
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
File: 1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json)
Hash identifier: UZVU1bsXEezuX2UtECMIWnE369Ndzg1qJzLtMDthmvc=
Subject key identifier: A1:2E:B7:1A:28:EB:06:82:7F:ED:4F:F5:FB:6E:72:D9:69:64:44:EA
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial: 019D9AE2638E7BFADBEBA5AAB1E46BD4FD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
Manifest number: 18D1
Signing time: Fri 17 Apr 2026 10:00:20 +0000
Manifest this update: Fri 17 Apr 2026 10:00:20 +0000
Manifest next update: Sat 18 Apr 2026 10:00:20 +0000
Files and hashes: 1: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: 0pqywdJol4LKQjA6imXZ5I7Jvv2nEfm1dO6Un4xSMHg=)
2: 2_chmdN9KFFBZIvF9VY89f23PGs.roa (hash: oIVNlGlquIUtlwcT49BOjBM2tIxXAOLbTnaR8cakqIw=)
3: fa7QQf3mwNaqx6Q9YVB4JOEPT1Y.roa (hash: cuDfOcc4rXjt55ZYwZL2MoLNfkQ/Mx73QisLDCI3qEU=)
4: oSGKhwEc_oyA4GgI1H0hJOveCVI.roa (hash: 1SINNHx3FHxT/JXf8IpEHqdou86CS2g7FnWo+nB+dSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:63:8e:7b:fa:db:eb:a5:aa:b1:e4:6b:d4:fd:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Validity
Not Before: Apr 17 10:00:20 2026 GMT
Not After : Apr 18 10:00:20 2026 GMT
Subject: CN=a12eb71a28eb06827fed4ff5fb6e72d9696444ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:73:ec:c8:97:2b:44:21:3f:21:ab:ee:5c:3d:
53:69:57:1b:f5:5d:ee:ef:eb:4a:fb:a4:80:66:8d:
27:18:63:11:57:ad:04:84:76:bb:57:1a:cf:39:eb:
e0:91:3d:90:e6:25:3b:84:5e:fd:66:3c:7a:05:24:
86:c2:65:a6:16:3c:04:51:f7:92:16:19:b5:a9:5e:
48:28:b2:ca:36:92:2f:89:79:5c:76:03:c1:5f:d2:
40:25:0a:ee:36:1c:7a:ba:2e:f3:6b:1f:df:f1:0d:
a5:10:bf:ef:85:52:6b:1d:74:1a:51:a1:0b:3b:b0:
69:f9:80:ed:32:29:4c:a6:45:dc:eb:4f:9a:9a:a7:
8d:0d:ba:64:cd:37:d8:0f:46:be:6c:1d:8b:27:c9:
7a:2f:c2:f2:02:96:ad:91:d0:a5:43:13:d8:d4:eb:
d1:33:eb:62:5d:fa:09:a5:0e:a0:df:82:ad:11:9f:
79:e3:08:00:36:8c:7f:fd:98:4f:c7:6f:82:2c:de:
40:d0:97:ad:40:a1:a1:04:b3:98:66:4f:04:6d:63:
18:2b:48:7c:05:40:f0:d7:d6:a4:0c:cf:1e:29:59:
65:83:db:e7:ff:fe:98:17:13:84:0c:2f:cb:42:7c:
62:44:28:c7:62:ad:d8:8d:6d:30:12:dd:ba:03:f6:
bb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2E:B7:1A:28:EB:06:82:7F:ED:4F:F5:FB:6E:72:D9:69:64:44:EA
X509v3 Authority Key Identifier:
keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:5c:85:43:d0:35:e4:5b:49:12:aa:68:ed:e3:c8:ab:de:80:
f1:1d:cf:e3:f3:6f:76:52:d6:79:3f:cc:de:33:be:1a:16:1c:
d4:74:95:63:ff:99:86:e8:02:15:3c:0d:bf:0a:50:de:df:18:
b1:d8:b7:85:9e:04:b2:76:c0:f9:34:0c:97:be:a9:1c:67:61:
3b:9b:ab:0b:1f:57:25:e2:05:0e:3c:60:45:ef:d4:ca:96:45:
1a:c7:b9:4d:01:73:18:fc:0c:36:21:12:3e:66:02:99:93:a7:
62:db:2a:b4:e0:23:86:97:a0:d9:2d:d0:1e:4f:e4:8c:3b:be:
48:d3:26:03:99:b0:c9:f0:fb:77:4f:18:9c:61:d5:2c:a0:08:
11:b2:58:f6:83:c1:cd:a5:5c:76:a4:94:49:d2:8a:22:70:4a:
40:1c:a0:b0:75:01:68:6c:41:ba:be:07:4b:5b:90:cd:7c:c0:
89:a6:eb:dc:39:e6:80:70:00:ed:d7:2b:1a:07:85:55:fa:ae:
8f:d7:44:66:4b:45:65:f0:54:02:3f:a7:3d:e3:c7:70:7e:9b:
d8:13:61:4c:a6:8f:ee:4f:1b:46:cb:8f:fa:94:4b:b5:67:44:
f3:44:0e:bb:5a:d7:0f:7e:6c:db:5c:3c:b8:5f:b1:69:b6:8a:
07:6a:e5:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4mOOe/rb66WqseRr1P1eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YzNiMTJjOGQ2MzUxOTBlYzkyODQzN2JiZDZjYjBlOGMz
OGY5YTkwHhcNMjYwNDE3MTAwMDIwWhcNMjYwNDE4MTAwMDIwWjAzMTEwLwYDVQQD
EyhhMTJlYjcxYTI4ZWIwNjgyN2ZlZDRmZjVmYjZlNzJkOTY5NjQ0NGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnPsyJcrRCE/IavuXD1TaVcb9V3u
7+tK+6SAZo0nGGMRV60EhHa7VxrPOevgkT2Q5iU7hF79Zjx6BSSGwmWmFjwEUfeS
Fhm1qV5IKLLKNpIviXlcdgPBX9JAJQruNhx6ui7zax/f8Q2lEL/vhVJrHXQaUaEL
O7Bp+YDtMilMpkXc60+amqeNDbpkzTfYD0a+bB2LJ8l6L8LyApatkdClQxPY1OvR
M+tiXfoJpQ6g34KtEZ954wgANox//ZhPx2+CLN5A0JetQKGhBLOYZk8EbWMYK0h8
BUDw19akDM8eKVllg9vn//6YFxOEDC/LQnxiRCjHYq3YjW0wEt26A/a7UQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEutxoo6waCf+1P9ftuctlpZETqMB8GA1UdIwQY
MBaAFNTDsSyNY1GQ7JKEN7vWyw6MOPmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTkt
MGY5ZDU3YTVkNGZhLzEvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTktMGY5ZDU3YTVkNGZh
LzEvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx1yFQ9A1
5FtJEqpo7ePIq96A8R3P4/NvdlLWeT/M3jO+GhYc1HSVY/+ZhugCFTwNvwpQ3t8Y
sdi3hZ4EsnbA+TQMl76pHGdhO5urCx9XJeIFDjxgRe/UypZFGse5TQFzGPwMNiES
PmYCmZOnYtsqtOAjhpeg2S3QHk/kjDu+SNMmA5mwyfD7d08YnGHVLKAIEbJY9oPB
zaVcdqSUSdKKInBKQBygsHUBaGxBur4HS1uQzXzAiabr3DnmgHAA7dcrGgeFVfqu
j9dEZktFZfBUAj+nPePHcH6b2BNhTKaP7k8bRsuP+pRLtWdE80QOu1rXD35s21w8
uF+xabaKB2rl8Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:46:15 2026 by rpki-client