Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: a3xc5DBtGATT3ptbPbeQL6KFsdgoPXV2hXw/xchRF7E=
Subject key identifier: 6C:F9:B0:1A:27:D9:33:1D:AB:62:F7:E1:2D:F5:13:09:F4:9C:F0:57
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 019D9AAC087052E2179758C5AA48572AD21D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 09:00:58 +0000
Manifest this update: Fri 17 Apr 2026 09:00:58 +0000
Manifest next update: Sat 18 Apr 2026 09:00:58 +0000
Files and hashes: 1: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: TEPP7RGMEBPOlFJ7gYBPQgeWSWlhz5/XJqGzfcz/9is=)
2: 4gakjOl2rKIxtDeY8kx2eOvP_Jo.roa (hash: TQ+KC3G8+QaJHhu/9P7uxzpoVECiZV+fna31NmwlOi8=)
3: bPoEfZam0GZUvE1xltgIVPM2UVA.roa (hash: oJcgAX3KB1YWr1arABvCqWuGMGK5eGcGXJDWs9BTX6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:08:70:52:e2:17:97:58:c5:aa:48:57:2a:d2:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Apr 17 09:00:58 2026 GMT
Not After : Apr 18 09:00:58 2026 GMT
Subject: CN=6cf9b01a27d9331dab62f7e12df51309f49cf057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:55:b4:6f:fd:94:72:b5:35:41:0b:8f:ea:4d:
a5:a8:b8:6d:29:a9:eb:8c:fe:d4:e3:a2:0a:0f:3e:
19:bb:9a:1c:55:8a:fb:4e:1f:f2:97:99:c1:90:3a:
b8:ad:64:9b:06:71:f9:e5:57:f7:c5:9b:3c:ea:3e:
bf:ff:d2:78:78:81:a1:2f:45:3e:dc:8a:c8:8d:82:
ba:7e:c1:02:74:f0:52:3b:44:4b:5e:76:66:bf:09:
25:31:53:8e:4a:95:2e:24:6f:56:8c:ab:b8:b9:e1:
87:b6:5c:55:ca:f2:f0:0e:fc:27:82:59:27:85:b2:
ca:65:88:bf:bd:dd:94:44:9c:93:1f:8e:59:96:8a:
36:a0:04:d7:86:d2:00:0b:b4:91:70:a9:24:39:03:
dc:26:84:a7:26:89:39:36:81:e6:f5:4b:99:41:26:
61:02:e1:a1:ea:a5:2c:27:8d:b8:ed:5f:7f:68:99:
46:43:44:2e:54:d9:60:39:45:97:e9:8f:da:94:68:
2c:32:f0:5b:d6:b0:b4:18:b0:aa:e2:e2:1c:a8:d1:
4a:06:ae:65:fa:a5:a3:a7:10:5b:6d:4c:86:0c:82:
b2:48:66:a6:dc:cd:3a:cf:5c:7e:af:86:5b:23:bc:
99:af:b2:0a:50:15:64:d8:75:07:c5:2a:03:3d:d8:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F9:B0:1A:27:D9:33:1D:AB:62:F7:E1:2D:F5:13:09:F4:9C:F0:57
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e0:20:09:86:fb:a4:38:50:90:1e:1d:76:ba:2a:46:ea:ae:
78:ff:9c:77:0f:da:85:2c:c7:6c:17:1a:ed:56:57:2a:e7:ba:
8b:00:90:aa:33:4f:b9:81:e7:1d:86:24:53:5f:c9:5e:62:da:
c8:2b:d7:12:2a:77:02:ad:22:47:ab:66:46:c9:12:29:d8:41:
f3:f0:c7:0b:79:67:3e:84:89:ac:88:65:ce:d8:a1:e6:69:8f:
05:f6:83:45:18:23:b8:9d:d0:d7:01:98:87:83:03:39:46:64:
5c:c6:e3:59:71:6d:35:f7:63:ce:c3:62:d6:17:dc:c5:96:0a:
09:53:87:77:aa:35:f8:e8:5c:55:01:aa:2d:ee:53:97:43:90:
1c:40:1a:8e:46:0f:e5:6c:93:7f:6c:1a:a7:46:ed:d4:f4:fd:
15:5c:a1:b2:34:8c:be:cb:5f:f8:5c:74:64:fd:19:32:5e:00:
0e:ff:cc:86:af:bb:8d:36:c5:98:45:ef:af:b3:d5:b1:08:2f:
82:1e:ea:d1:89:35:f3:2d:9a:a5:18:e2:5a:89:02:bb:25:1a:
c2:30:4a:bc:28:d0:43:0d:1f:c5:f2:b1:8e:59:f2:f0:95:0e:
1e:fd:0e:e9:15:49:ba:d4:a5:fd:ba:01:41:c0:7c:80:d5:3e:
ed:49:c2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:00:06 2026 by rpki-client