Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
File: C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json)
Hash identifier: B9Z51ODXPrnrfFXe1ATwJDsVnjIhy21JGTz5gqu8fJg=
Subject key identifier: 33:B4:7A:AD:A6:85:42:3F:A1:34:5E:53:6A:62:43:84:D1:E8:B0:80
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial: 019DA2D338D734BDC56E1FAE6914BF766DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
Manifest number: 18CA
Signing time: Sat 18 Apr 2026 23:00:44 +0000
Manifest this update: Sat 18 Apr 2026 23:00:44 +0000
Manifest next update: Sun 19 Apr 2026 23:00:44 +0000
Files and hashes: 1: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: QFjx0y7yTPZGoxOXDr+d2g0o0p3ROSUORrcLmsvuiCM=)
2: OWJuJrNuwbbFDFgA56uuuJeCvL8.roa (hash: /ZFH55PDC4s2E7M5LW3jwm4Uto4IlWIhyCzpet8FzZY=)
3: jHOSi9_oJekIEx4EmUwyddmGDN8.roa (hash: Ntcg6Twu+N2HgOTH++SeVjtpqrilgEpyp5kKVNoLrTg=)
4: kN99vFdbAempQ2A2_gxGNJ7ed64.roa (hash: 1v+1gMi8uf5SBhW1FJK7tf586/slgxWuh9VuZL56b4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:38:d7:34:bd:c5:6e:1f:ae:69:14:bf:76:6d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Validity
Not Before: Apr 18 23:00:44 2026 GMT
Not After : Apr 19 23:00:44 2026 GMT
Subject: CN=33b47aada685423fa1345e536a624384d1e8b080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6d:bb:b6:17:3e:f6:86:a9:f1:54:29:33:f1:
86:b8:4e:9f:36:ac:ac:16:5f:dd:e1:48:0c:8c:af:
0c:57:46:08:ca:36:ad:3d:a2:6d:4b:03:8c:98:00:
26:9c:e2:40:ed:7d:ef:8e:21:97:55:f0:ad:c5:e7:
37:4c:66:09:53:fe:09:bc:c9:bb:7c:61:c8:e3:6b:
e4:79:29:2a:82:09:e5:d7:ef:35:f7:2f:5b:c6:48:
d0:28:a6:34:5f:47:91:ec:40:7b:46:0a:d4:73:db:
63:12:6b:7a:42:e6:1d:bd:61:5b:63:82:72:08:26:
de:75:38:76:4d:dc:a9:86:4f:48:8e:e3:13:55:c1:
07:24:8b:5c:70:5f:f1:b9:36:00:9e:d8:6c:68:77:
87:18:04:6d:5b:e9:08:ea:25:5c:3a:e8:04:b3:63:
02:6a:3a:62:67:ce:a9:57:04:cd:37:d5:75:d0:21:
a8:e4:8f:56:cb:25:c9:58:f2:ca:c1:20:03:1e:b4:
95:00:db:93:02:01:d9:7c:57:b1:e3:9d:a2:8a:88:
3b:83:be:f6:4b:dd:cc:02:64:0e:e3:92:39:86:1e:
01:31:9b:bf:f8:3e:73:47:71:2b:54:09:4d:42:2c:
63:c8:b8:c1:29:c9:e3:18:ed:11:1d:5b:d1:f8:ba:
0e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B4:7A:AD:A6:85:42:3F:A1:34:5E:53:6A:62:43:84:D1:E8:B0:80
X509v3 Authority Key Identifier:
keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c6:e8:37:2b:d5:67:49:da:0b:60:75:a4:18:da:b6:23:bf:
da:80:b2:5c:73:fc:e2:b9:a7:c0:96:1f:dc:be:0b:9b:6a:b0:
e3:55:c4:7c:c4:3f:c5:d1:f7:ea:09:ef:27:97:a1:b1:e4:ba:
86:b3:3c:48:f4:52:01:06:73:06:da:54:ea:35:54:a4:84:b9:
c0:84:c8:5b:c4:b8:71:1f:65:5a:da:91:c3:81:d9:0c:f7:1b:
c9:76:07:61:96:40:b1:7d:c1:fb:47:ac:95:ba:4c:52:87:3f:
46:66:7f:9f:16:09:1f:9a:0b:4f:f5:51:8f:2a:6b:d8:09:d3:
fb:af:e7:68:01:f8:38:8a:20:98:ec:21:1f:8d:d0:56:95:1f:
ea:ca:31:d1:cd:fd:26:28:53:d8:09:a9:44:49:83:1a:be:bf:
fc:e2:7b:20:20:4b:a5:af:a2:a7:cf:0d:24:21:90:63:73:fa:
12:42:89:8f:82:de:ae:00:a2:14:9d:ac:a5:e9:67:85:eb:ad:
21:ec:ba:95:9b:86:b7:d0:8d:50:12:a5:4d:57:02:60:d7:61:
32:cb:ee:98:09:d5:de:bc:d0:93:a8:ba:9b:cc:75:fb:54:70:
95:cd:f5:4f:60:d4:d4:26:b2:4f:80:5f:c8:1b:af:8d:53:50:
e2:78:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:39 2026 by rpki-client