Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: pS90BR0Gm0TsOybtZXuzZLuRfMHVZ8O7x1S5y2EAkeE=
Subject key identifier: 9E:98:9A:69:DD:32:85:DA:62:A9:ED:E7:DD:FD:B9:DA:32:01:CD:86
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 019D37C061AECBF59640945D3FD149CFA5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 0FDA
Signing time: Sun 29 Mar 2026 04:00:47 +0000
Manifest this update: Sun 29 Mar 2026 04:00:47 +0000
Manifest next update: Mon 30 Mar 2026 04:00:47 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: 64KLoLI71V0J8GufoTjty2IFI3HrCMWGYGO3f3mjM2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:61:ae:cb:f5:96:40:94:5d:3f:d1:49:cf:a5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Mar 29 04:00:47 2026 GMT
Not After : Mar 30 04:00:47 2026 GMT
Subject: CN=9e989a69dd3285da62a9ede7ddfdb9da3201cd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b9:7c:2d:3b:1e:83:ab:1e:33:dd:8f:26:de:
e1:79:9b:7a:07:3c:64:9e:3d:cc:09:80:18:fd:ac:
59:c1:4f:aa:69:88:0a:10:fb:3b:16:eb:7a:4f:17:
3d:ce:8e:db:22:83:fe:d4:45:59:47:f2:bc:80:7c:
89:3d:8a:1c:cc:f0:5f:46:3d:69:77:cc:7c:06:0a:
a4:e7:90:53:09:4c:46:e7:a6:cf:02:84:6a:88:2d:
26:b9:ee:db:a1:bc:87:b8:42:56:be:0d:ea:87:8b:
02:c6:02:78:aa:b5:d8:5b:13:f5:d8:09:e5:d7:53:
a2:64:38:70:74:f7:56:59:a9:68:a6:f2:b3:b0:f3:
55:28:d5:e1:3c:b4:62:59:90:58:07:20:ba:cf:44:
c5:68:4e:53:d9:57:c0:77:a3:45:72:9d:3b:87:02:
c4:1e:fc:ba:b9:b7:76:de:38:5a:5a:ea:9a:e8:9a:
af:54:e4:ce:a7:db:d4:a6:97:f8:28:ee:9a:94:3b:
6f:7f:bf:5f:1a:c3:d3:34:af:b1:32:5c:a4:b6:d5:
61:21:97:bd:80:c6:40:5e:73:11:48:f6:c2:8a:c3:
30:13:12:b8:7a:f7:9d:26:38:bf:20:65:ab:ff:0e:
62:59:9d:67:f2:ff:3c:cf:c1:1b:e3:87:f9:e1:62:
ee:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:98:9A:69:DD:32:85:DA:62:A9:ED:E7:DD:FD:B9:DA:32:01:CD:86
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:2d:f8:f4:61:fa:5c:35:6d:f1:1f:10:14:cc:e9:b2:fe:e1:
57:03:85:9e:90:ce:65:a2:52:94:bc:2c:f2:b2:cd:57:5a:68:
18:0c:02:98:a4:ee:1c:92:3c:f4:06:57:7a:de:a0:58:d8:74:
6a:bf:ca:c6:65:90:3a:b4:bf:0e:0a:0f:00:dc:1f:ca:f7:a9:
7f:37:95:a1:25:98:71:5f:85:cd:84:10:cd:a9:99:cf:31:ea:
e7:3c:22:25:83:6f:17:58:6f:ba:fb:20:0e:28:e6:c7:fa:04:
85:97:62:d7:5c:07:be:f5:5e:7c:6d:90:61:45:10:76:e1:16:
54:0f:4d:57:2c:c8:dd:87:b4:c5:68:c3:23:24:df:40:82:97:
24:50:e5:89:41:85:ae:1f:6b:43:ab:81:0f:ae:df:8c:3c:38:
f4:6d:95:90:30:d2:cd:6a:2a:5d:09:4b:d7:c0:50:ca:1a:d0:
c6:cf:d1:b3:6a:ed:b6:30:b4:e3:35:6f:89:09:0d:e6:74:ec:
13:b6:58:f5:ab:5f:d0:89:6d:84:c1:1d:c9:1b:d8:0b:9c:f3:
fc:f8:7b:48:c6:6c:c9:48:38:78:19:92:41:9a:67:70:8b:f4:
1d:1e:5e:a9:0c:93:71:f1:d5:e9:ab:b3:a1:18:5d:86:a3:94:
51:e0:a5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:54 2026 by rpki-client