Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
File: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft (raw, json)
Hash identifier: mLWNnniGlFYDAQVYDRzQIcdjl9DFdx/sYNZll2hLmfw=
Subject key identifier: E6:38:49:B7:FF:06:12:5A:83:38:7F:AA:D8:4A:A9:3C:8F:5F:58:A8
Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13
Certificate serial: 019E1C7D948C20F3B490556949C7FC173E7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
Manifest number: 14F1
Signing time: Tue 12 May 2026 14:00:52 +0000
Manifest this update: Tue 12 May 2026 14:00:52 +0000
Manifest next update: Wed 13 May 2026 14:00:52 +0000
Files and hashes: 1: 0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl (hash: Zktw+UKu3bcSv+egbnQZyd7o9pU158OT+NGC5tsWqgY=)
2: QTSeAmbhk4ALBMpkH985HfYO3Hs.roa (hash: AgyeNLNXK0dfLFTU8GE2xydoqlDVwBT0jf9mFYgh9VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7d:94:8c:20:f3:b4:90:55:69:49:c7:fc:17:3e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13
Validity
Not Before: May 12 14:00:52 2026 GMT
Not After : May 13 14:00:52 2026 GMT
Subject: CN=e63849b7ff06125a83387faad84aa93c8f5f58a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:64:f9:a9:c1:ca:a9:75:78:f3:5f:87:e3:a0:
1e:dd:72:f5:98:9c:ad:d4:1d:d5:52:9b:ec:8f:65:
8e:88:81:1a:06:a0:95:d3:2b:27:db:a1:68:03:d7:
e9:17:7b:12:f1:8b:d5:2a:d5:88:9f:25:ca:76:aa:
c0:3e:3d:0a:28:f7:3c:70:68:bb:61:3e:bc:60:3b:
f9:42:26:89:51:08:c8:0d:38:b2:51:e3:64:93:98:
a3:61:e0:86:9f:71:2e:70:67:28:2c:40:6c:8c:16:
f0:3d:eb:f8:8f:81:9f:b4:65:b7:04:c3:fe:79:56:
17:69:5a:81:55:67:70:9f:5b:30:9a:82:7f:30:5a:
39:ed:a5:73:5e:8d:97:93:6e:0c:76:c9:0e:f2:c4:
8a:1a:cc:4c:6c:09:9a:ff:5b:09:cd:d7:2f:c0:94:
a3:20:fa:e8:ec:25:7b:d5:11:37:d7:1a:d2:94:4b:
9d:c5:3e:88:f5:bb:66:bd:6a:7d:a3:ec:d9:a9:6a:
55:22:fb:34:d2:ce:b6:37:bc:f8:7d:e3:c6:c6:55:
3d:51:d7:c2:5b:ff:00:ea:26:b2:30:4e:99:37:51:
51:d4:f1:5f:9f:78:2f:65:b8:e1:b2:8f:90:5c:63:
0c:07:95:30:96:96:66:90:e9:fe:85:09:36:4d:82:
68:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:38:49:B7:FF:06:12:5A:83:38:7F:AA:D8:4A:A9:3C:8F:5F:58:A8
X509v3 Authority Key Identifier:
keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fe:df:37:4a:30:ba:99:7e:c1:82:e8:17:16:ff:36:4e:09:
5e:f7:3c:38:93:3e:05:8b:21:dc:fb:11:9a:c6:32:ef:ed:e6:
9c:ef:35:f8:ec:20:9e:f3:7e:15:25:c2:39:74:6a:d8:ed:13:
ba:b4:8f:8f:b5:79:84:06:6b:cb:0d:65:e6:a2:9b:5b:61:9d:
4e:40:52:ae:6c:ad:d5:fc:48:e6:5d:76:79:d6:38:cd:e2:85:
f5:94:85:6b:9f:7e:28:b1:7b:05:2a:95:8c:10:83:3a:a1:97:
17:16:35:41:e1:4b:69:00:2d:c2:37:64:18:72:d6:0f:be:b6:
7e:2a:85:2f:0d:b8:4f:a2:83:88:20:8d:30:3c:83:db:9b:fe:
12:c2:d6:76:cc:0b:bd:43:ed:0d:4b:2d:51:b9:6a:e3:37:4e:
9f:eb:a7:e1:67:05:0a:13:cd:4a:4a:44:81:33:0d:5b:bf:3d:
c0:ce:75:f5:64:f6:ba:24:a2:30:78:8b:3e:66:a0:d1:50:4e:
98:45:9b:6c:50:02:93:20:a6:3d:8c:da:c8:fe:77:35:68:a4:
0e:c6:e3:ed:5f:5d:3c:3e:fa:c8:3f:61:79:2f:bf:d6:ee:69:
4a:f3:6c:42:f7:84:d4:8d:9a:31:df:d8:5d:2c:12:c4:cc:1f:
6e:1b:6b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:33 2026 by rpki-client