Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json)
Hash identifier: wlVlj/I3DTzHJQCv3R5r1XaIdcY7PIZHTPR2MhDQzd0=
Subject key identifier: 81:65:03:B7:6F:A3:C0:1C:E9:61:D2:90:CF:24:4D:3D:2F:C5:D6:E7
Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Certificate serial: 01A0005C648404F8E4104389708B4D6BC43E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
Manifest number: 114B
Signing time: Fri 14 Aug 2026 13:00:50 +0000
Manifest this update: Fri 14 Aug 2026 13:00:50 +0000
Manifest next update: Sat 15 Aug 2026 13:00:50 +0000
Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: XxLMrGjMn3WpP0WJuJEyEkjKubVov0fuTDQXuCklJnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:64:84:04:f8:e4:10:43:89:70:8b:4d:6b:c4:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4
Validity
Not Before: Aug 14 13:00:50 2026 GMT
Not After : Aug 15 13:00:50 2026 GMT
Subject: CN=816503b76fa3c01ce961d290cf244d3d2fc5d6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:e8:4e:e6:54:e4:58:2a:cb:eb:bb:e5:ae:
b1:4e:81:70:0d:cb:f3:b6:36:20:3b:2b:e6:00:02:
b4:27:2d:e8:cd:92:63:89:3f:4d:11:b8:a7:be:0e:
08:6e:34:b1:a6:2d:3e:57:7b:ee:5d:3c:f2:85:34:
e8:5d:3a:90:76:56:4e:64:59:b9:4a:6e:71:43:53:
1f:8e:df:e7:b0:24:4e:9d:10:d9:19:0d:9f:da:d3:
ce:54:92:4a:0f:8f:26:78:85:9a:4c:1b:3a:82:9d:
41:5f:ea:92:09:4e:c1:8f:49:ed:5f:93:b6:b7:f9:
04:50:c4:56:4b:1d:d0:92:ed:9c:0c:a3:1c:66:68:
fc:18:c1:04:32:d9:3d:91:ba:a6:20:9e:dd:d8:aa:
be:db:48:cc:9d:15:3e:5e:12:a1:f1:05:6f:dd:ac:
fe:b6:af:4a:76:7f:d9:ba:36:1b:6b:48:e2:4e:63:
83:d5:d6:66:9a:e8:2c:9b:99:23:24:d2:9f:14:43:
e7:b4:40:ad:fc:92:32:18:6b:4a:96:46:9a:66:0e:
d5:f2:bc:4d:61:17:a2:55:08:01:45:88:7e:48:9c:
73:68:62:1a:84:6f:2e:f6:1a:3c:2c:bf:09:63:6f:
91:f7:72:87:05:5a:0e:4e:5a:f2:67:af:ee:5b:76:
70:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:65:03:B7:6F:A3:C0:1C:E9:61:D2:90:CF:24:4D:3D:2F:C5:D6:E7
X509v3 Authority Key Identifier:
keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:bd:5d:42:c1:c3:70:1f:8a:ca:79:d9:a6:6a:0d:39:d3:40:
ae:d6:d8:2b:cd:62:91:90:1a:68:62:fb:a9:95:61:3c:a7:e3:
f8:d9:f0:46:33:4f:02:6b:29:03:02:61:bd:69:4b:ed:e8:2b:
a1:a7:22:2b:f1:3e:a9:72:de:02:37:e1:b5:b8:aa:81:2e:c2:
6a:8d:6d:d0:58:ca:f6:b6:04:80:2f:c4:b3:7d:8a:89:b9:ba:
3e:d6:38:77:da:11:99:a6:bf:c7:17:42:d0:8b:fa:09:a5:42:
0f:f3:23:90:c4:e2:28:26:53:0d:1a:38:a4:d9:b7:a9:89:fa:
db:92:c8:82:c2:e9:81:02:03:75:08:0f:06:92:7f:bc:e1:48:
01:17:92:4a:5e:c8:d8:ee:29:1a:b6:df:c6:1f:e5:6d:e3:04:
fe:85:b2:04:a7:5f:c4:54:9c:7a:b3:cf:a8:86:81:45:e4:72:
b7:f6:d5:9d:fc:e4:74:34:a8:b1:f4:27:bd:75:f5:ae:76:e7:
42:05:5e:81:aa:89:3a:eb:c7:aa:f9:76:c1:29:b7:48:9c:9f:
7a:43:4c:51:48:f0:f6:5c:47:b6:c6:49:4d:6d:99:91:33:7b:
af:11:7f:9c:67:48:85:96:db:9a:29:09:c1:1b:80:07:a6:cc:
62:e9:97:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:09 2026 by rpki-client