3a:f4:e9:a2:20:ab:51:de:
ed:bf:50:5f:18:6a:58:66:5d:75:01:92:e1:79:6c:0e:cc:7f:
ee:0a:64:f9:73:3e:72:eb:bf:66:fc:b0:db:61:32:ce:1e:e9:
4e:e4:71:ef:13:4a:9c:5b:61:de:98:e4:ca:7c:87:37:b2:68:
7c:48:95:f5:b5:83:b3:fd:dc:7f:b1:09:96:99:6c:a2:8d:3f:
58:2a:3a:15:a2:f0:2a:13:a1:ee:c5:97:ff:c7:19:7a:16:f9:
0c:6b:a4:2a:85:53:bb:18:98:29:3f:d4:b3:01:98:7b:6a:32:
ec:02:27:87:d4:93:25:d7:fc:36:a5:de:bb:4a:e2:9d:c6:4c:
58:46:d0:e8:31:65:3d:99:cb:a0:a3:5c:d5:a2:4c:f3:70:1a:
4a:4e:30:fb:05:f7:c3:84:7f:44:78:46:8c:2e:67:75:e4:fa:
1d:b5:8d:f8:6b:5f:f4:b9:d1:a7:4c:1c:47:c8:62:60:e7:ee:
cf:04:1a:58:e5:fb:f6:05:e4:04:ac:24:88:c6:3f:8a:10:d4:
13:83:d8:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Ynfdte1KpXms/c/Pf/cYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2M2Y4ZTQyZmI4NDQyYTQ4YTdkNDdlZjRjMGI2ZTE0NzUx
NGJmYzQwHhcNMjYwNjMwMTMwMDMzWhcNMjYwNzAxMTMwMDMzWjAzMTEwLwYDVQQD
Eyg0OTE2Y2M2ZDRjYWI2YjAxYTgzYjJkOTUxMjg1NDcxMTZmODA0ZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nlZA5wCJg986CAn2nY57EzugfJa
vH/q7G2eSTZru92gNSdJyy/VlgpLXsFvYPQ/EJEMlJ4ZfpRBl+UfQP4V3RSQlDqk
JHgWgeqyFV6b6iLofVCPYWF3NxX3bJDluSUUzA8QVywU0Te8mGKUOGj0Wbopa/wl
CqvkE+ZrsjL2CCU2yM5zewmULQ6tJs9YBx++bdKX33YRDz2/rHqAB/+rUg3UBp8u
uLWRAydO+yWcHSbwwEGVf41KBUeCWiAV/+AiY4ytn1VeHUUXhcV2HfX8R6S3k7q2
RKReSBDaFf5JVuS2FGxoLm4b5EDwewVmlzoP/FOx+EeG5gbfNuDM/2OasQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkWzG1Mq2sBqDstlRKFRxFvgE48MB8GA1UdIwQY
MBaAFNY/jkL7hEKkin1H70wLbhR1FL/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODct
MmVkN2E3MTVmOGQ3LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODctMmVkN2E3MTVmOGQ3
LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGJQPV2N
0pOA1+srmK1oO0JFGzy/jZOcb5mhV5i+gXf4gRgtcOfwQHMx4ceZ5zr06aIgq1He
7b9QXxhqWGZddQGS4XlsDsx/7gpk+XM+cuu/Zvyw22Eyzh7pTuRx7xNKnFth3pjk
ynyHN7JofEiV9bWDs/3cf7EJlplsoo0/WCo6FaLwKhOh7sWX/8cZehb5DGukKoVT
uxiYKT/UswGYe2oy7AInh9STJdf8NqXeu0rincZMWEbQ6DFlPZnLoKNc1aJM83Aa
Sk4w+wX3w4R/RHhGjC5ndeT6HbWN+Gtf9LnRp0wcR8hiYOfuzwQaWOX79gXkBKwk
iMY/ihDUE4PY+Q==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:09 2026 by rpki-client