Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: +WagwY0Z+/vd5JG4Yeq9sl+4PCsuQ8aXPOfET+/MMbo=
Subject key identifier: CC:1A:8C:6D:3F:05:CC:2C:58:4B:6A:6C:E9:EF:14:16:42:40:82:9F
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 019D9A7504F8B58E84EFC93E2FE22DF10E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 0AC4
Signing time: Fri 17 Apr 2026 08:00:53 +0000
Manifest this update: Fri 17 Apr 2026 08:00:53 +0000
Manifest next update: Sat 18 Apr 2026 08:00:53 +0000
Files and hashes: 1: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: Kg9oKC9k6gRnxNMrlFlbFA3JF47xY7sWFpg2P6EFocY=)
2: vvXDEA3-oSwvWKl3m20Q9UrS6wI.roa (hash: mQvtqYD2eC+84hVmHavb+1UIl2NHrV+2/J+tCnR9oyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:04:f8:b5:8e:84:ef:c9:3e:2f:e2:2d:f1:0e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Apr 17 08:00:53 2026 GMT
Not After : Apr 18 08:00:53 2026 GMT
Subject: CN=cc1a8c6d3f05cc2c584b6a6ce9ef14164240829f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:07:a2:4f:e6:ab:42:68:be:8f:42:02:31:a3:
dc:af:32:ae:2e:3b:a0:d2:72:91:2b:fc:92:b4:22:
ef:6a:a3:10:28:60:9a:6b:9f:d4:5f:e3:43:0c:6b:
35:5b:77:af:cd:d9:7e:65:f7:b2:6b:ca:27:13:57:
fe:07:08:8f:17:8a:28:f9:dc:ed:29:12:7c:b5:d2:
b7:7a:bf:17:89:9b:e8:b3:34:ae:60:cd:ae:97:5e:
06:eb:73:b0:53:80:6b:50:fe:c1:d3:62:e6:9f:b1:
32:14:17:f1:13:20:62:c3:2c:6b:4a:36:27:aa:54:
a4:db:9b:3e:de:63:7e:a1:9b:8a:8e:63:c5:52:93:
ef:ea:9b:8a:93:cf:fe:01:04:14:7b:85:3f:a5:d4:
4c:c2:0e:34:4e:c5:c1:f6:f6:8b:da:8a:5c:5c:70:
03:03:a3:76:74:55:30:45:75:81:da:af:0a:e0:7a:
3a:59:79:fd:ef:40:b5:ae:04:4f:00:29:67:42:a9:
04:64:65:1a:d5:ec:99:f6:2f:7a:15:39:39:c9:75:
17:4a:0a:e8:7d:11:5d:84:99:7c:75:55:ff:29:0e:
d2:65:c0:fd:c4:06:8f:81:e1:00:99:e1:72:e6:c5:
1b:e6:7b:54:18:16:4f:c2:a0:96:e4:65:68:63:a0:
fc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1A:8C:6D:3F:05:CC:2C:58:4B:6A:6C:E9:EF:14:16:42:40:82:9F
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c0:e1:ae:7c:12:dd:02:0c:2b:ed:43:8f:97:3f:d0:56:08:
1b:78:46:ce:b0:24:46:65:71:95:56:ff:f0:ba:95:42:dc:62:
cb:0c:70:8a:43:c0:60:ed:f0:91:97:76:50:2d:6b:e7:5d:a6:
e5:e9:f4:10:42:76:29:b5:c9:47:8d:25:35:6b:b0:15:75:55:
a7:ae:67:d7:52:fa:61:8c:a1:ee:ae:02:a9:47:ee:be:55:ef:
55:b9:94:33:e1:2a:cc:48:8b:f3:00:8e:ad:27:7f:3f:20:7d:
9d:1f:f1:d9:95:90:e1:36:91:e1:17:c2:af:97:d9:b7:7b:e7:
e3:a0:c4:1e:c7:56:84:1a:94:a1:31:6a:1f:ff:1e:d8:33:38:
28:9b:a3:a4:4a:58:ba:55:c8:55:f5:5d:66:c8:c3:77:48:9d:
af:3f:79:76:4e:28:20:5b:4f:2a:23:1e:08:1f:b9:13:68:b8:
d1:dc:2c:c5:bd:c7:0c:65:de:12:f7:d0:7a:93:22:9c:b1:30:
17:d3:3b:34:ff:d5:a1:7d:f5:a4:9a:40:87:32:6c:df:da:7c:
ac:53:db:df:cb:d5:f6:f9:13:40:18:67:ce:b5:3d:e8:c5:4f:
52:57:3a:87:59:ea:94:59:84:db:13:85:28:26:27:6e:07:bd:
13:1a:6a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:29 2026 by rpki-client