Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier: ymvfjirr85S/OJ3drcaaFLmWQbLpsKw5gLdrFy3hJpw=
Subject key identifier: 0C:A9:1B:C3:30:6D:6F:59:2B:91:B5:B0:DB:8C:D2:1A:3D:8E:40:F4
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial: 019D9998F9BB0FE07E5AE8FC42C273525B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 04:00:32 +0000
Manifest this update: Fri 17 Apr 2026 04:00:32 +0000
Manifest next update: Sat 18 Apr 2026 04:00:32 +0000
Files and hashes: 1: LcqefA0kElh8JewV5kCSLGG-J5k.roa (hash: JMhJK/hqVpg8wqMcEmK9X4OKux3FowYsD4YqDBdN+EQ=)
2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: /Y2b4/VJO26juAa2fqzY1QXw9cNSwNDg3aJU5hwVDXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:f9:bb:0f:e0:7e:5a:e8:fc:42:c2:73:52:5b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
Validity
Not Before: Apr 17 04:00:32 2026 GMT
Not After : Apr 18 04:00:32 2026 GMT
Subject: CN=0ca91bc3306d6f592b91b5b0db8cd21a3d8e40f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:87:24:36:ea:11:2e:13:2a:6c:93:d6:69:
eb:bd:74:aa:02:4f:4d:fd:07:9f:5e:c7:7c:bb:34:
f1:b9:9d:23:32:35:a6:12:a9:08:ac:c8:d1:33:56:
a8:5a:2c:6b:d9:31:cc:a6:f7:30:8d:14:4a:a6:c6:
65:83:da:86:b0:d3:95:a5:7d:89:af:03:c5:9e:db:
87:00:a1:d5:95:fe:cd:be:12:48:39:f7:b0:a3:77:
97:39:dc:bf:10:bd:5b:83:0c:98:5a:c2:3f:51:5a:
79:22:48:1f:f4:46:c7:db:6b:75:a1:0b:e3:f8:e9:
7a:31:18:71:17:ba:2c:35:46:79:5d:64:a1:93:e8:
ba:b7:9b:9c:27:cc:04:24:b5:28:9e:66:2a:49:02:
83:55:fc:b1:7f:5a:1d:df:f4:13:f6:08:e9:83:08:
a7:55:ac:56:ec:60:cd:34:f0:58:6f:f3:d7:03:ad:
15:15:bf:64:69:1d:d2:cb:4f:5e:50:0d:1f:5b:a1:
16:33:5d:85:53:86:0d:c3:9b:4e:4b:9d:fc:a0:c0:
ce:25:36:c3:55:8e:cf:7d:b2:77:c2:fe:ec:1a:46:
e3:0a:e5:a1:a6:fa:08:d4:4b:47:c8:6a:21:6f:84:
63:e3:21:26:a0:47:55:9e:08:65:14:4a:b9:04:68:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A9:1B:C3:30:6D:6F:59:2B:91:B5:B0:DB:8C:D2:1A:3D:8E:40:F4
X509v3 Authority Key Identifier:
keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:62:ac:22:ab:b2:e7:66:b1:87:7b:96:19:c2:95:f1:b1:64:
df:60:ec:0a:e1:42:28:73:b4:6e:ff:f5:82:20:a4:d2:1a:12:
7d:a7:f9:be:c5:23:79:9e:76:39:48:9a:8d:1e:3e:63:67:e8:
b7:7b:1e:32:0f:d7:af:33:ab:92:14:1d:f5:e8:81:ec:46:3e:
71:57:8d:21:85:76:3b:70:4e:3c:26:12:2d:12:21:d5:37:66:
ac:0c:89:0d:ef:61:c3:6f:f1:19:73:69:f5:89:3e:db:01:5d:
2b:a3:47:ef:a4:d3:ac:81:2e:2e:0b:a6:b5:61:ea:fd:3e:e8:
68:31:96:1d:a4:d5:b6:da:6b:56:65:6f:bf:60:b8:35:75:3d:
99:8f:a4:d6:ae:b8:a1:96:66:cf:c8:3e:3a:e0:1a:e1:a3:ac:
fa:04:c8:d4:9b:72:25:b3:73:5d:7c:ec:da:c0:13:1a:e0:50:
3f:be:52:70:8a:e4:d6:b9:6d:ce:c1:b6:e5:05:26:e4:19:e6:
78:08:c3:bb:c6:e3:9a:65:f7:07:00:26:2f:83:bc:b1:60:79:
96:ab:03:e8:ae:62:b9:d9:cc:4c:47:c7:01:5b:c2:36:85:41:
3b:c6:6a:5b:98:65:e8:f0:c8:39:a0:59:53:d1:6a:0d:05:83:
9b:ad:16:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:18 2026 by rpki-client