Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
File: 0c9dkt13uO9-1s1XyqoQr9mOnlo.mft (raw, json)
Hash identifier: ckiEDCPScF0BLlCGFVPm7j14GMiSPi6WcfkQJVm/Cio=
Subject key identifier: 71:81:88:7A:99:7E:6A:24:D8:B4:04:44:46:1B:CD:87:1F:C6:9A:31
Authority key identifier: D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
Certificate issuer: /CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Certificate serial: 019DA90C83F8D6B689F216695C85BB2E1046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
Manifest number: 014F
Signing time: Mon 20 Apr 2026 04:01:02 +0000
Manifest this update: Mon 20 Apr 2026 04:01:02 +0000
Manifest next update: Tue 21 Apr 2026 04:01:02 +0000
Files and hashes: 1: 0c9dkt13uO9-1s1XyqoQr9mOnlo.crl (hash: qm8x1wh+ZC5Nb/LDgjLWFkEOE3mE0y60jzhtgr03GdY=)
2: aRPei__YV55E5LayLWDZlLmCI2M.roa (hash: Cq96j35j1pjMRWQ8I4PQ7Ruzt7oVF+lvmFKi5QfS62o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:0c:83:f8:d6:b6:89:f2:16:69:5c:85:bb:2e:10:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1cf5d92dd77b8ef7ed6cd57caaa10afd98e9e5a
Validity
Not Before: Apr 20 04:01:02 2026 GMT
Not After : Apr 21 04:01:02 2026 GMT
Subject: CN=7181887a997e6a24d8b40444461bcd871fc69a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:c8:83:b5:79:ac:4c:cc:e7:f3:2b:24:c3:
de:bf:65:96:b3:64:37:6f:8e:d9:22:d6:94:0d:ec:
15:31:f1:f7:ec:2d:42:46:be:ef:f9:8e:ef:b6:3a:
70:c8:7c:5e:ba:05:63:c1:e3:3b:1c:56:c8:6e:33:
ee:ec:1e:4c:b7:29:f8:fb:37:ab:cf:b1:0e:8a:11:
71:dd:dc:57:85:ee:09:bf:6b:b3:d4:11:4a:db:2c:
1c:9f:47:e4:7d:2c:f0:96:84:5c:72:2e:2e:8c:5a:
40:eb:b9:2a:19:4d:38:b3:ae:3f:f7:3a:ca:86:bf:
46:a9:f0:5d:f5:cb:20:2a:b8:f6:94:c7:53:36:89:
83:dd:ca:d1:71:5e:9b:8b:81:6a:44:9a:35:3b:f9:
b2:6e:eb:69:98:93:e8:48:81:aa:dc:a2:67:c4:db:
eb:d4:a7:93:fc:1c:d2:80:20:d0:b1:45:94:20:1f:
c8:d5:cb:66:6f:2e:c1:c1:71:be:94:fd:d7:f8:6e:
18:e3:4a:56:2a:58:80:2e:1d:af:10:44:46:a2:62:
01:4a:b6:9c:cc:22:97:6c:2a:e8:c5:52:99:87:77:
64:f6:c1:5f:f2:50:9b:98:d8:8c:66:ba:c3:07:07:
5d:22:98:4a:d6:51:72:f5:58:70:cc:2d:ec:8c:34:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:81:88:7A:99:7E:6A:24:D8:B4:04:44:46:1B:CD:87:1F:C6:9A:31
X509v3 Authority Key Identifier:
keyid:D1:CF:5D:92:DD:77:B8:EF:7E:D6:CD:57:CA:AA:10:AF:D9:8E:9E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c9dkt13uO9-1s1XyqoQr9mOnlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/294a12-30eb-4aeb-95c8-501a0719da0c/1/0c9dkt13uO9-1s1XyqoQr9mOnlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:e8:7c:b6:c0:d6:ad:53:fc:cc:43:17:55:6d:f6:97:2c:24:
cf:0e:17:60:f2:20:de:fd:9e:21:3c:23:33:a1:d6:a6:12:2f:
c9:22:10:5c:6a:be:a6:38:3a:33:82:17:e7:15:57:08:ed:69:
2f:b8:b2:b5:c1:63:2e:4d:b8:0e:a6:50:7e:54:64:e1:9b:ae:
26:d2:98:5f:8e:d7:23:ab:e6:b1:7e:63:a9:bd:46:7b:d4:c1:
10:f7:37:d8:2a:55:9f:f3:74:74:c1:de:2e:c6:f7:79:d5:1b:
de:f4:a7:59:1b:ca:42:0e:b7:49:b3:27:04:86:9a:93:d0:fb:
ff:b4:dd:49:1b:08:b2:eb:1d:37:6c:06:47:10:5d:5d:67:56:
26:8f:43:1f:56:8e:12:f0:5a:38:d5:cf:b7:1f:a0:0d:18:dd:
61:a2:0e:35:83:46:75:63:01:d5:09:cb:9a:44:66:81:f4:25:
ad:19:d6:d7:c9:5e:f1:7b:c3:84:6b:ef:a9:75:a5:1e:b1:4b:
10:c2:1c:31:03:0b:68:df:59:1e:99:f9:d9:6c:d2:7d:b5:5f:
7e:32:5b:c3:27:f8:96:1e:30:c6:37:cc:d9:d6:ce:18:10:c6:
a1:d8:75:e3:fc:bd:1e:47:b8:47:28:92:41:9d:9b:0d:1f:1e:
ba:c6:d7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 08:28:27 2026 by rpki-client