Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
File: 0YwgMKWXHEpUCWqO27ISEeVCFqc.mft (raw, json)
Hash identifier: eBqtiiclxRjTmov2oL3bRTUws4IJ7qk7KeTte6XWUMQ=
Subject key identifier: A1:7D:A8:F3:4C:F2:38:F7:F5:BC:FE:8A:56:61:01:46:09:D6:AA:1B
Authority key identifier: D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
Certificate issuer: /CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Certificate serial: 019F905996FE873E30B2373AFD956C6DB971
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
Manifest number: 14B0
Signing time: Thu 23 Jul 2026 19:00:18 +0000
Manifest this update: Thu 23 Jul 2026 19:00:18 +0000
Manifest next update: Fri 24 Jul 2026 19:00:18 +0000
Files and hashes: 1: 0YwgMKWXHEpUCWqO27ISEeVCFqc.crl (hash: zwbBAG9YBn0M7abphp4biNO+dqwjpOGwe9DPNXyuHDg=)
2: lf7LSKbMZbGm86tBlbPIL648oFo.roa (hash: /K9bAYZ5YiuaJN+PfS4nniv3V/XkGZzBzxnTsucRsCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:59:96:fe:87:3e:30:b2:37:3a:fd:95:6c:6d:b9:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d18c2030a5971c4a54096a8edbb21211e54216a7
Validity
Not Before: Jul 23 19:00:18 2026 GMT
Not After : Jul 24 19:00:18 2026 GMT
Subject: CN=a17da8f34cf238f7f5bcfe8a5661014609d6aa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:4c:9c:1e:32:69:dd:f2:42:63:81:9c:56:
99:fe:1e:be:24:65:2d:b4:fa:e6:e1:24:4e:7b:f3:
05:27:23:c9:af:a9:a6:3d:eb:c4:2b:94:f4:9a:53:
11:dc:c5:3b:d8:40:38:52:11:f2:8c:0a:d8:26:28:
9f:6f:0e:92:23:5e:b8:7e:2f:e7:7f:99:27:bd:99:
dd:0d:f0:b8:34:aa:88:b7:5a:9a:92:cd:fe:a8:c0:
d0:85:b1:92:c1:17:ba:a8:b6:d2:0c:ce:c5:71:ea:
5e:9c:b8:95:c3:d9:d9:50:58:8a:f2:02:c3:4a:e5:
c6:27:83:53:48:9f:c8:f5:96:e9:d7:19:3e:58:c4:
fe:f6:cc:86:ff:26:76:a2:95:b4:d1:70:26:c4:c2:
f0:e7:ed:14:70:e2:56:90:f6:83:58:72:ec:62:1c:
b4:59:f6:1b:46:8c:ad:e4:9a:48:b1:f3:1f:ef:2c:
e2:ef:df:25:fb:50:cc:96:d8:0c:ce:25:a0:06:68:
52:e6:b9:fd:95:3a:bd:c8:0b:62:17:63:20:9b:87:
30:56:5d:86:fa:9c:97:c4:0e:6f:03:4a:54:ea:b1:
61:40:3b:0c:ba:5b:c1:fa:d9:44:db:c4:85:3c:4e:
69:57:50:a9:4e:d6:99:69:4d:aa:52:fe:6d:00:e8:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7D:A8:F3:4C:F2:38:F7:F5:BC:FE:8A:56:61:01:46:09:D6:AA:1B
X509v3 Authority Key Identifier:
keyid:D1:8C:20:30:A5:97:1C:4A:54:09:6A:8E:DB:B2:12:11:E5:42:16:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YwgMKWXHEpUCWqO27ISEeVCFqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/c4f144-6e68-46b8-858d-53a672d14b7a/1/0YwgMKWXHEpUCWqO27ISEeVCFqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:37:42:de:59:9f:31:f1:df:67:0f:8c:15:ee:7f:c1:c6:5d:
5f:8c:53:00:aa:b3:95:86:73:48:4b:e5:da:a3:ba:62:7b:11:
5d:cc:4b:d0:1f:f4:6b:89:a9:bc:df:a7:69:70:5d:ff:3f:45:
1e:b0:d3:1e:05:19:42:d6:26:43:7f:22:32:54:c6:5c:67:52:
86:2e:00:a7:c1:64:64:ad:31:aa:7a:88:70:4b:45:dc:fe:50:
c9:dd:b6:c8:b2:e8:27:46:9e:25:bb:6c:c3:ff:43:24:c1:30:
37:7f:ac:61:e5:01:80:14:50:3c:f4:69:88:10:0b:cf:f3:c2:
a8:54:23:4f:7a:07:d1:ca:ef:f1:9c:03:a9:a4:06:91:df:06:
95:58:f4:7b:94:ac:a1:d2:c9:97:a7:2d:da:3e:e5:4e:50:87:
97:17:1a:6c:43:2a:8e:bf:60:cf:f0:82:75:48:c4:6b:68:13:
22:79:a1:31:9e:d2:b3:52:e6:eb:f0:52:46:e6:68:6a:b3:77:
86:5c:31:12:7f:e2:ca:a7:52:a3:15:66:db:d6:72:6b:03:2d:
95:03:1d:d5:07:1a:7f:b0:0f:34:3a:a8:6c:48:6c:89:27:4b:
e2:00:ca:eb:61:32:e6:ac:87:88:2d:fa:33:1f:56:c9:77:48:
a9:3e:ba:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWZb+hz4wsjc6/ZVsbblxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOGMyMDMwYTU5NzFjNGE1NDA5NmE4ZWRiYjIxMjExZTU0
MjE2YTcwHhcNMjYwNzIzMTkwMDE4WhcNMjYwNzI0MTkwMDE4WjAzMTEwLwYDVQQD
EyhhMTdkYThmMzRjZjIzOGY3ZjViY2ZlOGE1NjYxMDE0NjA5ZDZhYTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/hMnB4yad3yQmOBnFaZ/h6+JGUt
tPrm4SROe/MFJyPJr6mmPevEK5T0mlMR3MU72EA4UhHyjArYJiifbw6SI164fi/n
f5knvZndDfC4NKqIt1qaks3+qMDQhbGSwRe6qLbSDM7FcepenLiVw9nZUFiK8gLD
SuXGJ4NTSJ/I9Zbp1xk+WMT+9syG/yZ2opW00XAmxMLw5+0UcOJWkPaDWHLsYhy0
WfYbRoyt5JpIsfMf7yzi798l+1DMltgMziWgBmhS5rn9lTq9yAtiF2Mgm4cwVl2G
+pyXxA5vA0pU6rFhQDsMulvB+tlE28SFPE5pV1CpTtaZaU2qUv5tAOiiQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKF9qPNM8jj39bz+ilZhAUYJ1qobMB8GA1UdIwQY
MBaAFNGMIDCllxxKVAlqjtuyEhHlQhanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQt
NTNhNjcyZDE0YjdhLzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9jNGYxNDQtNmU2OC00NmI4LTg1OGQtNTNhNjcyZDE0Yjdh
LzEvMFl3Z01LV1hIRXBVQ1dxTzI3SVNFZVZDRnFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUTdC3lmf
MfHfZw+MFe5/wcZdX4xTAKqzlYZzSEvl2qO6YnsRXcxL0B/0a4mpvN+naXBd/z9F
HrDTHgUZQtYmQ38iMlTGXGdShi4Ap8FkZK0xqnqIcEtF3P5Qyd22yLLoJ0aeJbts
w/9DJMEwN3+sYeUBgBRQPPRpiBALz/PCqFQjT3oH0crv8ZwDqaQGkd8GlVj0e5Ss
odLJl6ct2j7lTlCHlxcabEMqjr9gz/CCdUjEa2gTInmhMZ7Ss1Lm6/BSRuZoarN3
hlwxEn/iyqdSoxVm29ZyawMtlQMd1Qcaf7APNDqobEhsiSdL4gDK62Ey5qyHiC36
Mx9WyXdIqT66FQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:58:46 2026 by rpki-client