Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
File: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft (raw, json)
Hash identifier: YeMc3qMMLDynNkQXbt0543aijWXODes/CMzdFtmDS/c=
Subject key identifier: CC:50:DA:3E:F9:58:1E:9D:0A:FB:81:BE:3D:F5:0B:00:46:72:AE:84
Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13
Certificate serial: 019D9B198B707B7604A582016AF4D2431313
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
Manifest number: 14AE
Signing time: Fri 17 Apr 2026 11:00:35 +0000
Manifest this update: Fri 17 Apr 2026 11:00:35 +0000
Manifest next update: Sat 18 Apr 2026 11:00:35 +0000
Files and hashes: 1: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl (hash: NqnsB+qzRK8heVigxGMyI7E6pyOUmIqMKM1Y3s2WMPY=)
2: QTSeAmbhk4ALBMpkH985HfYO3Hs.roa (hash: AgyeNLNXK0dfLFTU8GE2xydoqlDVwBT0jf9mFYgh9VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:8b:70:7b:76:04:a5:82:01:6a:f4:d2:43:13:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13
Validity
Not Before: Apr 17 11:00:35 2026 GMT
Not After : Apr 18 11:00:35 2026 GMT
Subject: CN=cc50da3ef9581e9d0afb81be3df50b004672ae84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:dd:ce:e2:d2:e9:ab:87:77:62:c1:d6:2f:a7:
5c:0c:43:66:af:03:08:9d:e6:96:e9:eb:15:a7:ba:
5f:e6:df:67:91:26:51:40:ad:aa:1b:06:9e:27:45:
74:86:ad:70:39:ce:cd:d1:00:8f:34:2c:e2:89:0e:
e7:eb:4f:22:fd:44:c7:06:7e:3f:68:5b:a2:46:5c:
8b:f3:c7:c5:14:ce:ac:ee:11:e3:52:0e:09:f4:7b:
06:be:73:37:a8:26:b8:16:e9:b8:0b:d8:19:dc:ba:
d6:df:e4:6f:a9:19:d5:5c:dd:7b:74:dc:d8:d7:20:
e4:f3:f4:61:90:77:9d:3d:5a:2d:a1:36:2d:89:91:
bc:04:ff:bf:0f:3d:2b:3e:6e:9f:b3:b8:31:b1:2f:
81:3f:2a:86:55:7e:3f:1f:8e:43:c0:fc:88:ec:06:
78:0b:de:9b:eb:33:89:62:a7:46:fb:72:c1:88:55:
7b:28:20:91:88:02:e8:15:bf:1b:39:de:e6:5d:8e:
20:e7:44:2c:c0:8d:b9:3c:3e:84:e5:ca:a4:0a:60:
a8:2a:a7:e8:a4:fe:52:48:5f:62:5c:40:06:fa:f0:
c7:49:6b:d1:9e:6e:64:4c:d0:4a:53:16:00:db:7f:
94:70:39:53:cb:63:62:85:f7:37:d1:83:ba:25:82:
9a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:50:DA:3E:F9:58:1E:9D:0A:FB:81:BE:3D:F5:0B:00:46:72:AE:84
X509v3 Authority Key Identifier:
keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:72:ed:55:22:c3:77:31:95:09:9c:c7:57:c8:db:07:a5:b7:
8d:58:69:c7:7a:5c:55:85:b8:35:28:71:6a:72:77:57:bf:c9:
bf:62:12:75:3e:01:af:0b:ab:ea:49:08:f6:cb:20:25:a8:86:
5f:5a:d5:19:a8:d2:0a:3f:d9:da:b5:22:33:81:d6:66:17:b8:
cb:b9:46:ce:79:ba:dd:60:df:06:0c:82:4e:c6:ce:1a:34:0f:
b6:e5:62:68:72:f6:66:c1:f2:43:53:cc:d6:ae:72:12:08:cb:
6f:ad:49:8e:94:f2:8a:a7:7f:4e:d1:f0:fa:d7:28:8c:fa:da:
45:6a:b6:3b:b9:a4:1e:e3:2c:cc:2e:ee:98:61:35:84:f6:2f:
fb:80:c8:2b:4a:3d:5f:a8:b5:1d:93:34:1b:f7:a4:72:1a:ff:
fc:2d:54:0f:12:e6:1a:d3:20:8b:b1:ca:03:80:04:60:82:e4:
21:41:bb:f2:55:b2:9c:55:0f:92:90:4d:88:3e:c5:41:12:63:
e0:14:d3:15:24:7a:71:0b:df:ac:39:4f:57:fc:ca:9c:ec:ac:
53:78:9a:03:93:66:9f:80:73:7b:b9:bf:54:c6:3f:83:db:58:
0f:e5:11:a5:a7:c2:2a:f8:37:97:85:64:30:93:03:4a:b2:a3:
af:0f:02:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:24:12 2026 by rpki-client