
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: AMxnoPr8NDau8atvv6GrbteI2H4YRNTwwsKXe2kh9kU=
Subject key identifier: 3D:63:15:40:5A:73:A7:2E:2A:92:31:BE:7D:B6:5F:1B:9B:2A:4E:1B
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 01A140F16C4B50A54774CF58A9B973702E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 11F1
Signing time: Thu 15 Oct 2026 19:02:05 +0000
Manifest this update: Thu 15 Oct 2026 19:02:05 +0000
Manifest next update: Fri 16 Oct 2026 19:02:05 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: ACd9wkQgmC3WrEVqwIaHbT6Hqn3L+9Y0x0PlCkPKQN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f1:6c:4b:50:a5:47:74:cf:58:a9:b9:73:70:2e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Oct 15 19:02:05 2026 GMT
Not After : Oct 16 19:02:05 2026 GMT
Subject: CN=3d6315405a73a72e2a9231be7db65f1b9b2a4e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:27:5b:15:37:ef:73:bf:b2:67:89:c6:1c:80:
1d:51:f6:93:3a:f4:4c:29:a9:f9:0a:25:de:d7:15:
63:f0:7b:e8:be:fe:ff:3e:9d:e0:48:a6:be:3d:ae:
a5:51:04:ec:ee:ae:6b:00:4a:3c:72:08:fc:19:44:
cb:37:b2:81:74:dc:e1:68:13:9b:77:34:23:06:85:
1a:88:aa:9b:06:a2:9f:ec:d1:9a:d1:fd:9d:dc:6e:
04:1c:55:86:35:96:c8:4f:d0:c9:95:b8:38:fe:45:
5e:d0:18:bc:bd:14:5d:79:c2:e4:dc:99:8b:0b:fc:
ca:8a:94:42:60:25:7f:09:71:e3:89:6b:bf:3e:32:
06:b0:11:b2:84:fc:aa:f5:52:28:21:36:05:13:68:
ec:a3:05:b1:1e:31:d4:2c:c2:d5:a7:76:b8:66:42:
16:ca:4e:e8:cd:6f:ea:db:c7:9a:53:9f:44:e1:5c:
3e:15:3d:2f:9c:d6:18:14:59:2f:24:8b:38:db:61:
4d:8f:89:3a:42:8e:f3:d5:13:7e:bd:7e:e2:a1:12:
88:33:c4:6b:e1:ef:95:0b:36:e0:39:4a:56:fa:1b:
c6:9e:0c:b9:5f:b7:bf:1a:a3:ba:de:f6:07:63:20:
53:64:ea:6d:e6:6a:a6:11:7b:a2:c3:46:82:da:a8:
37:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:63:15:40:5A:73:A7:2E:2A:92:31:BE:7D:B6:5F:1B:9B:2A:4E:1B
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:36:f4:dc:ec:61:23:3f:24:2e:dd:4d:1d:9c:f8:b2:f1:90:
3e:96:aa:c1:f5:44:f4:d9:ac:26:cf:96:1d:42:10:41:8c:98:
43:c5:30:ad:86:a9:28:87:1d:9c:7f:ea:5c:b0:fc:76:99:62:
c6:25:9d:e5:6e:bc:52:80:e3:d8:2a:f1:44:d7:5f:45:88:3b:
a6:5c:10:7b:ff:1b:b6:0f:dd:88:e2:50:9f:44:22:05:de:1e:
ea:89:52:cd:6f:3c:64:63:8c:c3:7a:9f:18:54:27:b3:15:d9:
73:fe:d8:1a:59:bc:60:b9:cf:48:21:cb:0c:e6:a0:8b:0f:85:
0c:fc:76:f9:07:cc:6e:61:04:6c:53:dd:75:5b:3f:f6:b5:5e:
37:5a:5a:6f:ac:f5:43:f7:38:b4:dc:5c:3d:09:1a:5d:6b:38:
2c:77:d3:03:98:71:1c:f9:64:cc:01:76:6c:28:14:64:f4:b8:
75:19:cd:2c:cc:fd:a0:71:8c:96:25:1f:f8:4e:0f:86:34:1d:
f1:57:97:3d:13:be:b3:8f:47:28:93:e3:9d:ca:01:95:bb:77:
2e:81:18:9c:aa:a6:d0:7b:b9:36:2e:2a:b0:02:46:22:ad:d8:
40:bf:0e:7d:c5:98:15:fd:1c:f4:46:12:70:76:ea:9c:80:60:
9f:7c:89:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFA8WxLUKVHdM9YqblzcC54MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2M2Y4ZTQyZmI4NDQyYTQ4YTdkNDdlZjRjMGI2ZTE0NzUx
NGJmYzQwHhcNMjYxMDE1MTkwMjA1WhcNMjYxMDE2MTkwMjA1WjAzMTEwLwYDVQQD
EygzZDYzMTU0MDVhNzNhNzJlMmE5MjMxYmU3ZGI2NWYxYjliMmE0ZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5SdbFTfvc7+yZ4nGHIAdUfaTOvRM
Kan5CiXe1xVj8Hvovv7/Pp3gSKa+Pa6lUQTs7q5rAEo8cgj8GUTLN7KBdNzhaBOb
dzQjBoUaiKqbBqKf7NGa0f2d3G4EHFWGNZbIT9DJlbg4/kVe0Bi8vRRdecLk3JmL
C/zKipRCYCV/CXHjiWu/PjIGsBGyhPyq9VIoITYFE2jsowWxHjHULMLVp3a4ZkIW
yk7ozW/q28eaU59E4Vw+FT0vnNYYFFkvJIs422FNj4k6Qo7z1RN+vX7ioRKIM8Rr
4e+VCzbgOUpW+hvGngy5X7e/GqO63vYHYyBTZOpt5mqmEXuiw0aC2qg3pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1jFUBac6cuKpIxvn22XxubKk4bMB8GA1UdIwQY
MBaAFNY/jkL7hEKkin1H70wLbhR1FL/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODct
MmVkN2E3MTVmOGQ3LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODctMmVkN2E3MTVmOGQ3
LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJTb03Oxh
Iz8kLt1NHZz4svGQPpaqwfVE9NmsJs+WHUIQQYyYQ8UwrYapKIcdnH/qXLD8dpli
xiWd5W68UoDj2CrxRNdfRYg7plwQe/8btg/diOJQn0QiBd4e6olSzW88ZGOMw3qf
GFQnsxXZc/7YGlm8YLnPSCHLDOagiw+FDPx2+QfMbmEEbFPddVs/9rVeN1pab6z1
Q/c4tNxcPQkaXWs4LHfTA5hxHPlkzAF2bCgUZPS4dRnNLMz9oHGMliUf+E4PhjQd
8VeXPRO+s49HKJPjncoBlbt3LoEYnKqm0Hu5Ni4qsAJGIq3YQL8OfcWYFf0c9EYS
cHbqnIBgn3yJAQ==
-----END CERTIFICATE-----
Generated at Fri Oct 16 00:19:57 2026 by rpki-client