Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
File: C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json)
Hash identifier: rIU0Gtkmwz1Ax/VkOTGzNoVJc83GsxtNueasCz28uI8=
Subject key identifier: 87:02:0E:01:09:90:08:47:D9:1C:0F:AF:B4:8D:02:E8:97:1D:AC:BB
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial: 019CA9B3E5C5CD4C6E6E408510CC6E5E8C8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 14:01:05 +0000
Manifest this update: Sun 01 Mar 2026 14:01:05 +0000
Manifest next update: Mon 02 Mar 2026 14:01:05 +0000
Files and hashes: 1: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: HaDpQhE/O2AS2g1aV8A7c3aLzT1ehgJYhLdMy79sAFQ=)
2: OWJuJrNuwbbFDFgA56uuuJeCvL8.roa (hash: /ZFH55PDC4s2E7M5LW3jwm4Uto4IlWIhyCzpet8FzZY=)
3: jHOSi9_oJekIEx4EmUwyddmGDN8.roa (hash: Ntcg6Twu+N2HgOTH++SeVjtpqrilgEpyp5kKVNoLrTg=)
4: kN99vFdbAempQ2A2_gxGNJ7ed64.roa (hash: 1v+1gMi8uf5SBhW1FJK7tf586/slgxWuh9VuZL56b4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:e5:c5:cd:4c:6e:6e:40:85:10:cc:6e:5e:8c:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Validity
Not Before: Mar 1 14:01:05 2026 GMT
Not After : Mar 2 14:01:05 2026 GMT
Subject: CN=87020e0109900847d91c0fafb48d02e8971dacbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:74:1b:0d:23:99:8c:df:37:bc:ba:ba:9b:18:
cd:ba:be:4d:7e:a5:b3:29:3d:75:f9:66:91:fa:84:
48:36:27:a2:0c:ce:8c:13:0b:d8:3f:f1:1f:00:76:
8b:2b:43:05:7b:77:f9:87:c4:79:dc:48:0e:c9:e9:
be:c3:92:0e:36:f9:c3:75:c5:5a:1e:ae:63:0f:d3:
f8:7a:6b:97:d4:68:55:56:f3:6c:98:be:44:3a:ae:
28:11:ec:85:f3:98:ae:ed:69:5c:4e:87:d4:82:78:
43:2c:52:12:79:52:1f:06:d0:6a:63:b9:1f:fd:3d:
0e:43:84:ab:b0:e4:a0:a0:7a:ad:25:85:55:60:f4:
ce:b5:d1:4d:0e:8b:22:fc:02:bc:6b:f9:73:c2:89:
c9:e1:a2:d4:50:15:8f:61:da:d4:78:66:5e:99:e7:
1f:e6:27:d1:7d:aa:41:16:4f:9b:7e:db:4f:f4:fe:
34:d1:60:50:d8:70:92:55:65:c3:ff:ab:c7:e5:b2:
7c:30:ec:77:2d:54:ed:a9:f9:15:fe:74:c5:18:7f:
b6:f0:e0:5f:0d:7d:f9:42:ea:e2:80:67:d8:ce:bd:
c2:a2:6d:7c:d3:48:03:1e:fa:08:5f:3d:ca:1e:9e:
ec:97:eb:50:68:57:4d:41:16:a2:a2:42:48:43:2a:
11:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:02:0E:01:09:90:08:47:D9:1C:0F:AF:B4:8D:02:E8:97:1D:AC:BB
X509v3 Authority Key Identifier:
keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c3:7b:4b:3e:c7:21:43:60:25:17:5b:13:74:d0:8b:42:89:
15:e4:43:e7:93:d5:6b:a5:9c:96:58:7d:65:c8:d7:53:91:e5:
99:2b:15:9b:73:aa:89:ce:3e:ff:ee:6a:8c:5c:2d:28:4b:bc:
bd:19:0a:c9:fb:a8:9c:02:98:1c:59:5c:b1:2e:2f:d3:70:b1:
44:00:19:80:0a:c1:e5:04:a3:c5:4b:e0:e1:e6:7d:5e:c0:e4:
06:e6:61:1e:c7:14:2c:7a:1b:8e:cb:97:30:db:59:23:5b:7f:
47:3f:41:7a:e2:7c:e6:1a:a0:35:a3:db:ad:62:3e:b1:84:0c:
ad:bb:df:a6:3b:ad:b5:11:5b:fa:60:6a:4d:98:c6:e3:91:ab:
bb:39:f6:dc:ad:cc:15:b9:47:75:00:f9:ca:29:ec:ee:e7:05:
3f:6a:f9:20:24:ca:80:c6:33:ef:6e:82:29:26:b9:a3:62:fa:
7d:30:8b:14:8b:ae:43:e4:f4:8e:90:f2:9c:27:15:ec:03:24:
17:42:ea:3c:fa:7f:c8:ee:f4:4e:e5:21:ad:46:b2:01:38:ae:
71:f4:90:48:c2:bc:20:11:33:c8:62:74:85:0a:68:32:93:17:
c0:34:cd:a9:55:f4:bf:fb:94:0b:3e:18:88:16:2d:d1:67:37:
c4:00:75:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:25:49 2026 by rpki-client