Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
File: IsFSYGEl62bVIiY_oDEJu_C7o9o.mft (raw, json)
Hash identifier: LPBZyR70Aoz7Z7j/QFKJxIb1nEUnhGTEw5BhJbNBaao=
Subject key identifier: 4B:8D:9E:2D:69:BF:2F:97:06:60:08:D0:95:07:42:81:07:7E:3C:8B
Authority key identifier: 22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
Certificate issuer: /CN=22c152606125eb66d522263fa03109bbf0bba3da
Certificate serial: 019D999905532BC46AB99941EDE9FABA5523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 04:00:35 +0000
Manifest this update: Fri 17 Apr 2026 04:00:35 +0000
Manifest next update: Sat 18 Apr 2026 04:00:35 +0000
Files and hashes: 1: IsFSYGEl62bVIiY_oDEJu_C7o9o.crl (hash: aNaXl0BY+9hwU7tx4hiwbUdLvwlPaOwhfVxcePNd3z8=)
2: OsfgOgchwXGB3oJqB3a7m1Oa_FU.roa (hash: Gff4FAc0x1oRI71/96AW462cCchXrhxYJx69los4A7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:05:53:2b:c4:6a:b9:99:41:ed:e9:fa:ba:55:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c152606125eb66d522263fa03109bbf0bba3da
Validity
Not Before: Apr 17 04:00:35 2026 GMT
Not After : Apr 18 04:00:35 2026 GMT
Subject: CN=4b8d9e2d69bf2f97066008d095074281077e3c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f6:b9:5a:b0:b6:9a:9d:65:70:99:f4:79:27:
b0:3d:f4:e1:3f:1b:66:c0:98:5a:e0:25:ef:37:88:
9c:94:6b:77:8d:b3:22:31:17:7c:57:7f:7b:7f:c0:
c1:51:c3:f8:59:c2:08:43:f5:17:b4:71:70:6e:bb:
ac:ea:4b:bd:94:f8:1a:59:b4:b0:5f:7c:37:7f:03:
7e:ba:a1:4c:e7:9f:10:bd:90:ce:58:6a:b7:94:92:
eb:62:3d:3b:c7:fb:1c:20:92:4f:c5:34:26:4b:e8:
da:19:36:18:22:a9:26:06:f9:7e:2b:49:c8:81:2f:
c0:c5:08:b6:ee:4a:1d:e9:51:b3:b1:03:98:ae:34:
16:7f:f3:2c:76:65:f1:7b:42:c4:8a:da:bf:65:5c:
ab:0d:e0:a7:a2:37:aa:84:38:96:8c:0b:42:86:f7:
44:4e:cc:b6:a4:81:8c:c7:83:7a:ac:ee:2c:27:1e:
b7:4f:1c:75:19:b9:fb:f5:36:19:ee:f5:a1:d6:37:
f1:e2:69:ab:e1:3a:98:19:8c:08:4e:6c:78:80:08:
b3:7b:9b:9e:75:92:c6:e5:78:51:75:8d:0f:de:c3:
39:59:02:1a:4a:c4:64:99:39:11:23:99:33:72:d2:
d7:ec:d6:5f:1c:9e:52:07:c5:43:e9:70:65:c9:48:
37:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8D:9E:2D:69:BF:2F:97:06:60:08:D0:95:07:42:81:07:7E:3C:8B
X509v3 Authority Key Identifier:
keyid:22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:6a:3f:49:40:95:0f:b8:81:85:0b:1f:09:82:df:9c:c9:e7:
c8:bc:b4:04:40:44:68:20:22:77:97:44:7f:ee:ad:e5:8a:08:
49:9f:3e:53:97:87:7d:91:a5:d0:81:0d:5d:66:da:88:f0:92:
3c:82:36:85:42:8d:8e:46:0d:bb:23:90:92:de:9e:6d:09:23:
24:81:44:ff:f3:ca:f0:36:e2:77:45:bf:2f:3e:87:97:32:a2:
37:a5:44:9a:55:7e:4e:63:f0:b4:50:18:88:23:76:04:ea:f7:
17:62:a2:fd:c4:da:81:14:47:c6:5f:2a:41:42:7f:18:a7:92:
ea:3d:48:2f:40:3c:fe:98:ba:83:a4:54:0b:29:32:da:dc:14:
71:65:fe:d2:53:3a:0a:76:a7:83:31:f9:7e:04:da:d1:f3:2c:
2d:4f:bc:48:03:84:93:a4:b6:ad:d2:56:43:1c:f8:78:c6:61:
85:0d:0b:82:55:f0:cc:0f:88:27:50:f5:6a:86:83:18:01:54:
05:39:05:77:43:f6:60:b6:4f:2a:56:d1:ce:59:29:86:e8:9b:
cc:b0:77:75:3a:00:a0:e3:7d:da:84:3f:84:f2:94:0c:52:ee:
b4:88:bd:1b:1e:b8:58:3e:ee:38:91:ce:4b:f5:74:1e:dc:70:
71:0c:07:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmQVTK8RquZlB7en6ulUjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzE1MjYwNjEyNWViNjZkNTIyMjYzZmEwMzEwOWJiZjBi
YmEzZGEwHhcNMjYwNDE3MDQwMDM1WhcNMjYwNDE4MDQwMDM1WjAzMTEwLwYDVQQD
Eyg0YjhkOWUyZDY5YmYyZjk3MDY2MDA4ZDA5NTA3NDI4MTA3N2UzYzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/a5WrC2mp1lcJn0eSewPfThPxtm
wJha4CXvN4iclGt3jbMiMRd8V397f8DBUcP4WcIIQ/UXtHFwbrus6ku9lPgaWbSw
X3w3fwN+uqFM558QvZDOWGq3lJLrYj07x/scIJJPxTQmS+jaGTYYIqkmBvl+K0nI
gS/AxQi27kod6VGzsQOYrjQWf/MsdmXxe0LEitq/ZVyrDeCnojeqhDiWjAtChvdE
Tsy2pIGMx4N6rO4sJx63Txx1Gbn79TYZ7vWh1jfx4mmr4TqYGYwITmx4gAize5ue
dZLG5XhRdY0P3sM5WQIaSsRkmTkRI5kzctLX7NZfHJ5SB8VD6XBlyUg3OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuNni1pvy+XBmAI0JUHQoEHfjyLMB8GA1UdIwQY
MBaAFCLBUmBhJetm1SImP6AxCbvwu6PaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEt
MGZlNGQ3ZjdkYjNkLzEvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hYzI1YjQtMTk0ZS00OWM0LWFhYjEtMGZlNGQ3ZjdkYjNk
LzEvSXNGU1lHRWw2MmJWSWlZX29ERUp1X0M3bzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWo/SUCV
D7iBhQsfCYLfnMnnyLy0BEBEaCAid5dEf+6t5YoISZ8+U5eHfZGl0IENXWbaiPCS
PII2hUKNjkYNuyOQkt6ebQkjJIFE//PK8Dbid0W/Lz6HlzKiN6VEmlV+TmPwtFAY
iCN2BOr3F2Ki/cTagRRHxl8qQUJ/GKeS6j1IL0A8/pi6g6RUCyky2twUcWX+0lM6
CnangzH5fgTa0fMsLU+8SAOEk6S2rdJWQxz4eMZhhQ0LglXwzA+IJ1D1aoaDGAFU
BTkFd0P2YLZPKlbRzlkphuibzLB3dToAoON92oQ/hPKUDFLutIi9Gx64WD7uOJHO
S/V0HtxwcQwHsQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:17 2026 by rpki-client