Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
File: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft (raw, json)
Hash identifier: h8vO3kKOgPXqN2YwHqS9XjcMKMZkTTqT2AdOuLExxOk=
Subject key identifier: 26:ED:0F:51:41:D6:C1:19:B0:1D:8E:5D:98:70:9B:85:8E:C4:4C:03
Authority key identifier: D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
Certificate issuer: /CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Certificate serial: 019D98F501AE9786F8667AE52C4FE9C4BA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
Manifest number: 0797
Signing time: Fri 17 Apr 2026 01:01:26 +0000
Manifest this update: Fri 17 Apr 2026 01:01:26 +0000
Manifest next update: Sat 18 Apr 2026 01:01:26 +0000
Files and hashes: 1: 14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl (hash: FHyE/asP9mji9AYYZtsO9Z5RhUtZUwDQCt8J5Ubx1H4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:01:ae:97:86:f8:66:7a:e5:2c:4f:e9:c4:ba:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d788851981cfb3c15624b6e97f60a3d991d6d969
Validity
Not Before: Apr 17 01:01:26 2026 GMT
Not After : Apr 18 01:01:26 2026 GMT
Subject: CN=26ed0f5141d6c119b01d8e5d98709b858ec44c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7a:c7:59:c8:0b:65:fd:4d:94:de:5e:05:44:
e8:3b:f8:0b:c7:71:b8:80:5b:7e:92:0d:b7:99:81:
5b:48:2f:7a:24:d2:e9:df:c1:68:e3:a0:8b:06:de:
90:18:03:19:9d:09:31:d3:b3:6b:a5:ee:e9:12:ed:
a1:55:08:72:61:be:87:a5:8b:e2:34:a6:20:f5:9b:
94:b2:b6:19:c4:d0:4d:95:f0:8b:f6:52:91:f3:e2:
3e:c6:9d:b9:61:80:b7:9a:0f:ed:48:86:d2:eb:26:
04:12:1d:ac:e0:a5:76:ba:8f:1f:5c:16:3d:c7:97:
7e:79:c0:41:6b:a8:75:38:57:b0:f8:e6:37:07:b0:
e6:34:9e:bb:20:69:d0:f7:48:6f:c0:4b:31:72:f0:
45:ff:74:87:27:fa:e4:0f:f9:dc:f2:9d:6a:d2:36:
85:67:26:81:99:3b:cb:52:1d:62:a9:1d:9a:b0:f3:
8c:c4:e2:24:16:46:0c:40:40:06:4b:a8:22:76:c5:
bb:aa:01:95:b4:1b:8f:96:31:18:8d:07:76:e8:dc:
63:40:f8:c9:6e:52:c1:65:cb:54:d5:99:6d:7c:8b:
a0:a2:c9:39:12:b5:91:c5:a5:a7:89:de:4b:37:f3:
3f:94:f0:41:51:6c:fb:1e:89:06:08:35:94:6a:c1:
1c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:ED:0F:51:41:D6:C1:19:B0:1D:8E:5D:98:70:9B:85:8E:C4:4C:03
X509v3 Authority Key Identifier:
keyid:D7:88:85:19:81:CF:B3:C1:56:24:B6:E9:7F:60:A3:D9:91:D6:D9:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0e2311-f9a1-4896-9d98-d08004493d14/1/14iFGYHPs8FWJLbpf2Cj2ZHW2Wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6c:08:31:1e:b2:5c:8b:2b:37:1d:50:58:98:bd:14:23:8c:
a9:41:e8:f7:1d:9f:d0:ed:e3:f8:73:48:5f:92:57:cd:08:0b:
98:9d:40:53:56:d3:6a:3d:b0:4a:39:dc:84:5e:0d:da:0b:bf:
ec:fe:b9:48:69:2b:62:cb:0c:00:40:69:ca:2e:15:f1:ad:73:
89:48:2e:7e:d4:7e:aa:44:ac:19:8f:02:47:83:db:cb:f7:b2:
90:37:93:3e:30:5e:06:4d:a7:80:22:50:ce:b7:a0:7f:f8:41:
e9:9f:2a:26:b9:0c:45:4b:04:a9:0a:8e:51:6d:37:60:50:5b:
a0:40:6f:e8:70:2f:c8:4a:56:4f:88:06:23:8d:dd:66:3a:68:
6f:97:67:42:8a:90:dd:e4:75:dd:a6:2b:9d:df:a1:26:6a:97:
13:05:20:28:89:b9:b6:20:da:a7:af:c2:e6:56:00:24:c4:fa:
70:1c:d1:b8:c6:85:84:14:bf:00:1a:00:41:4e:03:d3:18:dc:
15:24:96:c4:ea:91:22:a3:3c:75:08:3a:9d:2f:ae:eb:c8:42:
34:ee:cd:9e:48:2b:a5:d9:b2:5c:09:7d:9a:16:a7:3c:da:75:
1a:3f:0b:42:93:5b:60:96:88:c5:7c:b7:40:79:f9:d3:ef:f2:
16:84:c9:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9QGul4b4ZnrlLE/pxLqAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ODg4NTE5ODFjZmIzYzE1NjI0YjZlOTdmNjBhM2Q5OTFk
NmQ5NjkwHhcNMjYwNDE3MDEwMTI2WhcNMjYwNDE4MDEwMTI2WjAzMTEwLwYDVQQD
EygyNmVkMGY1MTQxZDZjMTE5YjAxZDhlNWQ5ODcwOWI4NThlYzQ0YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3rHWcgLZf1NlN5eBUToO/gLx3G4
gFt+kg23mYFbSC96JNLp38Fo46CLBt6QGAMZnQkx07Nrpe7pEu2hVQhyYb6HpYvi
NKYg9ZuUsrYZxNBNlfCL9lKR8+I+xp25YYC3mg/tSIbS6yYEEh2s4KV2uo8fXBY9
x5d+ecBBa6h1OFew+OY3B7DmNJ67IGnQ90hvwEsxcvBF/3SHJ/rkD/nc8p1q0jaF
ZyaBmTvLUh1iqR2asPOMxOIkFkYMQEAGS6gidsW7qgGVtBuPljEYjQd26NxjQPjJ
blLBZctU1ZltfIugosk5ErWRxaWnid5LN/M/lPBBUWz7HokGCDWUasEcewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCbtD1FB1sEZsB2OXZhwm4WOxEwDMB8GA1UdIwQY
MBaAFNeIhRmBz7PBViS26X9go9mR1tlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZTIzMTEtZjlhMS00ODk2LTlkOTgt
ZDA4MDA0NDkzZDE0LzEvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZTIzMTEtZjlhMS00ODk2LTlkOTgtZDA4MDA0NDkzZDE0
LzEvMTRpRkdZSFBzOEZXSkxicGYyQ2oyWkhXMldrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2wIMR6y
XIsrNx1QWJi9FCOMqUHo9x2f0O3j+HNIX5JXzQgLmJ1AU1bTaj2wSjnchF4N2gu/
7P65SGkrYssMAEBpyi4V8a1ziUguftR+qkSsGY8CR4Pby/eykDeTPjBeBk2ngCJQ
zregf/hB6Z8qJrkMRUsEqQqOUW03YFBboEBv6HAvyEpWT4gGI43dZjpob5dnQoqQ
3eR13aYrnd+hJmqXEwUgKIm5tiDap6/C5lYAJMT6cBzRuMaFhBS/ABoAQU4D0xjc
FSSWxOqRIqM8dQg6nS+u68hCNO7NnkgrpdmyXAl9mhanPNp1Gj8LQpNbYJaIxXy3
QHn50+/yFoTJ6Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:57:10 2026 by rpki-client