Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json)
Hash identifier: 2i0hiei1ObVQtARC72ikUeCdpqH1+JD5MUVyii1R3zA=
Subject key identifier: B8:62:9D:DF:4F:52:B7:A3:F4:59:B4:F6:96:5B:C4:F4:06:C3:37:FE
Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3
Certificate serial: 019D9999062E8D154E64EECA196EF17E36B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
Manifest number: 14C9
Signing time: Fri 17 Apr 2026 04:00:35 +0000
Manifest this update: Fri 17 Apr 2026 04:00:35 +0000
Manifest next update: Sat 18 Apr 2026 04:00:35 +0000
Files and hashes: 1: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: DEWqK0Qtqasatd2J+5nQfqIN9x1AXjBYrvrbvBmhmOo=)
2: wL5sSwno8Mbpbe9_DoWbBZ-eQSE.roa (hash: sIqceuhoMcr1nLCZQCrjxxlbwlSCs6IOU3UVRrd7u3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:06:2e:8d:15:4e:64:ee:ca:19:6e:f1:7e:36:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716752b91747957dccff0e71da674f329d832de3
Validity
Not Before: Apr 17 04:00:35 2026 GMT
Not After : Apr 18 04:00:35 2026 GMT
Subject: CN=b8629ddf4f52b7a3f459b4f6965bc4f406c337fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8d:4e:97:e7:dc:ae:a7:fb:27:f9:e9:2f:0f:
6e:a1:60:ca:ef:d8:2f:47:04:d9:70:f5:4d:0c:56:
db:b9:e6:70:40:50:c8:57:16:ff:3a:1d:fd:35:6f:
e0:0c:21:57:24:06:e1:13:40:a5:5c:82:0a:fb:6c:
7c:e5:aa:59:de:c8:70:dc:e8:d0:1f:e2:13:78:ef:
77:83:c2:0b:8d:a7:41:72:a0:dc:f4:5d:4a:b3:df:
4c:54:1e:a1:56:bc:4f:d6:37:05:96:9c:ff:f4:97:
8a:aa:d6:19:18:3f:a4:0d:7f:ee:70:c1:b1:19:0d:
65:d9:74:8f:e1:b6:49:21:75:92:68:b5:2a:cf:4c:
6c:65:83:62:a8:45:0a:3e:36:39:32:90:2c:ea:aa:
da:79:17:be:26:d1:d3:a5:e9:5b:0e:67:07:b6:7d:
31:52:3a:e0:2a:6a:82:41:81:f8:9e:20:c9:04:09:
94:36:67:c6:53:ec:79:f8:d2:4d:16:e9:27:d0:8e:
3f:cc:ee:5a:1a:84:f6:04:89:79:37:5b:d5:05:cc:
e4:39:66:5b:fd:83:33:24:11:36:6b:7f:46:8c:03:
e8:d2:7d:7b:f1:b1:34:65:04:68:05:ff:ac:fb:bc:
ab:f2:ba:0a:3b:60:1a:a0:31:3b:a0:2a:eb:63:8c:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:62:9D:DF:4F:52:B7:A3:F4:59:B4:F6:96:5B:C4:F4:06:C3:37:FE
X509v3 Authority Key Identifier:
keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:3f:08:c5:b1:10:6c:5b:da:b4:68:4e:f7:65:78:a6:3e:e7:
cb:9e:45:d3:6d:40:28:88:3f:04:1a:be:0a:66:6f:8f:98:3b:
2f:e2:ca:9a:4a:01:9f:75:5d:e3:04:14:0a:e3:d9:41:e6:6a:
6d:b1:df:db:14:48:8c:a4:37:7c:11:29:30:22:5c:86:60:d1:
2d:53:5b:b0:83:52:42:72:17:89:6f:30:a7:c1:ef:f8:82:da:
31:d2:e6:8a:2e:07:5b:78:df:b4:3c:60:01:91:4e:df:12:81:
04:75:8e:e8:87:fd:32:b9:ff:cb:38:62:9a:f0:31:0f:6e:c4:
e4:03:c8:0c:1a:77:e7:6c:12:2a:91:aa:28:12:8d:ed:11:0c:
4c:b4:5b:f3:2d:36:69:ce:79:71:5b:26:8e:96:85:96:8a:76:
43:34:dc:d1:98:b2:61:04:e6:f2:cd:a4:1f:1f:af:d5:21:31:
a0:56:23:71:64:72:de:fb:37:e8:64:27:8c:d3:2f:0f:22:59:
0c:7e:59:2b:fb:5b:0c:d6:bb:5d:8e:09:cb:f0:c5:89:62:6b:
b5:24:df:52:b0:0a:6e:13:df:8a:71:c0:df:48:bb:ee:70:06:
18:28:05:a9:72:81:d9:51:75:0a:00:55:63:c9:65:88:45:5a:
90:8c:64:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmQYujRVOZO7KGW7xfja3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNjc1MmI5MTc0Nzk1N2RjY2ZmMGU3MWRhNjc0ZjMyOWQ4
MzJkZTMwHhcNMjYwNDE3MDQwMDM1WhcNMjYwNDE4MDQwMDM1WjAzMTEwLwYDVQQD
EyhiODYyOWRkZjRmNTJiN2EzZjQ1OWI0ZjY5NjViYzRmNDA2YzMzN2ZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw41Ol+fcrqf7J/npLw9uoWDK79gv
RwTZcPVNDFbbueZwQFDIVxb/Oh39NW/gDCFXJAbhE0ClXIIK+2x85apZ3shw3OjQ
H+ITeO93g8ILjadBcqDc9F1Ks99MVB6hVrxP1jcFlpz/9JeKqtYZGD+kDX/ucMGx
GQ1l2XSP4bZJIXWSaLUqz0xsZYNiqEUKPjY5MpAs6qraeRe+JtHTpelbDmcHtn0x
UjrgKmqCQYH4niDJBAmUNmfGU+x5+NJNFukn0I4/zO5aGoT2BIl5N1vVBczkOWZb
/YMzJBE2a39GjAPo0n178bE0ZQRoBf+s+7yr8roKO2AaoDE7oCrrY4zMKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLhind9PUrej9Fm09pZbxPQGwzf+MB8GA1UdIwQY
MBaAFHFnUrkXR5V9zP8OcdpnTzKdgy3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1dkU3VSZEhsWDNNX3c1eDJtZFBNcDJETGVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi83MGQ0NTAtODBlNC00NGY5LTk5ZjMt
MjFiYzYzZjE2NWY4LzEvY1dkU3VSZEhsWDNNX3c1eDJtZFBNcDJETGVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi83MGQ0NTAtODBlNC00NGY5LTk5ZjMtMjFiYzYzZjE2NWY4
LzEvY1dkU3VSZEhsWDNNX3c1eDJtZFBNcDJETGVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALz8IxbEQ
bFvatGhO92V4pj7ny55F021AKIg/BBq+CmZvj5g7L+LKmkoBn3Vd4wQUCuPZQeZq
bbHf2xRIjKQ3fBEpMCJchmDRLVNbsINSQnIXiW8wp8Hv+ILaMdLmii4HW3jftDxg
AZFO3xKBBHWO6If9Mrn/yzhimvAxD27E5APIDBp352wSKpGqKBKN7REMTLRb8y02
ac55cVsmjpaFlop2QzTc0ZiyYQTm8s2kHx+v1SExoFYjcWRy3vs36GQnjNMvDyJZ
DH5ZK/tbDNa7XY4Jy/DFiWJrtSTfUrAKbhPfinHA30i77nAGGCgFqXKB2VF1CgBV
Y8lliEVakIxkNA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:23:06 2026 by rpki-client