Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json)
Hash identifier: 6a8KFeQMhrd2Nne+mKNW0E677xPkbps4FY1fo1YzSl4=
Subject key identifier: B6:8F:E2:73:E3:04:B0:4B:1C:A4:01:FE:5E:FF:96:F8:7E:EA:24:2C
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial: 019D984FF3FBF9CA89811680B7643A4CAF62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
Manifest number: 13AB
Signing time: Thu 16 Apr 2026 22:01:09 +0000
Manifest this update: Thu 16 Apr 2026 22:01:09 +0000
Manifest next update: Fri 17 Apr 2026 22:01:09 +0000
Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: PCGh5nVP1dXwoHhJfeDN1HpYvsZeZS6uvWLJX1/B+dU=)
2: lf7LSKbMZbGm86tBlbPIL648oFo.roa (hash: /K9bAYZ5YiuaJN+PfS4nniv3V/XkGZzBzxnTsucRsCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:f3:fb:f9:ca:89:81:16:80:b7:64:3a:4c:af:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Validity
Not Before: Apr 16 22:01:09 2026 GMT
Not After : Apr 17 22:01:09 2026 GMT
Subject: CN=b68fe273e304b04b1ca401fe5eff96f87eea242c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:74:c3:bb:b8:ed:5c:6f:c1:f8:62:ce:cf:
14:dc:7e:56:a0:4d:88:d9:d5:ea:c4:cc:54:5e:79:
16:97:35:29:35:79:a4:f5:37:94:c1:11:b7:08:15:
bd:b3:b1:1a:9f:14:39:69:79:dc:6a:d5:41:7e:b1:
d9:fa:2f:f0:e9:45:1a:5c:54:e4:4c:c0:ad:ff:24:
4c:aa:cd:91:b7:06:ce:e4:85:15:49:b4:67:83:78:
1b:96:a8:aa:82:d4:da:1c:a4:c4:d2:bf:1c:76:84:
5c:56:1f:fe:f0:46:ee:ae:16:e6:2e:bf:fb:91:fb:
0b:65:74:75:30:46:47:9f:c5:21:d8:93:30:7c:7d:
d9:cb:d2:e1:dc:92:b6:b3:63:67:9c:2d:f0:5f:30:
d7:e4:e1:5c:08:47:74:88:0b:20:7c:b2:8c:7a:5a:
03:2c:82:19:b1:ca:a9:27:35:36:24:ef:f1:42:2e:
ed:f9:c8:13:79:15:9d:c9:c5:49:a5:dc:88:80:4a:
b1:3a:05:2b:87:41:80:96:40:c6:63:ca:97:5e:17:
3d:4c:9d:26:5e:2d:83:32:40:cc:6b:f8:e9:ba:ff:
a8:f6:34:a5:5f:81:f7:9a:79:06:cd:06:93:d6:93:
72:a2:92:48:d0:5a:66:71:9f:7f:7b:7b:b0:a9:d4:
6c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:8F:E2:73:E3:04:B0:4B:1C:A4:01:FE:5E:FF:96:F8:7E:EA:24:2C
X509v3 Authority Key Identifier:
keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:77:16:61:10:1b:38:aa:34:36:54:8d:d0:0b:4b:6b:d2:72:
be:11:a8:88:a8:e9:3f:93:02:6f:ca:f4:78:4f:f2:a2:83:69:
08:61:4f:41:2f:4d:d3:4b:34:8e:b5:98:de:c2:a6:c8:b1:3c:
d4:0e:21:c2:65:2b:80:d4:dd:8a:6c:f7:0a:17:ef:64:82:83:
1b:10:17:68:e5:cc:ed:22:be:05:20:3f:61:f8:71:29:6b:bf:
30:06:f3:7b:19:21:e9:18:cf:75:9a:b0:2a:00:f8:b1:3e:88:
ad:5f:eb:91:6d:c7:52:50:ff:21:5f:74:47:3d:63:b5:b9:de:
2f:46:c0:0f:9b:78:24:ab:50:72:15:e4:a7:2e:20:dd:df:13:
99:bd:c3:21:16:ea:c9:f5:28:78:aa:63:32:2f:81:d4:f1:2e:
57:69:d2:89:28:8b:4a:e7:2d:1b:a2:21:5b:56:42:eb:4f:02:
7c:26:40:b6:80:4b:b2:e6:52:58:fa:83:47:3d:72:50:91:6f:
9c:b5:81:cb:dc:3c:3b:de:4f:21:25:e1:d3:82:a8:ad:e8:24:
12:b3:80:90:88:78:22:f3:fc:ad:28:3d:ee:21:fb:8f:f8:bb:
2e:56:1a:95:96:57:05:48:f8:a3:0b:45:05:2a:d8:24:86:b6:
c1:d3:43:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:55:55 2026 by rpki-client